Nick Desler

Author
Nick Desler is a Channels & Alliances Manager and Product Marketing Writer at AttackIQ. In his role, Nick helps manage AttackIQ’s relationships with all current and prospective channel partners, VARs, MSSPs, system integrators, and technology alliances. Along with his written works, Nick contributes to AttackIQ’s public communications through joint-marketing with partners and integrations, production of our monthly Partner Newsletter, assisting as a partner legal liaison, and managing AttackIQ's presence within the Microsoft Azure & AWS Marketplace ecosystem. Nick received his bachelor’s degree from UC Berkeley, where he studied Urban Planning and Public Policy. He currently lives in Austin, TX, where he coaches high school varsity basketball in his spare time.
Nick Desler

See other articles by Nick Desler

Response to CISA Advisory (AA24-234A): Strengthening Defenses Through Effective Event Logging and Threat Detection
Cybersecurity Advisory

Response to CISA Advisory (AA24-234A): Strengthening Defenses Through Effective Event Logging and Threat Detection

In response to the recent CISA Advisory (AA24-234A) outlining best practices for event logging and threat detection, AttackIQ, in alignment with CISA’s guidance, strongly encourages organizations to engage in continuous testing against known, real-world adversary behaviors and TTPs through rigorous security control validation.
Read More
Rat Traps: Emulating AsyncRAT with AttackIQ Flex
AttackIQ Flex

Rat Traps: Emulating AsyncRAT with AttackIQ Flex

In the ultramodern, mercurial sphere of cybersecurity, somehow a 1700-year-old quote from Helena of Constantinople still deeply resonates. Even with seemingly robust defenses, the smallest vulnerability can be an open invitation for threats like AsyncRAT to infiltrate your system, underscoring the importance of continuous testing to ensure that your existing controls - your rat traps - are functioning effectively.
Read More
SigmAIQ: AttackIQ’s Latest Innovation for Actionable Detections
AttackIQ

SigmAIQ: AttackIQ’s Latest Innovation for Actionable Detections

AttackIQs Engineering Team recently took another innovative step forward in cybersecurity, mapping our content to Sigma Rules and deploying a library to convert rules to product queries to improve detection efficacy through enhanced mitigation recommendations. Dubbed SigmAIQ, this is the first opensource repository of its kind, and yet another tool AttackIQ has added to our already vast testing and detection arsenal.
Read More
Infecting the Infected: Rhysida’s Ruthless Ransomware Regime
AttackIQ Flex

Infecting the Infected: Rhysida’s Ruthless Ransomware Regime

As we’ve seen time and time again in our cybersecurity landscape, the wicked prey on the weary and take no prisoners along the way. Rhysida, an emerging ransomware group, serves as a perfect example of this. While their activities span across a variety of sectors and regions around the world, they have taken a keen taste to vulnerabilities found within the realm of healthcare.
Read More
CISA and NSA’s Top 10 Control Misconfigurations? Use BAS and MITRE ATT&CK to Defend Against Them
AttackIQ

CISA and NSA’s Top 10 Control Misconfigurations? Use BAS and MITRE ATT&CK to Defend Against Them

The National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) recently released their top 10 list of common cybersecurity misconfigurations. Some of these include your standard slew of don’t use default software settings, don’t make weak passwords, and don’t practice poor MFA hygiene. No surprise there for most security teams, but apparently, it’s common enough that they all made the top 10 list of things people do anyway.
Read More
Regulatory Revolution: Redefining Global Cybersecurity through Performance-Driven Standards
Cybersecurity Policy

Regulatory Revolution: Redefining Global Cybersecurity through Performance-Driven Standards

The landscape of global cybersecurity is undergoing a seismic shift, marked by a fervent departure from traditional compliance-based strategies towards a new era of performance-based fortification. Spearheaded by dynamic changes in the regulatory frameworks of powerhouse economies like the US and EU, this evolution aims not just for compliance checkboxes but tangible security outcomes that defy mounting threats and historical failures in defense mechanisms.
Read More
Tainted Defenses: Emulating Gallium’s Operation Tainted Love
AttackIQ Flex

Tainted Defenses: Emulating Gallium’s Operation Tainted Love

Though the band Soft Cell may be considered a one-hit wonder with their 1981 hit song “Tainted Love”, the same cannot be said for Gallium, a Chinese-based threat actor that has continued to wreak havoc in the Middle Eastern telecommunications sector for over a decade now. Their most recent cyberespionage campaign? Operation Tainted Love.
Read More
Combatting Kimsuky and Safeguarding National Intelligence
AttackIQ Flex

Combatting Kimsuky and Safeguarding National Intelligence

In the covert realm of cyberspace, a formidable adversary has emerged – a state-sponsored, North Korean group known as Kimsuky. Their clandestine operations are not motivated by profit, but by the pursuit of state secrets and strategic intelligence for the Democratic People’s Republic of Korea (DPKR).
Read More
Emulating Sogu/PlugX: The Sophistication of Malware Behaviors
AttackIQ Flex

Emulating Sogu/PlugX: The Sophistication of Malware Behaviors

If you’ve at all followed the work of AttackIQ’s Adversary Research Team (ART) in recent years, you’re well aware of their relentless pursuit for actionable, incisive, quantitative, and cutting-edge insights into the art (no pun intended) of adversary emulation.
Read More
Content Filtering: Your Network’s Digital Bouncer
AttackIQ Flex

Content Filtering: Your Network’s Digital Bouncer

As newer and more sophisticated threats continue to enter today’s cyber landscape, content filtering remains a tried-and-true tool that aids organizations in threat prevention, regulatory compliance, network security and policy enforcement by controlling and managing the type of content users can access or share based on defined criteria. Making sure these policies work is critical in preventing insider threats and maintaining compliance with corporate usage policies.
Read More
The Resilience of Endpoint Antivirus (AV)
AttackIQ Flex

The Resilience of Endpoint Antivirus (AV)

In the ongoing battle against cyber threats, the synergy between Endpoint Antivirus (AV) software and a cutting-edge solution like AttackIQ Flex plays a pivotal role in fortifying your defenses.
Read More
Defend as One: UK Cyber Security Strategy for Health and Adult Social Care to 2030
Breach and Attack Simulation

Defend as One: UK Cyber Security Strategy for Health and Adult Social Care to 2030

The UK Department of Health & Social Care (DHSC) recently released their “…
Read More