• Home
  • Authors
  • Cybereason Security Team

About Cybereason Security Team

Cybereason Security Team

The Cybereason Security Team champions cyber defenders by providing future-ready attack protection that unifies security from the endpoint, to the enterprise, to everywhere the battle moves. The Cybereason Defense Platform combines the industry’s top-rated detection and response (EDR and XDR), next-gen anti-virus (NGAV), and proactive threat hunting to deliver context-rich analysis of every element of a Malop (malicious operation). The result: defenders can end cyber attacks from endpoints to everywhere.

All posts by Cybereason Security Team

Webinar February 3rd 2022: Live Attack Simulation - Ransomware Threat Hunter Series

Understand how mature security teams effectively counter modern ransomware operations and avoid a system-wide takeover by bad actors - all delivered through a step-by-step walkthrough of an attack...

January 19, 2022 / 1 minute read

Cybereason Launches  ‘Pay As You Grow’ Program to Nurture Managed Security Services Partners

The PAYG program for Managed Security Services Providers (MSSPs) provides the most trusted solution providers with financial flexibility to increase their margins and profitability...

January 18, 2022 / 1 minute read

Cybereason Partners with M.Tech to Strengthen Organizations’ Cybersecurity

Cybereason has partnered  with M.Tech to provide organizations the ability to predict, detect and respond to cyberattacks at planetary scale and maximum speed...

December 23, 2021 / 2 minute read

How Cybereason Detects and Prevents Exploits Leveraging Log4Shell Vulnerability

In this interactive demo, see the AI-driven Cybereason XDR Platform detect and block an attacker attempting to compromise a Tomcat server with a Log4Shell exploit to deploy a malicious webshell...

December 15, 2021 / 2 minute read

AI-Driven Cybereason XDR and EDR Now Available on Google Cloud Marketplace

Google Cloud customers can now protect their organizations from sophisticated cyberattacks with the availability of the Cybereason XDR and EDR solutions on the Google Cloud Marketplace...

December 15, 2021 / 2 minute read

Introducing Cybereason XDR Powered by Google Chronicle

Cybereason and Google Cloud have unveiled Cybereason XDR powered by Google Chronicle, the first AI-driven XDR platform capable of ingesting and analyzing threat data from across the entire IT environment...

December 14, 2021 / 3 minute read

Security Industry Innovator Art Coviello Joins Cybereason Board of Directors

Coviello will provide strategic guidance as Cybereason continues its hypergrowth trajectory following a recent $325 million Series F funding round...

December 13, 2021 / 1 minute read

Cybereason Extends Feature Support for Linux

Cybereason is proud to announce that we now support Endpoint Controls for Linux...

December 10, 2021 / 1 minute read

Webinar January 11th 2022: Live Attack Simulation - Ransomware Threat Hunter Series

Learn how mature security teams effectively counter a modern ransomware operation and avoid a system-wide takeover by bad actors - all delivered through a step-by-step walkthrough of an attack...

December 10, 2021 / 1 minute read

Cybereason Partners with SiS International to Protect Joint Customers in Hong Kong

As a renowned value added distributor in Hong Kong, SiS will play a significant role in expanding Cybereason’s partner ecosystem by working with resellers and MSSPs to offer the Cybereason Defense Platform and services...

December 2, 2021 / 1 minute read

Join Us for DefenderCon 2021!

Join us on December 14 for DefenderCon 2021 to be among the first to learn about Cybereason's cutting-edge security solutions and network with your peers throughout the world...

December 1, 2021 / 1 minute read

Webinar December 1st: Ransomware Attackers Don’t Take Holidays

Join us for this live webinar as we delve into new research findings about the risk to organizations from ransomware attacks that occur on weekends and holidays and how you can better prepare to defend against them...

November 29, 2021 / 1 minute read

Cybereason Partners with Moviri to Deliver Operation-Centric Security

Cybereason is joining forces with Moviri to deliver industry-leading Cybereason Endpoint Detection and Response (EDR) solution to joint customers...

