Cyber Hub – Secure Users & Access

The traditional security perimeter is disappearing, being replaced by border-less workplaces where data roams freely among cloud, network and endpoint applications. This new paradigm entails a widened attack surfaces, leaving organizations exposed to data breaches and cyber-attacks.

保障使用者和存取安全

8Base Ransomware Group

8Base is a ransomware group that first emerged in 2022 but ramped up its operations and refined its methods ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

SSPM vs CASB

Companies have a few different options for improving the security of their cloud environments, and, especially, the SaaS ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

保障使用者和存取安全

SaaS Security Posture Management (SSPM)

A SaaS Security Posture Management (SSPM) solution is a cybersecurity solution designed to manage the security posture of ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

保障使用者和存取安全

Akira Ransomware

Akira is a new ransomware variant that was first identified in the wild in Q1 2023. This malware variant ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Locker Ransomware

Traditionally, ransomware extorts money from its victims by encrypting their files. Without access to the decryption key used ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

Phishing Detection Techniques

Phishing attacks are a common threat and are used to launch a variety of cyberattacks. A successful phishing ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Double Extortion Ransomware?

Originally, ransomware used the threat of data loss to inspire its victims to pay a ransom demand. It ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Triple Extortion Ransomware?

Originally, ransomware used a single extortion vector, encrypting data and demanding a ransom for the decryption key. Double ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Crypto Ransomware?

Crypto ransomware — also known as crypto-malware is malware that encrypts files on a device and demands a ransom ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Socgholish Malware

Socgholish is a malware variant first discovered in the wild in 2018. The malware acts as a downloader and ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

端點防護

What is Unified Endpoint Security (UES)

Unified endpoint security (UES) is an evolving approach to endpoint security focused on converging multiple endpoint security capabilities ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

Why You Must Have AI For Email Security

While the concepts of artificial intelligence (AI) and machine learning (ML) have been around for decades, AI has ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

What is Quishing (QR Phishing)?

Quishing is essentially a form phishing attack that cleverly uses QR codes to trick users into visiting malicious ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

什麼是託管 SOC？

The Security Operations Center (SOC) is the heart of an organization’s defenses against cyber threats. The SOC ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

什麼是 SOC 自動化？

The Security Operations Center (SOC) is the heart of an organization’s security program. SOC responsibilities include performing ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

Interplanetary File System (IPFS) Phishing Attack

The Interplanetary File System (IPFS) is a decentralized file storage and access protocol designed to complement blockchain technology. ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

XDR

7 XDR Best Practices

Organizations face a cyber threat landscape that is rapidly growing and becoming more sophisticated. Cyber threat actors have ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

8 種網路釣魚技術

Phishing is one of the most common cyberattacks in existence. Many cybercrime groups use phishing as an initial ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

What Is Clone Phishing?

Clone phishing is a type of phishing attack in which the attacker duplicates an email that someone has ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Qakbot 惡意軟體

Qakbot — also known as Qbot and Pinkslipbot— was originally a banking trojan that was first discovered in the ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

網路釣魚

Smishing vs. Phishing

Phishing has long been one of the most common cyberattacks that organizations face. These attacks are designed to ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

How to Spot a Phishing Email

Phishing has long been one of the most common cyber threats that organizations face. Phishing attacks can be ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

什麼是營運安全 (OPSEC)？

Operational Security (OPSEC) is a term that originated with the U.S. military during the Vietnam War. It ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

Social Engineering vs Phishing

The popular conception of cyberattacks and hacking is of someone exploiting a vulnerability in software to gain access ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

Spoofing vs Phishing

Social engineering attacks are designed to target people rather than attempting to exploit vulnerabilities in software or an ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

Spear Phishing vs Phishing

Phishing attacks are some of the most common cyberattacks in existence. One of the reasons for their ubiquity ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

惡意軟體與病毒

The terms malware and virus are often used loosely and interchangeably to mean malicious or unwanted software installed ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

什麼是 NJRat 惡意軟體？

NJRat — also known as Bladabindi — is a remote access trojan (RAT) that was first discovered in the wild ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Hiddad Android Malware

Hiddad is an Android malware variant focused on ad fraud. The mobile malware distributes unwanted advertisements to users ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

SpinOk Malware

SpinOk is a mobile malware variant that targets Android devices. It is spyware that collects information from infected ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

