BLOG

Insights from the ArmorPoint team.

Threat research, operational playbooks, and security leadership.

192 posts · Page 1 of 16

Filter by Category
AllArticlesCase StudiesCompany NewsCybersecurity Awareness MonthCybersecurity NewsField NotesGuideThreat Intel
Articles

What Is Identity Threat Detection and Response (ITDR)?

Identity Threat Detection and Response (ITDR) watches how accounts behave after sign-in, so security teams can spot compromised credentials, hijacked sessions and privilege changes that look like normal activity. It works alongside IAM and MFA rather than replacing them. It’s most effective when identity signals are correlated with endpoint, cloud and network telemetry and backed by analysts who can investigate and respond.

6 min read · afarrell
Read more →
Articles

Cybersecurity Fundamentals Still Matter: How to Turn Security Controls Into Action

MFA, patching, logging, backups, and incident response are still some of the most effective ways to reduce risk. But a control only protects you if it’s monitored, validated, and backed by clear ownership. This post covers how to operationalize each one and how to measure whether it’s working.

8 min read · afarrell
Read more →
Threat Intel

PHP2Shell: 3 PHP Vulnerabilities Expose Web Servers to Remote Code Execution

PHP2Shell’s two critical PHP flaws are now exploited in the wild, so patch to the fixed releases, mitigate the third flaw, and check for compromise back to October 17.

-12 min read · afarrell
Read more →
Cybersecurity Awareness Month

AI Is Expanding the Attack Surface: What Security Teams Need to Know

AI is expanding the attack surface from both directions. Attackers are using it to make phishing, impersonation, and exploitation faster and more convincing, while the AI tools organizations adopt are gaining access to sensitive data, identities, and systems. The first step isn't another AI-specific tool. It's visibility into where AI is used, what it can access, and whether your security operations can spot activity that falls outside expected behavior.

5 min read · afarrell
Read more →
Case Studies

How CIT expanded enterprise security services without building a bigger SOC.

CIT expanded its managed security services without standing up a bigger SOC of its own. The lever was a partnership with ArmorPoint MXDR.

3 min read · aburgett
Read more →
Field Notes

Why Risk-Based Alert Prioritization Changes Security Operations

Traditional SOC queues sort alerts by age (oldest first), but that borrowed help-desk logic ignores what actually matters in security: risk. ArmorPoint's platform uses AI to reorder the queue by risk instead of time, surfacing the most dangerous threats first while leaving investigation and decisions to human analysts.

6 min read · afarrell
Read more →
Articles

Top Cyber Threats Facing the Utilities Industry

Learn about the top cyber threats facing the utilities industry and critical infrastructure cybersecurity best practices.

7 min read · aburgett
Read more →
Articles

Managed XDR vs Managed SIEM: Closing the Loop Between Detection and Response

Explore the key differences between Managed XDR and Managed SIEM and how modern security teams are closing the loop between detection and remediation.

5 min read · Stephan Tallent
Read more →
Threat Intel

Defending Against Machine-Speed Attacks and Administrative Tool Exploitation

Machine-speed attacks represent a fundamental shift in how cyber threats are executed. Instead of relying on traditional malware or exploit chains, attackers are now leveraging valid credentials and trusted access to move through environments at the speed of automation.…

6 min read · aburgett
Read more →
Blog

Cybersecurity Regulations in Oil and Gas: What You Need to Know

Cybersecurity regulations in the oil and gas industry are expanding to address growing threats to critical infrastructure. From TSA pipeline directives to global frameworks, organizations are expected to strengthen visibility, incident response, and operational resilience. Compliance alone isn’t enough. Security operations have to be continuous, integrated, and aligned to real-world risk.

6 min read · aburgett
Read more →
Articles

MXDR vs XDR vs MDR: What’s the Difference and Which Do You Need?

At a glance, MXDR, XDR, and MDR can seem like variations of the same idea. They all focus on detecting and responding to threats. But the difference comes down to scope, ownership, and outcomes. XDR is designed to give you better visibility across systems.…

5 min read · aburgett
Read more →
Articles

Top Cybersecurity Threats in the Oil and Gas Industry

Oil and gas organizations are facing a fundamentally different cybersecurity reality than they were even a few years ago. This is not just about protecting data anymore.…

6 min read · aburgett
Read more →