Security Weekly - A CRA Resource: Attackers Only Need One Foothold

Attackers may only need one successful initial foothold to enter a defender’s environment. But an attack can involve many additional stages, including exploitation and data exfiltration.



The kill chain changes the equation. Deception, traps, segmentation, and other protections can create opportunities to detect or disrupt attackers after they gain access. The attacker’s margin for error can shrink significantly once inside the environment.



How should defenders think about the balance between preventing initial access and disrupting attackers after they get in?



Subscribe to our podcasts: https://securityweekly.com/subscribe



#KillChain #ThreatDetection #SecurityWeekly #Cybersecurity #InformationSecurity #AI #InfoSec