Driven by an unlikely actor, the U.S. Securities and Exchange Commission, quantitative cyber risk assessment and analysis is evolving.

Endpoint detection and response (EDR) technology has certainly improved the security posture of many organizations: by scanning for...

Automated scripts and tasks are expanding the attack surface: they often include privileged credentials. It's important to monitor them.