November 17, 2021 / 1 minute read

Cybereason and Nuspire Partner to Empower Organizations to Stop Cyber Attacks

Combining the Cybereason operations-centric EDR with Nuspire’s top-notch security operations team enables defenders to combat sophisticated and persistent threats to our mutual customer’s organizations...

November 12, 2021 / 2 minute read

Cybereason Earns Gold OPSWAT Access Control Certification

Cybereason has earned the coveted Gold-level OPSWAT Certified Security Applications verification for the Cybereason Sensors ActiveProbe 21.X for Windows, Mac and Linux endpoints...

November 10, 2021 / 2 minute read

When Your EDR Vendor Attacks!

SentinelOne's use of PowerShell in their product is similar to how malicious actors abuse it, causing False Positives for customers and an uproar on Twitter...

November 8, 2021 / 2 minute read

Cybereason Recognized in The Herd 100 Top Emerging Privately Held U.S. Technology Companies

Cybereason has been honored by recognition in The Herd 100, a ranking of the Top 100 private technology companies, for enabling defenders to outthink and outpace sophisticated cyber threats...

November 4, 2021 / 2 minute read

Webinar November 18th: Anatomy of a Ransomware Attack

Join Cybereason CEO and co-founder Lior Div and CSO Sam Curry November 18th as they break down the anatomy of a ransomware attack and explain how defenders can take steps to protect their organization by orchestrating the most effective ransomware defense...

November 3, 2021 /

Cybereason and Tech Data Partner to End Cyberattacks in Asia Pacific Region

Cybereason and Tech Data will protect joint customers through expert MDR services that leverage the Cybereason Defense Platform, a multi-layered solution that combines the power of EPP prevention with industry-leading EDR capabilities...

November 3, 2021 / 1 minute read

Conti Ransomware Gang Strikes ‘Jeweler to the Stars’

Cybereason has been tracking the Conti ransomware gang since 2020 and they have conducted hundreds of attacks against hospitals, law enforcement agencies and critical infrastructure operators...

November 1, 2021 / 3 minute read

Video: Google Cloud and Cybereason Shift the XDR Paradigm to 'Detect and Anticipate'

The Google Cloud and Cybereason partnership shifts the XDR paradigm to “detect, understand, anticipate" by introducing a prognostic element that anticipates attacker behaviors to deliver faster conviction of potentially malicious activity...

November 1, 2021 / 1 minute read

Webinar November 11th: Live Attack Simulation - Ransomware Threat Hunter Series

Join this session on November 11th to learn how mature security teams can deal with a modern ransomware operation and avoid a system-wide takeover by threat actors - delivered through a step-by-step walkthrough of an attack...

October 29, 2021 / 1 minute read

Webinar: Live Attack Simulation - EMEA Ransomware Threat Hunter Series

Join this EMEA session to learn how mature security teams can deal with a modern ransomware operation and avoid a system-wide takeover by threat actors - delivered through a step-by-step walkthrough of an attack...

October 28, 2021 / 1 minute read

EDR Buyer’s Guide: Microsoft E5 Licenses and Security Risks

Microsoft introduces vulnerabilities at an astounding pace, but still wants organizations to bundle IT and Security spend with an expensive E5 license - learn why "good enough" security is just not good enough for today's advanced threats...

October 26, 2021 / 1 minute read

Webinar: Live Attack Simulation - Ransomware Threat Hunter Series

Join this session to learn how mature security teams can deal with a modern ransomware operation and avoid a system-wide takeover by threat actors - delivered through a step-by-step walkthrough of an attack...

October 25, 2021 / 1 minute read

Cybereason CEO Lior Div Takes Featured Speaker Spot at CNBC Disruptor 50 Summit

Cybereason CEO and Co-founder Lior Div will be a featured speaker at CNBC’s 2021 Disruptor 50 Summit on October 21, discussing the accelerated adoption of AI and its application in stopping ransomware attacks...