NanoCore RAT 惡意軟體

NanoCore is a Windows Remote Access Trojan (RAT) that has been active in the wild since 2013. The RAT ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

AhMyth Malware

AhMyth is an Android malware variant that operates as a remote access trojan (RAT). It commonly masquerades as ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

惡意軟體

GuLoader Malware

GuLoader is a type of trojan malware that was first discovered in December 2019. It commonly acts as the ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

惡意軟體分析

惡意軟體分析是一個透過分析可疑或惡意執行檔，以更好地了解其目的的計畫流程⋯⋯

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

惡意軟體檢測：方法和技術

惡意軟體是為了要感染系統並達成各種不良目的的所建構出來的惡意軟體。惡意軟體可以竊取或⋯⋯

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

什麼是鍵盤側錄程式？

鍵盤側錄程式是能夠記錄使用者在電腦上按鍵鍵擊資料的程式。這些程式能⋯⋯

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

端點防護

What is a Device Posture Check (DPC)?

Endpoints are one of the biggest security threats to an organization, especially with the rise of remote work. ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

行動安全

裝置即服務 (DaaS)

The growth of remote and hybrid work has resulted in a surge in mobile device usage for business. ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

端點防護

What is a Vulnerability Assessment?

A vulnerability assessment is an effort to identify vulnerabilities in a computer or network. This is often performed ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

What Is a Computer Virus?

A computer virus is a type of malware that can replicate itself, spreading to infect new systems. However, ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

端點防護

什麼是曝光管理？

As companies update and expand their IT infrastructure, they introduce new vulnerabilities and attack vectors. At the same ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

What Is a Computer Worm?

A computer worm is malware that is capable of spreading by itself with no human interaction. Wannacry is ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

端點防護

Endpoint Security as a Service

Endpoint security is the practice of protecting endpoints — computers, mobile devices, servers, etc. — against cyber threats. Historically, this ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

What is an Email Security Policy?

An email security policy defines rules about the use of email within an organization. By laying out the ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Patch Management?

Software often contains errors or bugs that can impact its functionality or security. Some of these bugs are ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

什麼是人肉搜尋？

Doxing — also spelled doxxing — is a term derived from the phrase “dropping dox (documents)”. Doxing is when a ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

What is Wiper Malware?

A wiper is malware that deletes or destroys an organization’s access to files and data. This type ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

什麼是安全營運 (SecOps)？

SecOps is a collaboration between an organization’s security (Sec) and operations (Ops) teams. The goal of SecOps ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

使用者和實體行為分析 (UEBA)

User and Entity Behavior Analytics (UEBA) solutions are designed to identify cybersecurity threats based on abnormal behavior. Once ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

什麼是 PGP 加密？

Pretty Good Privacy (PGP) is a tool for email encryption. It was first developed in 1991, and, in the ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

BYOD Security

Bring Your Own Device (BYOD) policies allow employees to use personal devices — including laptops, mobile devices, USB drives, ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Joker Malware

Joker is spyware that collects SMS messages, contact lists, and information about infected devices. Additionally, Joker has the ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Anubis Malware

Anubis began as a banking trojan targeting Android devices. However, it has gained additional functionality over time, including ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

What is Vidar Malware?

Vidar is an infostealer malware operating as malware-as-a-service that was first discovered in the wild in late 2018. The ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Adware?

Adware is a type of malware or unwanted software designed to deliver targeted advertisements on infected computers. Adware ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

惡意軟體

Hydra Malware

Hydra, a banking trojan that targets Android devices, was first discovered in 2019. By tricking users into enabling dangerous ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

What Is a Secure Email Server?

An email server is responsible for sending and receiving emails for an organization. This is a crucial role ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

IcedID Malware

IcedID is a banking trojan that was first discovered in the wild in September 2017. In October 2022, it was ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

惡意軟體

Snake Keylogger Malware

Snake Keylogger is a relatively new credential stealer and keylogger that was first discovered in the wild in ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

保障使用者和存取安全

勒索軟體防護最佳實踐

Emerging as one of the leading threats to corporate cybersecurity in 2022, ransomware attacks are growing more frequent, and ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

EDR

Enterprise Endpoint Security

Endpoint security is a critical part of any organization’s security strategy. However, enterprises face advanced security threats ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

What is Crypto Malware?

