Katlyn Gallo·Jun 9Key Components of an Effective Security ProgramWhat makes a successful information security program? — This article was originally published on BuiltIn. Corporate security programs can be difficult to wrap your head around. Many aspects, both administrative and technological, support the overall security of an organization. …Information Security9 min read
Katlyn Gallo·Jun 1Light Roast 114: Intro to Threat-Informed DefenseWhat is threat-informed defense and why is it important in today’s cyber threat landscape? — It’s no secret that the cyber threat landscape has grown exponentially over the last decade and even more so in the last three to five years. Advances in defense technology are pushing threat actors to develop more sophisticated malware and use various techniques to evade detection from both security tools…Cybersecurity7 min read
Katlyn Gallo·May 232022 Mandiant M-Trends Report: WrappedA look into the trends that shaped the cyber threat landscape in 2021. — 2021 — the year of zero-day exploits, according to Mandiant. Mandiant is a cybersecurity company that offers a variety of services from incident response, to penetration testing, to threat intelligence. …Cybersecurity9 min read
Katlyn Gallo·May 16How to Break Into Cybersecurity3 ways to get a foot in the door and land your first cybersecurity role. — This article was originally published on BuiltIn. Cybersecurity is a hot topic in today’s job landscape. Whenever I mention that I work in cybersecurity, the majority of people respond with something along the lines of, “That’s a great profession to be in” or “Well, you’ll never be without a job.” …Cybersecurity7 min read
Katlyn Gallo·Apr 29Risk Management vs. Threat Intelligence-Driven Security ProgramsCybersecurity Capstone — Part Six — This article is part of my capstone blogging series, which will detail my project as I progress. For the full list of articles, visit my Cybersecurity Master’s Capstone list. …Threat Intelligence8 min read
Katlyn Gallo·Apr 21Compiling Priority CVEs for Vulnerability Remediation PrioritizationCybersecurity Capstone — Part Five — This article is part of my capstone blogging series, which will detail my project as I progress. For the full list of articles, visit my Cybersecurity Master’s Capstone list. …Threat Intelligence6 min read
Katlyn Gallo·Apr 15The Latest on Russia-Ukraine Cyber ThreatsDark Roast Intelligence Briefing — As the majority of those in the cybersecurity community know, the Russia-Ukraine war has had immense ramifications on the threat landscape over the last several months. On February 27th, I published an article covering the events that had occurred throughout the preceding week, which included the surfacing of multiple Wiper…Threat Intelligence9 min read
Katlyn Gallo·Apr 5Analyzing ATT&CK Matrix Gaps & Proposing MitigationsCybersecurity Capstone — Part Four — This article is part of my capstone blogging series, which will detail my project as I progress. For the full list of articles, visit my Cybersecurity Master’s Capstone list. …Threat Intelligence8 min read
Kamyar Kojouri·Apr 2Let’s Put Cyber Back in CybersecurityIs there a shortage of Cybersecurity workers or are we doing this wrong? — “You run the, um, net-trace command?” he finally responded after a long pause. He had checked the network cable, refreshed the browser, and rebooted the router twice! How could the user still have no Internet? At this point, we both knew that the interview was over. Granted, this one was…Cybersecurity4 min read
Katlyn Gallo·Mar 31Assessing & Mapping Security Tool Capabilities to the ATT&CK MatrixCybersecurity Capstone — Part Three — This article is part of my capstone blogging series, which will detail my project as I progress. For the list of all articles, visit my Cybersecurity Master’s Capstone list. …Cybersecurity10 min read