October 19, 2021 / 1 minute read

Cybereason and Aon Collaborate to Prevent Cyber Attacks

Cybereason is partnering with Aon, a leading global professional services firm, in an alliance to help protect clients from sophisticated cyber attacks...

October 13, 2021 / 1 minute read

Webinar: The Future of Endpoint Security

 Join Cybereason CSO Sam Curry and IBM Security Executive Advisor Limor Kessem as they discuss the future of endpoint security based on the results from ESG's Endpoint Security Trends report...

October 5, 2021 / 1 minute read

New Cybereason Government Subsidiary Empowers U.S. Agencies to Detect Malicious Operations Faster

Cybereason is excited to announce the creation of a U.S. Government subsidiary, Cybereason Government Inc., dedicated to prevention, detection and response of malicious operations targeting U.S. Government agencies...

October 5, 2021 / 2 minute read

Govware Conference: Cybereason CEO Lior Div to Deliver Keynote

Keynote address will focus on research into three Chinese threat groups that targeted telecoms companies as detailed in the report DeadRinger: Exposing Chinese Threat Actors Targeting Major Telcos...

September 30, 2021 / 1 minute read

Video: The CIO’s Role in Establishing a Cyber Resilience Strategy

Cybereason CTO and co-founder Yonatan Striem-Amit discusses the latest cyber trends that are impacting organizations, what happens when a company is confronted by an attack, and how these attacks can be effectively prevented...

September 27, 2021 / 1 minute read

Cybereason Partners with Sysware to Secure Indonesian Companies

Cybereason is partnering with Sysware, a leading software distributor in Indonesia, to protect companies from sophisticated cyber attacks on endpoints and across their networks...

September 22, 2021 / 1 minute read

Webinar: Inside the REvil Ransomware - Pick Your Path

Is your organization prepared to handle a major ransomware attack? Join us for a tabletop exercise where we will walk you through a REvil ransomware attack as if it were on your infrastructure...

September 20, 2021 /

Gartner Report: 2021 Competitive Landscape for Endpoint Protection Platforms

Cybereason delivers superior endpoint protection against sophisticated attacks through multi-layered prevention, AI-powered behavioral detection and comprehensive response...

September 13, 2021 / 1 minute read

Cybereason’s Lodrina Cherne Joins Panel on Building a More Inclusive Future in Cybersecurity

"Rather than focusing on how far cybersecurity has to go to represent more views and voices, I hope attendees come away with actions they can take today to support diversity across schools and workplaces..."

September 8, 2021 / 1 minute read

Cybereason and Smarttech247 Partner to Deliver Managed Detection and Response

Cybereason is joining forces with Smarttech247 to defend joint customers through managed detection and response services that block cyber attacks on endpoints anywhere on their networks...

September 8, 2021 / 1 minute read

ESG Research Report: 2021 Trends in Endpoint Security

Though there is no explicit definition of an endpoint protection platform (EPP), but there are qualifications for what a good solution looks like - download the complimentary ESG report to learn more...

August 31, 2021 / 1 minute read

Webinar: Extended Detection and Response (XDR) - Past, Present and Future

What is XDR, how is it different, and can it actually stop today’s malicious operations? In this special webinar session, learn about the evolution of XDR today and where it's heading in the future...

August 23, 2021 /

Gartner Report: How to Prepare for Ransomware Attacks

Security and risk management leaders need to look beyond the endpoints to help protect the organization from ransomware - fine-tuning incident response processes is a key component for successful mitigation of these multi-stage attacks...

August 17, 2021 / 1 minute read

Webinar: REvil Ransomware - Pick Your Path

How would you and your organization handle a major ransomware attack? Join us for a tabletop exercise where we will walk your organization through a REvil ransomware attack as if it were on your infrastructure...

August 10, 2021 / 1 minute read

Webinar: DeadRinger - Exposing Chinese Threat Actors Targeting Major Telcos

Join us for a live webinar on Thursday, August 12th, at 1:00 PM ET / 10:00 AM PT where we will walk through the Chinese espionage operations targeting telecoms providers uncovered in the DeadRinger report...

