In this report, BlackBerry researchers examine the activities of five related adversarial groups who have spent the better part of the last decade successfully targeting organizations in cross-platform attacks while operating relatively, if not entirely undetected in multiple strategic and economic espionage operations.

“More than 70 percent of cyber attacks target small businesses,” according to a National Cyber Security Alliance estimate. Yet 68 percent of small business owners in a recent survey seemed oblivious to the threat. Why the disconnect? What should they be doing to protect their business-critical systems and data? How can small businesses wring maximum ...

Small and medium-sized businesses (SMBs) that rely on legacy AV tools are running out of time. Attacks slip through easily, IT staff can’t keep up with endless signature file updates, and end-users complain about sluggish system performance during scans. Fortunately, next-gen solutions are now available that protect endpoints with artificial intelligence (AI) rather than signatures. ...

Why does one endpoint protection platform (EPP) prevent breaches while another only facilitates incident response? BlackBerry Cylance’s new eBook provides a concise analysis of AI’s role in cyber defense and the four key criteria for assessing EPP investments. #1: Will the EPP stop file-based and fileless malware with proven 99.1% efficacy? #2: Will it be ...

Phoenix Children’s Hospital (PCH) CISO Daniel Shuler knew the hospital’s legacy AV was no longer effective, so he retained BlackBerry Cylance’s ThreatZERO™ team to deploy CylancePROTECT® on over 4,000 PCH endpoints. Shortly thereafter, CylancePROTECT stopped a potentially crippling ransomware attack. Next, Shuler focused on closing gaps in PCH’s security stack by engaging BlackBerry Cylance’s consulting ...

There is now broad consensus among security professionals that artificial intelligence (AI) technologies can play an important role in reducing cyber risks. Exactly what that role is, however, and how it will evolve over time remains unclear for respondents to a new SANS Institute research study sponsored by BlackBerry Cylance. Opinions varied about the maturity ...

Ransomware attacks can be devastating, with effects ranging from permanent loss of irreplaceable data to life-threatening interruptions to patient care. Ransomware-as a-service groups like Satan are lowering the bar for would-be cyber criminals, offering free online toolkits that make it easy to launch attacks and hands-on help to manage campaigns and extort payments. Read our ...

ATT&CK stands for adversarial tactics, techniques, and common knowledge. The framework, created by the MITRE organization, has a mission to capture the techniques, tactics, and procedures of advanced persistent threats that target Windows, Mac, and Linux devices. ATT&CK Enterprise focuses on fingerprinting post-compromise adversaries inside enterprise environments. This white paper explores the ATT&CK Enterprise framework, ...

Endpoint protection and EDR capabilities are now standard security solutions for established enterprises. However, there are more available tools and services that could increase your organization’s security profile even further. For instance, is active threat hunting needed? Your industry may require it. Learn more in the recently published BlackBerry Cylance Cybersecurity Maturity Evaluation Guide. This ...

Ransomware is a form of extortionware that enables attackers to encrypt files in order to prevent victims from accessing their systems and data. Access can only be restored by paying the ransomware threat actor. Although law enforcement advises victims not to pay, many organizations end up paying due to the much larger potential costs of ...