Need Help? 855.303.3033 | 
* Why Deepwatch?Open menu
  + 
    - ### Advancing the SOC
      Integrating detection and awareness technologies with effective responses, offering seamless enterprise protection.
    - 
  + - 
* Open menu
    - ### The Managed Security Platform For The Cyber Resilient Enterprise
  + - Technologies
      * 
  + - Products
  + - Experts
* CompanyOpen menu
    - ### Cultivating Cyber Resilience Experts
      Guided by our core values, we're in search of dedicated individuals driven to solve complex problems and protect our customers.
* PartnersOpen menu
      * ### Get access to all the critical information you need to be successful
* ResourcesOpen menu
  + Featured Resource
    - ### Deepwatch ATI Annual Threat Report 2024
      Get your copy of the Deepwatch ATI 2024 Threat Report, with key observations, metrics and trends from 2023 and a forecast for what organizations can expect.
Deepwatch Blogs
# Security Insights
Read about the latest industry news including executive orders, CISA warnings, and fresh security topics.
Filter Blog by:
Security Insights
All
Security Ops
Thought Leadership
Deepwatch Team
Splunk
!
08.06.24
Explore Deepwatch's innovative approach to Managed Detection and Response, offering eight new add-on modules that integrate cutting-edge technologies to improve data visibility, control, and precision response across your attack surface.
5 MIN
07.09.24
Learn about Deepwatch's journey to achieving ISO 27001 certification and the importance of maintaining the highest information security standards.
3 MIN
06.20.24
Learn why NIST's Cybersecurity Framework 2.0 emphasizes the need for a seperate "Govern" function and the impact of governance on security programs.
06.12.24
Discover the advantages of using Splunk UI and Dashboard Studio for building dashboards and visualizations in Splunk.
7 MIN
05.29.24
Discover the importance of open-source threat intelligence and how it can empower individuals and organizations to proactively enhance their security posture.
13 MIN
04.16.24
Learn how to safeguard the integrity of your supply chain with Deepwatch's cybersecurity expertise. Mitigate vulnerabilities and build a more cyber resilient future.
04.12.24
Gain insights into the zero-day vulnerability affecting Palo Alto Networks’ Global Project, including its impact, patch time, and cyber resilience recommendations.
03.29.24
Don't fall for something that's not true. Discover why Deepwatch believes April Fools' Day is made to be a Cyber Resilience Holiday.
4 MIN
Deepwatch uncovers a new threat to victims searching for the 2023 Adobe Photoshop installer and getting a Monero cryptocurrency miner instead.
6 MIN
02.27.24
A TLDR on what security leaders need to know about the ConnectWise and ScreenConnect vulnerabilities, including recommendations beyond patching
Let's Talk
### Ready to Become Cyber Resilient?
Meet with our managed security experts to discuss your use cases, technology and pain points and learn how Deepwatch can help.
Deepwatch® is the leading managed security platform for the cyber resilient enterprise. Our platform combines comprehensive threat management capabilities, Deepwatch security experts, and precise automated actions to enable cyber resiliency and reduce risk.
#### Corporate Headquarters
4030 W Boy Scout Blvd.Suite 550Tampa, FL 33607 USA855.303.3033
#### Company
#### Resources
© Copyright 2025 Deepwatch incorporated
 |
# Thought Leadership
Read blogs from Deepwatch senior leadership on broad topics including communication, team retention, and budgeting.
10.15.24
Discover the evolving role of the CISO as a Cyber Architect, bridging cybersecurity with business resilience and strategy for a stronger organization.
08.28.24
Discover key insights from Black Hat 2024 on AI/ML developments and rising data security concerns. Learn how to shape proactive security strategies for the future in this continuation of our reflections.
08.23.24
Explore the lessons learned from CrowdStrike and Microsoft at Black Hat 2024, emphasizing the need for a holistic cybersecurity strategy to enhance organizational resilience.
05.21.24
Discover the impact of SIEM market consolidation on MSSP/MDR customers and the future of security operations in 2024.
05.15.24
Shift focus from constant threats in cybersecurity to prioritizing protection. Embrace cyber resilience for a safer digital landscape with this blog post.