August 3, 2021 / 2 minute read

Cybereason and CYDERES Partner to Deliver Managed Detection and Response

Cybereason is thrilled to announce a strategic partnership with CYDERES, the security-as-a-service division of Fishtech Group, to bring enhanced Managed Detection and Response (MDR) to our current and future managed security customers...

July 22, 2021 / 2 minute read

Everything Cybereason at the Black Hat 2021 Virtual Conference

Cybereason invites you join us at Black Hat 2021 on August 4th/5th - sessions with our SMEs will cover advanced RansomOps, how XDR leverages Indicators of Behavior to detect and remediate against attacks faster, and more...

July 21, 2021 / 3 minute read

Cybereason Extends Global Leadership in XDR with $275 Million in Crossover Financing

This latest round of investment validates the company’s position as the preeminent innovator in delivering XDR, EDR, EPP and anti-ransomware solutions...

July 14, 2021 / 2 minute read

Cybereason Launches Global Defenders League Partner Program

The Cybereason team is excited to announce the launch of the Cybereason Defenders League, a Global Partner community designed to reward the cybersecurity industry’s most trusted advisors and solution providers...

July 13, 2021 / 2 minute read

CISO Roundtable: Ransomware Attacks and the True Cost to Business

This live webinar version of the CISO Stories Podcast brings together a panel of subject matter experts who examine recent ransomware research findings and discuss how organizations can better prepare to defend against and respond to a ransomware attack...

July 12, 2021 / 1 minute read

Cybereason and Doosan Corp Partner to Secure APAC Enterprises

Cybereason partners with South Korean Global Fortune 2000 leader the Doosan Corporation to protect enterprises from sophisticated cyberattacks on endpoints and across their networks...

July 11, 2021 / 2 minute read

Summer Webinar Series with CSO Sam Curry

Join Cybereason CSO Sam Curry for this webinar series where he revisits some of the cybersecurity highlights of the first half of 2021, from the SolarWinds supply chain attacks to DarkSide and other major ransomware operations...

July 9, 2021 / 1 minute read

Webinar: Live Ransomware Attack Simulation

Join us for a live ransomware attack simulation, where we’ll discuss the latest attack trends, walk through a multi-stage ransomware attack...

June 8, 2021 / 1 minute read

Cybereason vs. REvil Ransomware

The Cybereason Defense Platform detects and blocks REvil ransomware, allowing defenders to protect their organizations from this evolving threat...

June 2, 2021 / 2 minute read

Cybereason Joins with MITRE Engenuity’s Center for Threat-Informed Defense

Cybereason is committed to working with the MITRE Engenuity Center for Threat-Informed Defense to develop better defense strategies that reverse the adversary advantage...

June 2, 2021 / 2 minute read

Cybereason Makes Big Debut on CNBC 2021 Disruptor 50 List

Learn how Cybereason helps organizations around the world outthink and outpace threat actors...

May 25, 2021 / 2 minute read

Webinar: XDR or EDR: How Should Your SOC Choose?

Companies are struggling with security issues due to a lack of visibility and a shortage of skilled staff - can XDR help?

May 21, 2021 / 1 minute read

Cybereason Experts Take Center Stage at RSA Conference 2021

Cybereason is excited to announce that CISO Israel Barak and Principal Security Advocate Lodrina Cherne are taking center stage at the RSA Conference...

May 19, 2021 / 2 minute read

SC Awards Europe: Cybereason Named Finalist for Best Endpoint Security

Cybereason is excited to announce it was named a finalist in the Best Endpoint Security category of the 2021 SC Awards Europe competition...

May 19, 2021 / 1 minute read

Webinar: Future-Proofing Security Programs in 2021 and Beyond

Join Cybereason and Wipro to learn how to automate the automate-able, what to do to secure the apparently insecure-able, and how to future-proof security programs...

