This discursive blog explores the use of remote access tools in exploitations across OT/ICS and corporate environments. Whether restricted or supported, remote access tools are shown to benefit from the Darktrace product suite, including our DETECT, RESPOND and PREVENT product families.

The main Darktrace user at a manufacturing organization explains how Autonomous Response reduces cyber risks arising from human error, and allows the security team to adopt a proactive rather than reactive approach to security.

Discover why Lighthouse Global, a technology provider for legal firms and large businesses, relies on Darktrace to protect its email and cloud environment as the organization changes and grows.

This blog breaks down the challenges of securing high-profile events – including the ‘access paradox’, increasing IT and OT convergence, and the importance of a fast response – and explains how Self-Learning AI changes the game.

Discover why Sellen Construction rely on Darktrace and Microsoft to protect their dynamic cloud environment, how AI Analyst saves its security team time in threat investigation, and how Darktrace enables self-learning protection across the business.

Complicated by increasing SaaS usage and global supply systems, the supply chain is the most pressing concern facing cyber security. This blog examines how Darktrace detected a phishing email from a trusted third party, which led to a vicious cycle of compromise.

このブログでは、複数のMicrosoft 365アカウントを悪用して攻撃を仕掛け、持続性を維持した、SaaSベースの巧妙な攻撃について分析しています。

Darktrace AI appears to have detected a Hafnium attack against vulnerable Exchange servers in December 2020, three months before the zero-day was identified. This blog provides an in-depth analysis of the attack, which suggests that Hafnium’s campaign began far earlier than previously thought.

This blog explains how AWS’s extension of VPC Traffic Mirroring to non-Nitro instances supports Darktrace’s real-time visibility and adaptive, autonomous defense for AWS cloud environments.

As working patterns continue to evolve, Darktrace provides visibility over the remote business, detecting everything from account takeovers to advanced phishing attacks. This blog discusses how Cradlepoint utilizes Self-Learning AI to secure its SaaS environments.

2要素認証（2FA）がハッキングされた場合、どうなるのでしょうか？セキュリティ層が侵害され、サイバー犯罪者がセキュリティスタックを迂回した場合、どうなるのでしょうか？このブログでは、DarktraceのMicrosoft 365コネクタがSaaSアカウントの完全な乗っ取りを自動検知し、攻撃に対する詳細な調査を開始した方法を説明します。

Version 5は、Darktrace Immune Systemプラットフォーム全体に一連のイノベーションを提供し、ニューノーマルに取り組んでいるセキュリティチームに重要な価値をもたらしています。このブログでは、クラウドサービスやゼロトラスト環境を網羅する拡張カバレッジと、シームレスな統合を可能にするオープンアーキテクチャによって、AIがどのようにセキュリティチームを補強しているかを探ります。

In the first installment of a two-part series, Darktrace’s Max Heinemeyer reviews the IoT, Cloud, and SaaS trends of last year and forecasts what he expects to see in 2019.