Tag: cybersecurity

  • Our Secure by Design Pledge

    Our Secure by Design Pledge

    in

    By Dave Brown, Head of Security and Compliance at Andesite Building software that is secure by design is at the heart of what we at Andesite are passionate about – it’s the core of our mission and what we pursue as a security vendor. That’s why we proudly signed the CISA Secure by Design Pledge.…

  • AI can help the industry finally get SOC automation right

    AI can help the industry finally get SOC automation right

    in

    Andesite’s Chief Product Officer William MacMillan writes about how “despite massive investment in tools and technologies, many SOCs still find themselves overwhelmed by the very chaos they aim to control.” “Analysts are drowning in data, jumping between disconnected tools, and trying to make sense of endless alerts. The result? An epidemic of burnout among the talented…

  • Analyst Burnout Is an Advanced Persistent Threat

    Analyst Burnout Is an Advanced Persistent Threat

    in

    On Dark Reading, Andesite’s Chief Product Officer William MacMillan writes about how for too long, cybersecurity analysts have been treated as mere cogs in a machine and it’s time to change that and revolutionize security operations. “In the battle against cyber threats, we’re losing our most vital asset: our people. While the industry fixates on…

  • A Framework for Human-AI Partnership in the SOC

    A Framework for Human-AI Partnership in the SOC

    in

    Andesite’s Chief Product Officer William MacMillan argues on SC Media that so far the attempts to automate the Security Operations Center (SOC) have failed. Almost 20 years since the rise of the SIEM, and 10 years after SOAR platforms first hit the market, SOCs are still struggling. Analysts are drowning in an “everywhere data” environment,…

  • Microsoft-CrowdStrike’s Outage Heralds ‘Increased Vulnerabilities’ Period

    Microsoft-CrowdStrike’s Outage Heralds ‘Increased Vulnerabilities’ Period

    in

    A massive system outage disrupted systems around the world, grounding flights, disrupting health care, transport and logistics, banking services and critical infrastructure. The issue hit computers running Microsoft Windows operating system and CrowdStrike software. “CrowdStrike is actively working with customers impacted by a defect found in a single content update for Windows hosts,” the company…

  • How the CrowdStrike outage carved out new opportunities for hackers

    How the CrowdStrike outage carved out new opportunities for hackers

    in

    On Nextgov/FCW, former U.S. officials and security practitioners are wondering how a defective CrowdStrike patch for Windows systems fell through the cracks and created more cascading security risks. CrowdStrike will likely survive and move forward, but, reputationally, it can’t afford another incident like this, said William MacMillan, a former CISO at the CIA. “The update…

  • Venture Beat: CrowdStrike’s IT outage makes it clear why cyber resilience matters

    Venture Beat: CrowdStrike’s IT outage makes it clear why cyber resilience matters

    in

    A misconfigured content update released by CrowdStrike late on Thursday inadvertently triggered worldwide outages across Microsoft Windows systems, taking many of the world’s most essential services offline. CrowdStrike was attempting to update content that their Falcon Sensor uses to perform real-time threat detection and endpoint protection by monitoring system activities that identify suspicious behavior to prevent cyber…

  • Start-Ups: 10 Tips for Navigating the Headwinds Against High-Growth

    Start-Ups: 10 Tips for Navigating the Headwinds Against High-Growth

    in

    If the last two years have taught our industry anything, it’s time to retire to “cybersecurity is recession-proof” colloquialism. Not only have vendors seen cuts and challenges that they didn’t even face in the 2000 and 2008 downturns – but even internal security teams and budgets have been reduced, and defenders have fewer resources against…

  • Endpoint Security and Network Monitoring News for the Week of April 12; Andesite AI, Hexnode, DoControl, and More

    Endpoint Security and Network Monitoring News for the Week of April 12; Andesite AI, Hexnode, DoControl, and More

    in

    Andesite AI, a McLean, VA-based company dedicated to delivering technology to overburdened cybersecurity teams, emerged from stealth with $15.25m in initial funding. Co-developed by Red Cell Partners and General Catalyst, and led by CEO Brian Carbaugh, Andesite has built an advanced AI security analytics platform to “empower both private- and public-sector cyber analysts to defend…

  • Andesite AI secures $15.25m to bolster cybersecurity with advanced AI analytics

    Andesite AI secures $15.25m to bolster cybersecurity with advanced AI analytics

    in

    Andesite AI, a McLean, VA-based firm, emerged from stealth mode with a substantial $15.25m in initial funding. According to FINSMES, the company is dedicated to enhancing the capabilities of cybersecurity teams overwhelmed by sophisticated threats. The funding round was co-led by Red Cell Partners and General Catalyst, marking a robust start for Andesite AI under the…