What is a threat model? Threat modelling, as defined by OWASP, “works to identify, communicate, and understand threats and mitigations within the context of protecting something of value”. It is a way of structuring thinking around what critical assets an organization has and which are the likely threats to that organization. There are many different ways […]
With November’s U.S. midterm elections fast-approaching, we dive into the latest threats and discuss how organizations can understand the threat posed to them by such malicious actors. Dr Richard Gold, Head of Security Engineering at Digital Shadows (now ReliaQuest), joins Mike Marriott to discuss threat modeling; outlining the steps organizations can take to define their […]
Organizations rely on Digital Shadows (now ReliaQuest) to be an extension of their security team. Our global team of analysts provide relevant threat research, much needed context, tailored remediation advice and managed takedown support to make our clients’ jobs easier and more efficient. Crucially, by having analysts within the intelligence and collection cycle, we’re able […]
In a previous blog, we discussed the role of planning in offensive operations and the power that effective planning affords an actor. For an actor conducting an offensive operation, their capability to achieve their goal is predicated on a number of things: The number of different scenarios that they can envisage at each stage of […]