Stewart Bertram

APT 28, APT 1, Conti, Lazarus Group and Anonymous are all names that have become ‘poster children’ for cyber threats over the past decade or so. Identifying, describing, and monitoring threat actors/groups is indeed a cornerstone of modern Cyber Threat Intelligence (CTI). Many security service providers differentiate themselves by the

Elemendar recently made our first official visit to the Republic of Korea (South Korea). We were part of the UK’s Department of International Trade mission, run during Cyber Week by the British Embassy in Seoul. South Korea has long been somewhat of a ‘promised land’ for Cyber Threat Intelligence (CTI).

“Russia wants to legalise cybercrime for homeland [security]” – Oh My, that IS shocking! Was my initial reflection on this headline from a piece by Gintara Radauskas published in Cybernews. I then immediately thought this article was either A.) a case of sloppy reporting (I hoped) or B.) a further

No one can dispute that MITRE ATT&CK is now a cornerstone of modern Cyber Threat Intelligence. Many security programs have been built around the framework, including Elemendar’s flagship tool, READ. READ. uses machine learning to extract ATT&CK tactics, techniques, and procedures (TTPs) from text documents.  But despite its lauded status,

Disinformation is the new kid on the block of the threat and risk analysis community. Tricky to define and challenging to anticipate multiple frameworks are being developed to help analyse the disinformation capabilities of malicious actors. The Disarm framework offers a structure similar to the lauded MITRE ATT&CK framework. Charity

In the face of an economic downturn, if not outright recession, cyber-security budgets are being scrutinised right alongside everything else. Many CISOs question what’s being spent on Cyber Threat Intelligence (CTI). They’re forgetting – or maybe ignoring – the absolute necessity of CTI within a security operations center (SOC) environment.

Each day we escape an infinite number of scenarios that could have unfolded, but didn’t. The damage they might have wrought is what justifies security defence, but the cost of ‘what if’ scenarios isn’t easy to calculate, and neither is return on investment (ROI). Assessing a security product’s ROI boils

“Shields Up” is a current initiative that was launched by the US Cybersecurity and Infrastructure Security Agency's (CISA) earlier this year. With the aim to protect the US and organisations from cyber threats spilling over amid the Russian Federation’s invasion of Ukraine, despite some confused assessment, the Russia/Ukraine conflict has proved

Elemendar is proud to be one of the main sponsors for the upcoming Safe House Global event on Multi-Modal Warfare! Safehouse events are known throughout the industry as being at the cutting edge of cyber threat intelligence (CTI), with this event and its focus on the conflict in Ukraine being

“I am a veteran of the crypto wars.” This was a sentence I heard during the excellent HUMAN event at the RSA conference recently held in San Francisco. Many in the audience scoffed at this statement, however what I inferred as the sentiment was that working within a modern cyber