Blogs
You Can’t Eliminate Cyberattacks, So Focus on Reducing the Blast Radius
May 12, 2022 · Threatpost
Tony Lauro, director of security technology and strategy at Akamai, discusses reducing your company’s attack surface and the “blast radius” of a potential attack.
Read article →
Are You Guilty of These 8 Network-Security Bad Practices?
December 6, 2021 · Threatpost
Tony Lauro, director of Security Technology & Strategy at Akamai, discusses VPNs, RDP, flat networks, BYOD and other network-security bugbears.
Read article →
Human Fraud: Detecting Them Before They Detect You
September 6, 2021 · Threatpost
Tony Lauro, director of security technology and strategy at Akamai, discusses how to disrupt account takeovers in the exploitation phase of an attack.
Read article →
The Underground Economy: Recon, Weaponization & Delivery for Account Takeovers
August 30, 2021 · Threatpost
In part one of a two-part series, Akamai’s director of security technology and strategy, Tony Lauro, lays out what orgs need to know to defend against account takeover attacks.
Read article →
Beyond MFA: Rethinking the Authentication Key
May 13, 2021 · Threatpost
Tony Lauro, director of security technology and strategy at Akamai, discusses hardware security dongles and using phones to act as surrogates for them.
Read article →
Behind the Botnet: Tackling Real-World Credential Stuffing Attacks
October 30, 2020 · The Daily Swig / PortSwigger
Tony Lauro on holistic bot detection, consumer identity signals, and defending against credential stuffing attacks.
Read article →
Building for Billions: Addressing Security Concerns for Platforms at Scale
April 30, 2020 · Threatpost
Lessons from Facebook and Google show how to safely scale your environment for security.
Read article →
Website, Know Thyself: What Code Are You Serving?
November 14, 2019 · Threatpost
Third-party scripts, Magecart, and protecting the code that runs in your visitors’ browsers.
Read article →
Fake News and Influence: Information Warfare in the Digital Age
August 16, 2019 · Threatpost
Information warfare, influence campaigns, and the importance of verifying what we see and share.
Read article →
Finding Beauty in the IT Architecture
July 1, 2019 · Threatpost
Designing resilient systems through capacity planning, network diversity, and layered defenses.
Read article →
Sharing Threat Intelligence: Time for an Overhaul
May 20, 2019 · Threatpost
All too often, information-sharing is limited to vertical market silos; to build better defenses, it’s time to take a broader view beyond the ISAC.
Read article →
Rogue Waves: Preparing the Internet for the Next Mega DDoS Attack
April 15, 2019 · Threatpost
Why many attack techniques can be reused – but organizations can’t defend against them.
Read article →
Three Ways DNS is Weaponized and How to Mitigate the Risk
March 13, 2019 · Threatpost
Why are hackers using the DNS infrastructure against us? The answer is more complex than you might think.
Read article →
Automotive Security: It’s More Than Just What’s Under The Hood
December 17, 2018 · Threatpost
True auto safety can only be achieved by knowing what every piece of code and hardware is that goes into the car.
Read article →
The Nature of Mass Exploitation Campaigns
November 28, 2018 · Threatpost
Examples of how attackers carry out mass exploitation campaigns and how to defend against them.