In some blockchain platforms, such as Bitcoin or Monero, miners can earn money by performing computationally-expensive operations. Cryptojackers ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

網路釣魚

What is Phishing Protection?

Phishing attacks, a major threat to corporate and personal cybersecurity, can deliver malware and steal sensitive data or ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

What is Fileless Malware?

Historically, most malware was delivered as files, which would be downloaded to a computer, written to its memory, ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

Security Operation Center (SOC) Framework

The cyber threat landscape is rapidly evolving, and companies are facing growing numbers of highly sophisticated threats. Ransomware, ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

XDR

XDR vs. SIEM

When designing its security infrastructure, an organization has many potential solutions to choose from. With the sea of ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

11 種社會工程攻擊

Using deception and manipulation, social engineering attacks induce the target into doing something that an attacker wants. The ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

EDR

EDR vs. SIEM

Endpoint detection and response (EDR) and security information and event management (SIEM) solutions are both designed to improve ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Email Scanning?

Email is one of the most widely used forms of corporate communication, but it is also a common ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

Security Operations Center (SOC) Best Practices

The Security Operations Center (SOC), responsible for protecting the organization against cyber threats, includes not only security personnel ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

端點防護

Types of Endpoint Security

Corporate networks contain a diverse set of endpoints that are common targets of cyberattacks. Endpoint security is the ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

EDR

What is Endpoint Security Management?

The growth of remote work and the increasing use of off premise endpoint and mobile devices for business ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Tofsee Malware

Tofsee is a modular trojan malware. Once installed on an infected computer, it can be used to send ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Remcos Malware

Remcos is a remote access trojan (RAT) and one of the top ten malware variants of 2021. After infecting ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Glupteba Malware

Glupteba is a trojan horse malware that is one of the top ten malware variants of 2021. After infecting ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Phorpiex Malware

Phorpiex is a botnet malware and one of the leading malware threats of 2021. The Phorpiex botnet is well-established ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

資料外洩防護

什麼是 Cloud DLP（資料外洩防護）？

Data loss prevention (DLP) solutions are essential to protect the sensitive information of an organization and its customers. ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Ramnit 惡意軟體

Ramnit is a banking trojan that was first discovered in 2010. It is one of the top 5 banking trojans ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Lokibot Malware

Lokibot is infostealing malware that was first discovered in 2016. Between 2020 and 2021, the malware experienced a significant drop but ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

XMRig Malware

XMRig is open-source software designed for mining cryptocurrencies like Monero or Bitcoin. However, it is also commonly abused ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

The Different Types of Email Security Services

Email is one of the most common and established platforms for corporate communications. Companies use emails to communicate ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

康迪勒索軟體集團

Conti is a high-profile ransomware group responsible for multiple high-impact attacks. The group is believed to be based ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

什麼是 FormBook 惡意軟體？

FormBook is an infostealer malware that was first discovered in 2016. It steals various types of data from infected ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

What is Dridex Malware?

Dridex is a Windows-focused banking trojan that has since expanded its capabilities to include infostealing and botnet capabilities. ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

Agent Tesla Malware

Agent Tesla is an example of an advanced remote access trojan (RAT) that specializes in the theft and ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

端點防護

Top 8 Endpoint Security Best Practices

Corporate endpoints are a common target for cyberattacks. Threat actors attempt to gain access to corporate devices to ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

行動安全

How to Prevent iPhone Calendar Spam

Phishing is seen as a threat that occurs via email, text messages, social media, and other messaging platforms. ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

行動安全

What Is SIM Swapping?

With the growth of multi-factor authentication (MFA), smartphones have become a critical part of an organization’s cybersecurity ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

MDR

MDR 與安全資訊與事件管理

Many organizations’ security teams are overwhelmed by expanding responsibilities and a rapidly evolving threat landscape. Various solutions to ...

閱讀更多內容 5 minute read

惡意軟體

Emotet Malware

Emotet is a sophisticated, self propagating Trojan . While Emotet began as a banking trojan, its modular design has ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

什麼是間諜軟件？

Spyware is a type of malware designed to collect information about the users of an infected computer. Spyware ...

閱讀更多內容 5 minute read

保障使用者和存取安全

How Should Companies Handle Ransomware?