May 14, 2021 / 1 minute read

Webinar: Cybereason vs. DarkSide Ransomware

Join us live as we breakdown the DarkSide Ransomware attack and show how Cybereason fully detects and protects against this threat...

May 11, 2021 /

Webinar: The Current State and Future Challenges of Security

Join Ed Amoroso, CEO of TAG Cyber and Sam Curry, CSO of Cybereason as they discuss the outlook for the security industry based on recent events and trends...

April 28, 2021 /

Integrating Endpoint and Mobile Device Security

The goal of this whitepaper is to help enterprise teams reduce gaps in their security architecture and improve the endpoint and mobile experience for their users...

April 26, 2021 / 1 minute read

Ransomware Decoded: Preventing Modern Ransomware Attacks

Understand how to detect the preliminary stages of an attack, analyze the scope of the operation and prevent execution of the malicious code...

April 19, 2021 / 1 minute read

Webinar: MITRE ATT&CK Evaluations - Unpacking the Emulation

If your organization has a distributed attack surface, this webinar is a must - we’re seeing attackers increasingly pivot from opportunistic compromise to double extortion ransomware attacks...

April 15, 2021 / 1 minute read

Five Clear Steps to Enhance SecOps with MITRE ATT&CK

With these five steps, you can continuously tune your security strategy and leverage the connection between techniques, tactics, and procedures and real-world adversary groups...

April 12, 2021 / 1 minute read

Cybereason Empowers Partners with North American MSSP Program Expansion

“Cybereason’s platform has helped us protect our clients and partners from advanced threats and has simplified our security operations,” said Justin Kallhoff, Chief Cybersecurity Officer...

April 6, 2021 / 2 minute read

Cybereason Named a Strong Performer in Forrester Wave for MDR

Cybereason MDR was one of 15 solutions included in the report from Forrester, a testament to Cybereason's superior threat hunting, multi-layer prevention and correlated behavior-based detections.

March 24, 2021 / 2 minute read

Sodinokibi/REvil Ransomware Gang Hit Acer with $50M Ransom Demand

The Sodinokibi/REvil ransomware gang has reportedly attacked multinational corporation Acer and demanded a ransom of $50 million - ransomware today is not simply an evolution of traditional malware, but an element of increasingly complex and highly targeted operations.

March 23, 2021 / 3 minute read

HAFNIUM Response: Cybereason is Dedicated to Defending Our Customers

Cybereason continues to investigate the related threats to protect our customers against adversaries targeting still-vulnerable and patched but not fully remediated Microsoft Exchange servers...

March 18, 2021 / 2 minute read

Webinar: Protecting Against IT Infrastructure Attacks from HAFNIUM to SolarWinds

Cyberattacks targeting IT infrastructure systems are highly-scalable, campaign-style efforts with a widespread impact. With their high degree of success in recent months, we can expect this trend to continue in the future. Now is the time to learn how to end these attacks. Join our webinars to learn more!

March 16, 2021 / 1 minute read

Webinar: The State of Ransomware

Join leaders from Cybereason's Nocturnus Research and Incident Response teams as they explore insights based upon what is happening in the underground and their first-hand experience with ransomware attacks encountered in the wild.

March 12, 2021 / 1 minute read

HAFNIUM and SolarWinds Attacks Highlight Lack of Accountability

Organizations are again scrambling to assess the impact of a recently disclosed attack attributed to the Chinese state-sponsored HAFNIUM APT group that targets vulnerabilities in Microsoft Exchange. Cybereason protected all of our customers from both the SolarWinds and HAFNIUM attacks.

March 8, 2021 / 3 minute read

Defender Spotlight: Keith Barros, Seton Hall University

Top-tier defender Keith Barros of Seton Hall University discusses the successes achieved with a deployment of Cybereason solutions to secure endpoints and ramp-up students to Level1 Analyst level performance....

March 2, 2021 / 1 minute read

Case Study: SCM Insurance Services Finds True Partnership Cybereason

“We chose Cybereason was because of our need for comprehensive detection that’s mapped to MITRE ATT&CK... and to increase the speed to mitigation...” ~Nick LaPointe, Infosec Admin for SCM Insurance Services.