05.08.24
Learn about the elevated level partnership between Deepwatch and CrowdStrike, and the expanded capabilities it brings to the cybersecurity landscape.
05.03.24
From the SOC, Tim Grossner discusses securing or migrating away from VPNs after the recent rash of high profile attacks on multiple vendors.
05.01.24
Discover practical recommendations for optimizing vulnerability management tools and leverage APIs to enhance reporting capabilities.
04.22.24
Understand the parallels between the "Golden Hour" in medical emergencies and the response time in cybersecurity incidents, and the potential consequences of delayed incident response.
04.10.24
Look beyond where buzzwords like automation and artificial intelligence (AI) and learn how Deepwatch empowers our trusty SOC analysts
# Deepwatch Team
Read articles from various Deepwatch team members on topics including new tools and techniques.
01.13.23
Financial services organizations are faced with continuous cyber attacks and increased challenges. Discover the top 8 threats today
2 MIN
11.04.21
Watch deepwatch experts 'walk the talk' and see how our security-first culture fuels improvements as innovation and cybersecurity connect
12.15.20
What is patch management? Learn about it, why it's important and how often it should be performed on your business
×
**Deepwatch Enhances Executive Team by Welcoming New CMO and CPO**
Cyber Threat Intelligence
# Deepwatch Labs
Curated cybersecurity threat intelligence to keep your organization and SOC ahead of the latest security threats and zero-day vulnerabilities.
01.22.25
SocGholish Backdoor Powers Ransomware Attacks, Email Bombing and Teams Threats Persist, 167 Firms Listed on Leak Sites, and CISA Flags Aviatrix Vulnerability
01.15.25
Ivanti Zero-Day CVE-2025-0282 Exploited as Macro Malware and Data Leaks Impact 103 Firms—CISA Flags Critical Vulnerabilities in Latest Update
## Cyber Intel Briefs
01.08.25
Google Domain Abuse and PLAYFULGHOST Threats Unveiled as CISA Adds Oracle and Mitel Vulnerabilities, and Professional Services Tops Data Leak Sites
## Significant Cyber Events
06.02.23
An unknown threat actor has successfully exploited the vulnerability in Progress Software's MOVEit Transfer product
14 MIN
06.01.23
Deepwatch detects webshell activity after suspected exploitation of a critical vulnerability in Progress Software’s MOVEit product
03.22.23
Deepwatch investigation found threat actors utilizing an undisclosed vulnerability in Adobe ColdFusion. Learn what happened and what you should do
## Customer Awareness Advisory
01.10.25
Discover how Chinese threat actors exploited the Ivanti Connect Secure zero-day vulnerability (CVE-2025-0282) for credential harvesting and malware deployment, and learn how to protect your organization from similar attacks.
11 MIN
12.09.24
Discover how the recent VEILDrive attacks utilize Microsoft Teams, SharePoint, and OneDrive to infiltrate organizations in the Finance and Insurance sectors, revealing critical gaps in detection frameworks against Java-based malware.
09.17.24
Explore the details of the Ivanti Endpoint Manager vulnerability CVE-2024-29847, including the available patch and recommended actions. Protect your infrastructure from remote code execution risks with expert insights and guidance.
## Cybersecurity Threat Reports
10.04.24
Discover the critical vulnerabilities in the Common UNIX Printing System (CUPS) that could lead to Remote Code Execution (RCE) on Linux/Unix systems. Learn how to detect and mitigate these risks effectively.
08.14.24
Discover the rising threat of Adversary in the Middle (AiTM) attacks and learn how to protect your accounts with multi-factor authentication (MFA). Stay informed and secure in the digital landscape.
22 MIN
05.16.24
Learn how attackers use spam flooding, vishing, and Windows utilities to steal credentials and install tunnels in this detailed analysis
12 MIN
## Industry Insights
08.23.23
Raccoon Stealer, a malware-as-a-service (MaaS) has resurfaced. Understand its distribution methods, capabilities, and how organizations can defend against it.
08.22.23
Get an overview of the recent exploitation campaign targeting Citrix NetScalers, mitigation recommendations, and tips for safeguarding against similar threats
08.15.23
Deepwatch summarizes recent groundbreaking insights from clustered attack behavior of various ransomware groups & their hidden patterns