In 2021, high-profile ransomware attacks, such as the Colonial Pipeline and Kaseya hacks, caused significant disruptions to supply chains ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

什麼是電子郵件加密？

Encryption functions are algorithms designed to render data unreadable to anyone that does not have the decryption key. ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

電子郵件安全功能

Malicious emails are behind 90% of cyberattacks and deliver 75% of ransomware. These phishing emails are designed to trick or ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is BYOD (Bring Your Own Device)?

Bring Your Own Device (BYOD) programs allow employees to work from their own personal devices rather than a ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

EDR

EDR vs Antivirus

Endpoint security is a vital component of an enterprise cybersecurity strategy. Antivirus (AV) and endpoint detection and response (...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

端點防護

What is Advanced Endpoint Protection (AEP)?

With the shift to remote work and adoption of Internet of Things (IoT) and mobile devices, the endpoint ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

What is URL Phishing?

A link is not always what it seems. Hackers have gone to great lengths to create convincing websites ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

保障使用者和存取安全

MITRE Engenuity ATT&CK 評估

The MITRE Corporation is a US Government federally funded research and development center (FFRDC), and the MITRE Engenuity ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is a Whaling Attack?

A whaling attack is a form of spear phishing attack, where the cyber threat actor researches and tailors ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

Social Engineering Attacks

Social engineering is a security threat that targets humans rather than computers or software. Social engineers use a ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

人為操作的勒索軟體

Ransomware has emerged as a dominant cyber threat and one of the most expensive types of cyberattacks that ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

What is Cloud Email Security?

According to Verizon’s 2021 Data Breach Investigations Report (DBIR), phishing is a leading cause of data breaches, accounting ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

What Is a Secure Email Gateway (SEG)?

Secure Email Gateways (SEGs) are an email security solution that sits inline on emails’ path from the public ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

行動安全

Mobile Security Trends in 2022

The pandemic had a dramatic impact on business as usual for many organizations, causing many to shift to ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Unified Endpoint Management (UEM)?

The COVID-19 pandemic drove a massive shift to remote work. After this forced experiment, many organizations are looking ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

什麼是刺激？

Smishing is a form of phishing attack that targets mobile devices. Instead of sending phishing content over email, ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

What is Email Spoofing?

Simply put, phishing emails are designed to trick the recipient into believing that they are legitimate. A common ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What Helps Protect from Spear Phishing?

Spear phishing is a form of phishing attack that is targeted at an individual or a small group. ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Account Takeover (ATO)?

In an account takeover (ATO) attack, an attacker gains unauthorized access to the credentials for a user’s ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

如何封鎖網路釣魚電子郵件？

Phishing emails are one of the most common cyber threats that an organization may face. Phishing attacks can ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

5 大電子郵件安全威脅

Email is one of the most common vectors by which cybercriminals gain access to corporate networks and steal ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

EDR

電解決反應對抗原因素

Endpoint detection and response (EDR) and managed detection and response (MDR) are both solutions designed to help improve ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

什麼是遠端存取木馬（RAT）？

Remote access trojans (RATs) are malware designed to allow an attacker to remotely control an infected computer. Once ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

什麼是維希攻擊？

Vishing – a portmanteau of voice and phishing – attacks are performed over the phone, and are considered a type ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

勒索軟體檢測技術

The ransomware threat continues to evolve, and high-profile and extremely damaging ransomware infections are becoming increasingly common. Minimizing ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

不同類型的勒索軟體

Ransomware is a top-of-mind security concern for many organizations. However, not all ransomware attacks are the same. A ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

What is a Phishing Email?

Phishing attacks are some of the most common cyberattacks and one of the main ways in which cybercriminals ...

閱讀更多內容 5 minute read

惡意軟體

Android Malware

Mobile device malware is a significant threat to corporate and personal privacy and security. As mobile devices are ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

勒索軟體恢復：如何從勒索軟體中恢復

Ransomware has been around for decades, but ransomware attacks have surged in recent years after the WannaCry ransomware ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

NOC vs SOC - What’s the Difference?

The goal of a Network Operations Center (NOC) and a Security Operations Center (SOC) is to ensure that ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

行動安全

What is a Mobile App Reputation Service (MARS)?

Mobile applications are increasingly used for business purposes as companies adopt bring your own device (BYOD) and hybrid ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

什麼是加密劫持？

Cybercrime is a business, and cybercriminals are constantly looking for ways to monetize their attacks. Along with ransomware, ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

端點防護

什麼是高階威脅防護 (ATP)？

Cyberattacks are growing more common and sophisticated, as demonstrated by the recent surge in phishing and ransomware attacks. ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

什麼是供應鏈攻擊？

Supply chain attacks are designed to exploit trust relationships between an organization and external parties. These relationships could ...