February 23, 2021 / 2 minute read

Cybereason Expands Middle East and North Africa Presence with Dubai’s Oxygen

Cybereason is partnering with Oxygen DMCC to enable enterprises across the Middle East and North Africa (MENA) to detect and end cyber attacks on endpoints anywhere on their networks.

February 18, 2021 / 2 minute read

Attacker Tries to Poison Florida City’s Water Supply

"For nearly one year since the beginning of the COVID-19 pandemic, threat actors have carried numerous acts of war against research companies, hospitals and other first responders. These attacks have been brazen, shocking and downright maniacal..." ~ Sam Curry, CSO at Cybereason

February 9, 2021 / 3 minute read

Cybereason XDR Dubbed Hottest New Cybersecurity Product by CRN

With Cybereason XDR, defenders can pinpoint, understand and end any Malop™ (malicious operation) across the entire IT stack whether on-premises, mobile or in the cloud.

February 4, 2021 / 2 minute read

Krebs, Curry and Cyber Security

This talk with investigative reporter Brian Krebs and Cybereason CSO Sam Curry will examine some of the more alarming trends in cybercrime today and offer some perspectives on how businesses, consumers and infosec pros can up their game in response.

February 2, 2021 /

Molerats APT: New Malware and Techniques in Middle East Espionage Campaign

Security researchers observed a politically motivated APT called “Molerats” using three new malware variants to conduct espionage in the Middle East. Download the Indicator's of Compromise to search for Molerats in your own environment.

December 15, 2020 / 3 minute read

Is XDR the Next Silver Bullet?

Join us for an hour-long panel on the intricacies of XDR and how it will affect the security industry. Learn what XDR is, specific use cases, and how security practitioners can easily integrate this new technology into their security stack.

December 4, 2020 / 1 minute read

The Boston Globe Recognizes Cybereason as a Top Place to Work in 2020

Cybereason is pleased to announce we were named one of the Top Places to Work in 2020 by The Boston Globe, which recognizes the most admired workplaces in the state voted on by the people who know them best—their employees.

November 23, 2020 / 2 minute read

Cybereason XDR: Delivering Future-Ready Attack Protection Beyond the Endpoint

Cybereason XDR is a unified solution that is operation-centric, fusing endpoint telemetry with behavioral analytics to empower global enterprises to swiftly detect and end entire attack operations on the endpoint, in the cloud, on mobile devices and everywhere on their networks.

November 11, 2020 / 3 minute read

What is the MITRE ATT&CK Framework?

MITRE’s Adversarial Tactics, Techniques, and Common Knowledge (MITRE ATT&CK) is a model and knowledge base of adversary behavior that has become a staple of the endpoint security space.

May 12, 2020 / 2 minute read

MITRE ATT&CK Evaluations Prove Cybereason Best Enables Defenders to Avoid Material Harm

The Cybereason Defense Platform has been evaluated by MITRE to show how we approach threat detection in the context of the MITRE ATT&CK framework. The evaluation shows Cybereason sets the standard by giving the most complete coverage across MITRE ATT&CK, real-time alerts, and correlated detections.

February 21, 2019 / 4 minute read

Attackers include ransom note in amplified DDoS attacks that use memcached servers

The servers being used in the memcached DDoS attacks are serving up a ransom note that demands a Monero payment of approximately $15,000, according to research from the Cybereason security team.

March 2, 2018 / 1 minute read

Cybereason creates 'vaccine' to stop Remcos RAT

A live command-and-control server is carrying out an attack that’s dropping a few malware programs on victim’s machines, including the Jigsaw ransomware and the Remcos RAT.

August 10, 2017 / 1 minute read

Hajime variant messes with iptables

Cybereason Labs analyzed a new Hajime variant that changes iptables rules, allowing attackers to get around firewalls while still maintaining stealth capabilities.

March 7, 2017 / 1 minute read