Security Blogs

Latest Articles

PowerShell Web Access: Your Network's Backdoor in Plain Sight
Security
14 Minute Read

PowerShell Web Access: Your Network's Backdoor in Plain Sight

The Splunk Threat Research Teams dives deep into PowerShell Web Access (PSWA) exploring its functionality within the context of cyber threats.
Splunk is Nurturing Tomorrow’s Cybersecurity Leaders Today
Security
2 Minute Read

Splunk is Nurturing Tomorrow’s Cybersecurity Leaders Today

The Splunk Academic Alliance program combines education with practical skills development to prepare the next generation of data and cybersecurity professionals.
Macro-ATT&CK 2024: A Five-Year Perspective
Security
6 Minute Read

Macro-ATT&CK 2024: A Five-Year Perspective

Splunk’s Ryan Fetterman and Tamara Chacon dive into attacker techniques, trends, and blue team tips for analyzing and visualizing data from the past year.
Cybersecurity Awareness Is Not Just for Spooky Season
Security
3 Minute Read

Cybersecurity Awareness Is Not Just for Spooky Season

As October marks Cybersecurity Awareness Month, Splunker Mick Baccio reflects on the progress made over the past two decades.
My CUPS Runneth Over (with CVEs)
Security
11 Minute Read

My CUPS Runneth Over (with CVEs)

This blog dissects the technical intricacies of the CUPS vulnerability, explores its potential impact on affected systems, and provides detection opportunities and mitigation strategies.
A Case Study in Vulnerability Prioritization: Lessons Learned from Large-Scale Incidents
Security
11 Minute Read

A Case Study in Vulnerability Prioritization: Lessons Learned from Large-Scale Incidents

Splunker Audra Streetman provides an overview of the lessons learned from previous large-scale security incidents to help inform vulnerability prioritization.
Splunk SOAR Evolved: A Unified TDIR Approach to Automation
Security
5 Minute Read

Splunk SOAR Evolved: A Unified TDIR Approach to Automation

Splunk SOAR 6.3.0 and 6.3.1 constitute a significant evolution in how security practitioners can implement, use, and leverage security automation in the SOC more efficiently.
Splunk Named a Leader in the 2024 IDC MarketScape for SIEM for Enterprise
Security
1 Minute Read

Splunk Named a Leader in the 2024 IDC MarketScape for SIEM for Enterprise

Splunk is ranked #1 for the fourth year in a row in the IDC Worldwide Security Information and Event Management Market Shares, 2023: The Leaders in SIEM City report!
Celebrating 2024 Worldwide BOTS Day
Security
2 Minute Read

Celebrating 2024 Worldwide BOTS Day

After a successful launch of BOTS at .conf24, we’re ready to take it to the masses with two worldwide BOTSv9 competitions.