Osterman Research

Check out our new research on CISO and CIO investment priorities for cybersecurity in 2025. The research program worked with @BIOkeyIntl @OpenText and @SaltSecurity. ostermanresearch.com/portfolio/orwp…

We talked integration, automation, and orchestration with @jitterbit yesterday, examining divisive market forces, organizational drivers, and how a unified platform for automation and orchestration counterbalances and embraces it all. linkedin.com/pulse/pursuing…

Check out our latest report on #AI in defensive #cybersecurity - incl. where attackers have the advantage, the importance of AI defenses, and how AI transforms #cybersecpros. Sponsored by @AbnormalSec @IRONSCALES @OpenText ostermanresearch.com/2024/11/13/orw…

New research on Making the #SOC More Efficient. Explores the current challenges facing SOCs and what needs to happen to counteract emerging sophisticated threats. h/t @DropzoneAI @hyasinc @Radiant_Sec @SevcoSecurity ostermanresearch.com/2024/10/03/orw…

Our research project with @OPSWAT assessed #emailsecurity of critical infrastructure organizations globally, revealing that 80% experienced email-related breaches in the past year. 48% lack confidence in defenses, and 65% are noncompliant with regulations. opswat.com/osterman-report

Our new report with @OstermanRsch releases today, revealing low confidence in the ability to prevent #email-related threats and an urgent need for improved #emailsecurity practices in #criticalinfrastructure sectors. hubs.la/Q02Q5Qyg0

Latest research data on #identitysecurity and #MFA from Osterman Research. What organizations are doing, and what they still need to do. Research made possible by @AbnormalSec @EnzoicSecurity @OpenText and @token. Get your copy today - ostermanresearch.com/2024/09/04/orw…

Analyzing where organizations could be attacked plus threat intelligence for early warnings – the SixMap approach. Notes on our conversation at RSAC 2024. linkedin.com/pulse/notes-ou…

Key points from @cobalt_io State of Pentesting Report 2024, released last month. Increased volume of pentests, threats from AI, and a longer duration to fix identified vulnerabilities. linkedin.com/pulse/some-tho…

Cobalt offers pentesting as a service (PtaaS) for organizations wanting to gauge the efficacy of their application security. Based on success with this foundational offering, Cobalt is being asked to do more. Notes on our briefing at RSAC 2024. linkedin.com/pulse/notes-ou…

An increasing proportion of organizations are embracing an ever-growing set of #SaaS apps. Under the shared responsibility model, organizations are responsible for data integrity. New white paper explores reasons for backing up cloud workloads. linkedin.com/pulse/backing-…

HYAS Infosec threads threat intelligence with DNS to identify and neutralize communication attempts with nefarious infrastructure. It assists organizations in shutting down threat actor campaigns. Notes on our briefing at RSAC2024. linkedin.com/pulse/notes-ou…

Trend Micro offers an extensive set of cybersecurity products for business. During our briefing at RSAC2024, we talked about some of its offerings, such as attack surface risk management. linkedin.com/pulse/notes-ou…

@SaltSecurity focuses on API security, with a play that covers discovery, posture assurance, and threat protection. Some notes from our briefing with Salt at #RSAC2024. linkedin.com/pulse/notes-ou…

@LightBeamAI combines capabilities for data security, privacy, and governance in a unified platform. It is seeing early momentum among organizations in highly regulated industries, such as finance and healthcare. Notes on our briefing at #RSAC2024 linkedin.com/pulse/notes-ou…

Recent news: cyber attack on Synnovis affects London hospitals; OpenText purchased Pillr, an MDR platform; and a new book on the FBI wiretapping the world. linkedin.com/pulse/recent-n…

Proactively reducing the employee PII attack surface by removal of data from aggregator and broker sites. Some notes on our conversation with @optery at #rsac2024 linkedin.com/pulse/notes-ou…

Fortra’s report on a large phishing simulation test found that 10.4% of users clicked the link. A decade ago, Verizon’s data said 10%. Aarrgghh. linkedin.com/pulse/some-tho…

Driving convergence around data to deliver data intelligence for decision making is the focus at @SecuritiAI. Some notes on our briefing at #rsac2024, and Securiti’s new LLM firewall. linkedin.com/pulse/notes-ou…

Notes on our briefing with @Cohesity at #rsac2024 , including a photo of the ever-present Cohesity-wrapped bus. Cohesity Gaia – the AI agent with LLM and RAG capabilities – is very intriguing. linkedin.com/pulse/notes-ou…