The Achilles Heel of Cybersecurity

By Tom Kellermann, Head of Cybersecurity Strategy for VMware – As geopolitical tension manifests in cyberspace, four rogue nation-states launch asymmetrical cyber-attacks; 100% prevention is impossible. In 2021 cyber cartels are hijacking the digital transformation of corporations and escalating intrusions by leveraging destructive attacks. We must modernize our defenses. Ground truth is imperative, and thus detection and response must become holistic. In most intrusions, adversaries hunt for Active Directory (AD) to escalate privileges and masquerade as authorized users. AD is the prime target in 90% of intrusions. Identity has become the new perimeter and, therefore, our Achilles heel. We must increase identity security visibility to achieve intrusion suppression. I joined the advisory board of Attivo Networks because I fundamentally believe in the dire need to automate identity compromise detection and response.

Attivo’s world-class leadership team has dominated the deception space but recently recognized that significant investment is required to protect AD. They developed a cutting-edge platform that defends identities across the entire enterprise with identity-based, least-privilege access programs and defenses capable of detecting attack escalation and lateral movement on-premises and in the cloud. The platform protects against attacks that attempt to harvest credentials; and leverages fake credential lures and decoy systems that attract and detect attackers in real-time, raising evidence-based alerts while actively engaging with them so that the platform can safely analyze their attack activity. This groundbreaking platform serves as the cornerstone or defense against the cyber-Achilles heel of AD. Your journey to Zero Trust begins with protecting Active Directory.

Attivo has long been a partner of Carbon Black, and now it is time to strengthen that partnership. I look forward to collaborating with Attivo Networks to help organizations understand Active Directory risks & attack activity and design holistic deception and data cloaking strategies.

Follow Tom on Twitter: @TAKellermann