Resources | Attack Surface and Vulnerability Management (2)

Attack Surface and Vulnerability Management

Jared Shephard on Securing Mobile Communications in a Digital World

Oct 01, 2024 2 min read

As a security practitioner and threat hunter extraordinaire, your goal is to identify anomalies in their daily behavior that could indicate suspicious activity.

Attack Surface and Vulnerability Management

Snitches Get Stitches – MITRE ATT&CK for Insider Threat Detection

Aug 26, 2024 1 min read

After exploitation, an attacker can perform nefarious actions that may lead to the compromise and takeover of a device or account. One of the key cycles of Harden is the vulnerability management phase.

Attack Surface and Vulnerability Management

Hard Truths About Vulnerability Management

Jul 08, 2024 2 min read

We don't have to rethink our approach to AI completely. We can apply foundational cybersecurity concepts to identify and manage risk in this new AI container.

Attack Surface and Vulnerability Management

Managing Risk for AI Systems and Applications

May 28, 2024 6 min read

Here are some recommendations for establishing better trust with generative AI systems.

Attack Surface and Vulnerability Management

Managing AI Expectations Through Cybersecurity Trust Modeling

May 14, 2024 4 min read

RADICL has recently seen an uptick in threat actors using open redirect vulnerabilities in legitimate websites to hide their phishing links.

Attack Surface and Vulnerability Management

Master of Disguise 2: The Art of Redirection

May 09, 2024 2 min read

Load More Stories

Regulatory Compliance

What is DFARS 252.204-7012? A Guide for Defense Contractors

May 14, 2026 8 min read

Regulatory Compliance

CMMC Compliance Deadline 2026: Key Dates That Affect Your DoD Contract

Apr 13, 2026 6 min read

Regulatory Compliance

CMMC Readiness Assessment: 7 Top Compliance Mistakes That Delay Readiness

Apr 13, 2026 9 min read

This is a detailed breakdown of a malicious VBS script discovered on an endpoint within RADICL’s customer base as a result of RADICL’s custom EDR detection logic. The script executes a multi-stage attack designed to achieve persistence, evade detection, and deploy a secondary payload.

Threat Hunting and Intelligence

Multi‑Stage VBScript Malware Analysis

Jul 23, 2025 7 min read

An initial access broker is a type of threat actor specializing in gaining initial persistent access to an environment.

Threat Hunting and Intelligence

Unmasking the Toy Maker Initial Access Broker

May 20, 2025 2 min read

In this campaign, Lazarus Group tricks a user into running a malicious script on their machine by having them apply for a job that is just a little too good to be true.

Threat Hunting and Intelligence

Too Good To Be True

May 01, 2025 3 min read

DIB Innovators

David Dickey on Scaling Defense Tech Hiring

Apr 30, 2026 1 min read

DIB Innovators

Jonathan Slavik on Payload Handoffs in Hours, Not Months

Apr 23, 2026 1 min read

DIB Innovators

Jackson Moses on Why Dual Use Is a Dirty Word in Defense Tech

Apr 16, 2026 1 min read

Incident Response

What Are Incident Response Solutions?

Apr 13, 2026 7 min read

On the evening of 7/25/24, CrowdStrike pushed a content update which caused Windows systems to crash and/or enter a reboot loop, rendering the systems unusable.

Incident Response

A Day in the Life: Our vSOC Responds to the CrowdStrike Incident

Jul 24, 2024 2 min read

Ransoming an espionage victim carries several advantages that can make it an ideal move for nation-state threat actors.

Incident Response

I Spy a Ransomware Attack

Jul 16, 2024 2 min read

There was a joint advisory this week (AA26-097A) warning of active exploitation of internet-facing Programmable Logic Controllers (PLCs).

Attack Surface and Vulnerability Management

Iranian APT Actors Are Targeting Your PLCs — Here's What to Do

Apr 09, 2026 2 min read

Attack Surface and Vulnerability Management

CMMC Enclave: What It Is, When It Works, and How to Build the Right Compliance Boundary

Mar 26, 2026 11 min read

Attack Surface and Vulnerability Management

Daryan Dehghanpisheh on Extending Vulnerability Management to AI

Jan 23, 2026 1 min read

Security Operations & vSOC

Top SOC Service Providers (SOCaaS) for 2026

Mar 26, 2026 11 min read

Security Operations & vSOC

Best MDR Providers for Regulated Industry & DIB Contractors (2026)

Mar 12, 2026 16 min read

DIB Innovators

Cyber Resilience at the Crossroads

Apr 10, 2025 2 min read

Micro-Ant's Charles McCarrick on Innovation and Opportunity in the DIB

DIB Innovators

Ep 1: Charles McCarrick on Innovation and Opportunity in the DIB

Dec 08, 2023 2 min read

DIB Innovators

EP 97 — Teague's Matt McElvogue on Why Operators Stop Trusting the Tech & Start Working Around It

May 12, 2026 1 min read

DIB Innovators

David Dickey on Scaling Defense Tech Hiring

Apr 30, 2026 1 min read

DIB Innovators

Jonathan Slavik on Payload Handoffs in Hours, Not Months

Apr 23, 2026 1 min read

Jared Shephard on Securing Mobile Communications in a Digital World

Snitches Get Stitches – MITRE ATT&CK for Insider Threat Detection

Hard Truths About Vulnerability Management

Managing Risk for AI Systems and Applications

Managing AI Expectations Through Cybersecurity Trust Modeling

Master of Disguise 2: The Art of Redirection

THE DIB CYBERSECURITY MATURITY REPORT 2025 EDITION

Regulatory Compliance

What is DFARS 252.204-7012? A Guide for Defense Contractors

CMMC Compliance Deadline 2026: Key Dates That Affect Your DoD Contract

CMMC Readiness Assessment: 7 Top Compliance Mistakes That Delay Readiness

Threat Hunting & Intelligence

Multi‑Stage VBScript Malware Analysis

Unmasking the Toy Maker Initial Access Broker

Too Good To Be True

Industry Analysis

David Dickey on Scaling Defense Tech Hiring

Jonathan Slavik on Payload Handoffs in Hours, Not Months

Jackson Moses on Why Dual Use Is a Dirty Word in Defense Tech

Incident Response

What Are Incident Response Solutions?

A Day in the Life: Our vSOC Responds to the CrowdStrike Incident

I Spy a Ransomware Attack

Attack Surface & Vulnerability Management

Iranian APT Actors Are Targeting Your PLCs — Here's What to Do

CMMC Enclave: What It Is, When It Works, and How to Build the Right Compliance Boundary

Daryan Dehghanpisheh on Extending Vulnerability Management to AI

Security Operations & vSOC

Top SOC Service Providers (SOCaaS) for 2026

Best MDR Providers for Regulated Industry & DIB Contractors (2026)

Operational Resilience

Cyber Resilience at the Crossroads

Ep 1: Charles McCarrick on Innovation and Opportunity in the DIB

The DIB Innovators

EP 97 — Teague's Matt McElvogue on Why Operators Stop Trusting the Tech & Start Working Around It

David Dickey on Scaling Defense Tech Hiring

Jonathan Slavik on Payload Handoffs in Hours, Not Months