閱讀更多內容 5 minute read

行動安全

Mobile Device Security Best Practices for 2022

As employees are increasingly using mobile devices for business purposes, protecting these devices against attack requires organizations to ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

行動安全

What is Mobile Application Security?

The COVID-19 pandemic and the rise of bring your own device (BYOD) policies have made mobile devices a ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

SOAR 安全性-什麼是安全協調、自動化和響應？

Security Orchestration, Automation, and Response (SOAR) tools are designed to integrate multiple components, often from different vendors. They ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

什麼是遠端瀏覽器隔離（RBI）？

Remote browser isolation (RBI), also known as web isolation or browser isolation, is a web security solution designed ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

Office 365 安全

Top 3 Office 365 Security Concerns

Microsoft’s Office 365 is one of the most commonly used platforms of cloud-based applications. Globally, Office 365 is used ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

MDR

MDR vs XDR

Many organizations’ security teams are struggling to keep up with their ever-expanding workloads. The combination of a growing ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

XDR

What is Security Analytics?

Data is essential to effective incident detection and response; however, many security operations centers (SOCs) are drowning in ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

MDR

MDR vs MSSP

For many organizations, maintaining a full-fledged in-house security operations center (SOC) is not a viable option. The expanding ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

行動安全

什麼是行動版 MITRE ATT&CK Matrix（矩陣）？

The MITRE ATT&CK framework breaks down the lifecycle of a cyberattack into a set of objectives ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

什麼是 Web 安全？

On a daily basis, web browsing has the potential of exposing employees to a number of threats, including ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What Is Credential Stuffing?

In a credential stuffing attack, cybercriminals take advantage of weak and reused passwords. Automated bots will take a ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

什麼是 Web 過濾？

Web filtering software monitors and manages the locations where users are browsing on the Internet, enabling an organization ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

零日攻擊

What is a Zero Day Exploit?

Zero day exploits target vulnerabilities that a software manufacturer has not yet patched. By taking advantage of largely ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

零日攻擊

What is Zero Day Malware?

Zero day malware is malware that exploits unknown and unprotected vulnerabilities. This novel malware is difficult to detect ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Virtual Desktop Infrastructure (VDI)?

Desktop virtualization eliminates the need for employees to have physical access to corporate devices – it allows remote workers ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

端點防護

什麼是端點加密？

Endpoint encryption uses encryption algorithms to protect the files stored on an endpoint. This is an essential part ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

DarkSide 勒索軟體組織解說

DarkSide is a relatively new ransomware group that has been responsible for high-profile attacks such as the Colonial ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

零日攻擊

How to Prevent Zero Day Attacks

Zero-day attacks are unknown threats that easily circumvent signature-based security solutions and therefore pose an exceptionally dangerous risk ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

Business Email Compromise (BEC) - The different types of attacks

Business email compromise (BEC) is a specific type of phishing attack, a spear phishing attack to be precise – ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is MITRE ATT&CK Framework?

The MITRE ATT&CK framework, a tool created by the MITRE Corporation, breaks down the cyberattack lifecycle ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

DearCry 勒索軟體

DearCry, a ransomware variant, is designed to take advantage of four recently disclosed vulnerabilities in Microsoft Exchange. Once ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

EDR

EDR vs EPP：為什麼要選擇？

Endpoint Detection and Response (EDR) and Endpoint Protection Platforms (EPP) are both powerful components of an endpoint security ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Next-Generation Antivirus (NGAV)?

Next-generation antivirus (NGAV) solutions are designed to update the legacy antivirus to address the modern cybersecurity threat landscape. ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

安全操作中心 (SOC) 角色和職責

A Security Operations Center (SOC) is responsible for enterprise cybersecurity. This includes everything from threat prevention to security ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

Office 365 安全

Office 365 安全最佳實踐

Even before the COVID-19 pandemic, organizations were increasingly adopting Office 365 and similar Software as a Service (SaaS) solutions ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Spear Phishing?

