Tag

Threat Detection

Stay current on methods and technologies used to identify cyber threats before they escalate. Topics include intrusion detection systems, anomaly monitoring, threat intelligence feeds, endpoint detection, and behavioral analysis techniques for proactive defense.

posts

Incident Response Plan Template

Incident Response Plan Template: Build Yours in 2026

A Ransomware Attack Every 11 Seconds — and Most Victims Had No Plan When Colonial Pipeline got hit in May 2021, the company paid a $4.4 million ransom within hours. Their CEO later told a Senate committee that the decision was made under extreme pressure, without a well-rehearsed playbook. If

Carl B. Johnson May 16, 2026 5 min read
Insider Threats

Malicious Insider vs Negligent Insider: The Real Threat

One Employee Stole Data. The Other Just Clicked a Link. Both Cost Millions. In 2022, a former Amazon employee was convicted for her role in the Capital One breach that exposed over 100 million customer records. That same year, the Verizon Data Breach Investigations Report found that 82% of breaches

Carl B. Johnson May 13, 2026 5 min read
Spoofing

Spoofing Attacks: How They Work and How to Stop Them

A CFO Wired $25 Million Because of a Spoofed Video Call In early 2024, a finance worker at a multinational firm in Hong Kong transferred $25.6 million after joining a video conference call where every other participant — including the company's CFO — was a deepfake. The threat actors

Carl B. Johnson Jan 17, 2026 7 min read
Incident Response Plan Template

Incident Response Plan Template: Build Yours in 2025

The Breach That Didn't Have to Be a Disaster In early 2024, Change Healthcare suffered a ransomware attack that disrupted pharmacy operations and claims processing across the entire U.S. healthcare system for weeks. UnitedHealth Group eventually disclosed that the breach affected roughly 100 million individuals — the largest

Carl B. Johnson Jun 14, 2025 7 min read
Incident Response

Cyber Incident Response Steps: A Practical Playbook

The 37 Minutes That Cost MGM Resorts $100 Million In September 2023, a threat actor called Scattered Spider social-engineered an MGM Resorts help desk employee. Within 37 minutes, they had enough access to cripple one of the world's largest casino and hotel operators. Slot machines went dark. Hotel

Carl B. Johnson Dec 11, 2023 7 min read
Adware vs Spyware

Adware vs Spyware: What's Actually Stealing Your Data

In February 2023, the FBI's Internet Crime Complaint Center reported that malware-related complaints had surged again, with losses running into the hundreds of millions. Buried in those numbers is a distinction most people get wrong: adware vs spyware. I've watched organizations treat adware as a minor

Carl B. Johnson Apr 10, 2023 6 min read
Incident Response Plan Template

Incident Response Plan Template: Build Yours in 2022

When Colonial Pipeline got hit with ransomware in May 2021, they paid $4.4 million within hours. Their CEO later told a Senate committee the company had an incident response plan — but executing it under pressure exposed gaps nobody anticipated. If a company running critical U.S. infrastructure can stumble,

Carl B. Johnson Feb 10, 2022 8 min read
Insider Threats

Malicious Insider vs Negligent Insider: Real Threats

One Cost the Company $3.4 Billion. The Other Just Forgot to Lock the Door. In 2020, a former Ubiquiti employee launched a devastating attack against his own employer — stealing proprietary data, attempting extortion, and then posing as a whistleblower to tank the company's stock. That's

Carl B. Johnson Jan 15, 2022 7 min read