By definition, spear phishing is a highly-targeted phishing attack. Like any phishing attack, it can be performed over ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

端點防護

什麼是端點保護平台 (EPP)？

Endpoint security is now more important than ever as ransomware attacks are targeting the endpoint, encrypting its files ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

什麼是威脅檢測和回應（TDR）？

Prevention is naturally the first pillar of cybersecurity – you can prevent over 98% of threats targeting your organization. But ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

5 Email Security Best Practices in 2023

Email is one of the most widely used media for business communications, yet this also makes it a ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

Office 365 安全

What is Office 365 Security?

Microsoft Office 365 is one of the most widely-used Software as a Service (SaaS) platforms in the world, currently ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

行動安全

6 大行動安全威脅以及如何防止

Mobile devices have become an increasingly vital component of many organizations’ IT infrastructure. The surge of remote work ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

行動安全

什麼是移動安全？

Mobile security, which refers to the protection of mobile devices against cybersecurity threats, is a top-of-mind concern for ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

勒索軟體即服務 (RaaS)

Ransomware is one of the biggest threats to enterprise cybersecurity, and it continues to grow. In Q3 2020 alone, ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

SOC vs SIEM - The Role of SIEM Solutions in SOC

SIEM and SOC are two of the biggest and most important acronyms in cybersecurity. Understanding the SOC vs ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

SOC 即服務

A Security Operations Center (SOC) is the team within an organization responsible for detecting, preventing, investigating, and responding ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

EDR

EDR VS XDR

Many cyberattacks begin at the endpoint. Phishing emails and similar attack vectors create an initial foothold on a ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

What Ransomware Allows Hackers to Do Once Infected

Ransomware is a type of malware that became popular with the WannaCry attack in 2017. This particular type of ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

勒索軟體和惡意軟體之間的區別

Malware is a general term that covers a wide variety of different types of malicious software (which is ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

The 5 Most Common Types of Malware

Malware is malicious software designed to infect a user’s computer and achieve a variety of goals, including ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

EDR

Endpoint Detection and Response (EDR) Benefits

As organizations become more distributed and telework becomes more common, the endpoint has become a vital component of ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

資料外洩防護

Data Loss Prevention (DLP) Solutions

For the modern business, data is often its most valuable possession. Whether it’s client lists, insights into ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

Ransomware Removal - How To Remove Ransomware?

Ransomware is a type of malware designed to encrypt the files on a computer and demand a ransom ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

迷宮勒索軟體 – 雙重勒索攻擊

Ransomware is a growing threat to enterprise network security. In the third quarter of 2020, Check Point Research reported ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

惡意軟體

什麼是行動惡意軟體？

With the transition to widespread remote work in the wake of COVID-19, mobile security has become more important ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Next Generation Endpoint Security?

There are all kinds of potential threats posed by a remote workforce, including the use of personal devices ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Content Disarm and Reconstruction (CDR)?

Content disarm and reconstruction (CDR), also known as Threat Extraction, proactively protects against known and unknown threats contained ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

有史以來最常見的 5 種網路釣魚詐騙

Phishing attacks are a popular attack vector for cybercriminals because they are simple and effective. A well-crafted phishing ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

選擇下一個網路釣魚防護解決方案時的 4 個關鍵考慮因素

One of the most common types of cyberattacks, phishing attacks are getting more sophisticated by the day. These ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

如何提高 SOC 的有效性

The cybersecurity threat landscape is rapidly evolving, and organizations’ attack surfaces are expanding due to widespread adoption of ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

XDR

XDR Security - What is Extended Detection and Response?

The cybersecurity threat landscape is rapidly evolving and expanding. In response, many organizations are working to evolve their ...

閱讀更多內容 7 minute read

MDR

什麼是管理式偵測與回應（MDR）？

The cybersecurity threat landscape is evolving, and organizations need advanced security solutions to keep up. Endpoint detection and ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

5大網路釣魚防護原則

Phishing emails are one of the most common methods that cybercriminals use to gain access to an organization’...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

如何防止網路釣魚攻擊

Some of the simplest and most effective techniques used by cybercriminals to achieve their goals are what are ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

SOC

安全操作中心 (SOC) 的重要性

The cyber threat landscape is evolving rapidly, and protecting against potential cyberattacks requires rapid monitoring and response. The ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

電子郵件資安

為什麼電子郵件安全性很重要

With over 90% of attacks on organizations starting from a malicious email, relying on your built-in security might leave ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

行動安全

What is Mobile Device Security?

Mobile Device Security is a combination of strategies and tools that secure mobile devices against security threats. Although ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

電子郵件資安

給員工的電子郵件安全意識

With cyber attacks evolving every day, email attacks remain the number one vector by which malware is delivered ...

閱讀更多內容 5 minute read

電子郵件資安

如何保護您的電子郵件

Gone are the days of mass phishing emails telling you have an inheritance waiting for you if you ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

勒索軟體的演變

When a cyber-criminal wants to make a quick bundle of cash, they use Ransomware to infect a computer ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

Do's and Don'ts for Ransomware

Ransomware is one of the most popular and most significant threats in the world of cybersecurity. Worldwide, there ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

行動勒索軟體

Hackers and cybercriminals are constantly evolving – trying new tactics, ditching the ones that no longer work, and emphasizing ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

什麼是移動威脅防禦（MTD）？

Mobile threat defense (MTD) is sophisticated, dynamic protection against cyber threats targeted against mobile devices. With MTD, protection ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

電子郵件資安

什麼是電子郵件安全？

Email security refers to the practice of protecting email against potential cybersecurity threats. Phishing, account takeover, and other ...

閱讀更多內容 7 minute read

勒索

Wannacry 勒索軟體

Allegedly developed by the North Korean Lazarus Group, WannaCry combined exploit code stolen from the US government with ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

What is Sandboxing?

Sandboxing is a cybersecurity practice where you run code, observe and analyze and code in a safe, isolated ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

勒索

Ryuk Ransomware: Definition and Protection

The Ryuk ransomware variant was first discovered “in the wild” in August 2018. Since then, it has grown in ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

勒索

最近的勒索軟體攻擊

One of the most famous malware variants in existence today, ransomware – which enables a cybercriminal to deny a ...

閱讀更多內容 閱讀時間 8 分鐘長的閱讀小品

勒索

如何防止勒索軟體

Ransomware has proven to be one of the most effective and profitable attacks for cybercriminals. A large part ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

EDR

什麼是端點檢測和響應？

Endpoint Detection and Response (EDR) is an integrated, layered approach to endpoint protection that combines real-time continuous monitoring ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

網路釣魚

什麼是網路釣魚？網路釣魚攻擊的類型

Phishing is a type of cybersecurity attack during which malicious actors send messages pretending to be a trusted ...

閱讀更多內容 閱讀時間 8 分鐘長的閱讀小品

零日攻擊

什麼是零時差攻擊？

There are many types of security vulnerabilities and opportunities for cyberattacks. Businesses are responsible for keeping their organizations ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

行動安全

What is MDM (Mobile Device Management)

Mobile Device Management (MDM) is the process of managing mobile devices, largely in terms of usage and security. ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

SOC

什麼是 SOC（安全操作中心）？

The function of the security operations center (SOC) is to monitor, prevent, detect, investigate, and respond to cyber ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

資料外洩防護

什麼是資料外洩防護 (DLP)

Data loss prevention (DLP) is a cybersecurity methodology that combines technology and best practices to prevent the exposure ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

保障使用者和存取安全

What is Antivirus

Antivirus software is a class of applications that protect computers and remove malicious software or code designed to ...

閱讀更多內容 2 minute read

端點防護

什麼是端點防護？

Endpoint protection involves monitoring and protecting endpoints against cyber threats. Protected endpoints include desktops, laptops, smartphones, tablet computers, ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品

保障使用者和存取安全

Ransomware Attack - What is it and How Does it Work?

Ransomware is a malware designed to deny a user or organization access to files on their computer. By ...

閱讀更多內容 11 minute read

惡意軟體

什麼是惡意軟體？

A portmanteau of “malicious software”, malware is software designed to achieve malicious purposes on an infected computer. Essentially, ...

閱讀更多內容 閱讀時間 6 分鐘長的閱讀小品

保障使用者和存取安全

What is Hacktivism?

Derived from combining the words ‘Hack’ and ‘Activism’, hacktivism is the act of hacking, or breaking into a ...

閱讀更多內容 閱讀時間 3 分鐘長的閱讀小品

保障使用者和存取安全

What is a Botnet?

A botnet is a network of infected computers that work together to carry out an attacker’s goals. ...

閱讀更多內容 閱讀時間 4 分鐘長的閱讀小品