CyberProof Acquires Interpres Security
A Gartner distinguished vendor in Continuous Threat Exposure Management (CTEM) and Automated Security Control Assessments (ASCA).
Better Security, Together
Our worldwide security operations teams work closely with your enterprise security organization, collaborating to deliver better security together, to protect you today against tomorrow’s threats.
Cloud First Security
CyberProof is a cloud first security operations company, enabled through key cloud partners, to help deliver the most cutting edge security services to help protect your enterprise.
SecOps & Risk mitigation
CyberProof uses OSINT and threat intelligence feeds for visibility into threats.
CyberProof’s adaptable playbooks address continuously evolving threats with updated strategies.
Professionals manage sophisticated networks, leveraging experience to counter advanced threats.
Professionals manage sophisticated networks, leveraging experience to counter advanced threats.
24/7 global SOC support ensures incident response with guaranteed SLA.
24/7 global SOC support ensures incident response with guaranteed SLA.
CyberProof develops recovery plans, restoring capabilities after a cyber incident.
Classify and manage enterprise assets, understanding risks and data sensitivity.
Non-destructive tests uncover potential exploits in assets and applications.
Mitigate security issues early with CyberProof’s training and awareness programs.
Rigorous security assessment for on-premise and cloud applications to ensure protection.
IAM manages user access, monitors for anomalies, ensuring security.
Cloud First approach ensures compliance and security within cloud environments.
Managed service for SIEM, EDR, MXDR, and threat intelligence solutions.
Identify, assess, and mitigate security vulnerabilities through regular scanning.
Partners
“Today I have complete visibility into the entire environment, in real time”
Jamil Farshchi | Equifax CISO
CyberProof Acquires Interpres Security
By leveraging and integrating the Interpres Security CTEM solution into its security services portfolio, CyberProof is able to continuously identify, assess, and prioritize risk while adapting defense services, like MDR, Vulnerability management and Use case management to address ever evolving threats. Take proactive steps to fortify your security today!
Start the journey today
Case Studies
Retail Company Reduces Data Costs by 85% with SIEM Transformation
90% increase in visibility after deploying Microsoft XDR with CyberProof
Enterprise saves millions on data ingestion & storage following cloud migration.
SOC unification streamlines enterprise insurance company’s security & network monitoring operations.
Global medical devices company gains visibility and meets stringent compliance standards across global geos
Pharmaceutical organization significantly enhances threat detection and response times
Threat Alerts
The Rise of FlowerStorm in the Phishing as a Service Market
A growing trend in the cybercrime landscape is the rise of “FlowerStorm,” a Microsoft 365 phishing-as-a-service (PhaaS) platform that has gained popularity following the sudden collapse of Rockstar2FA in November 2024. Rockstar2FA previously facilitated large-scale adversary-in-the-middle (AiTM) phishing attacks, targeting Microsoft 365 credentials with advanced evasion techniques and user-friendly features. However, after a partial infrastructure failure rendered much of Rockstar2FA’s platform inaccessible, FlowerStorm quickly emerged as a prominent alternative, filling the gap in the PhaaS market.
Researchers highlight similarities between Rockstar2FA and FlowerStorm, including their use of phishing portals mimicking Microsoft login pages, shared backend infrastructure patterns, and synchronized activity trends. While the platforms may share a common operational ancestry, the rise of FlowerStorm underscores a sustained demand for sophisticated phishing kits that can bypass multi-factor authentication (MFA) and harvest credentials at scale.
The Growing Threat of Cross-Domain Attacks
Cross-domain attacks have become increasingly prevalent over the last year, challenging organizational security measures by targeting the intersections and weaknesses across multiple domains such as endpoints, identity systems, and cloud environments. These sophisticated strategies are employed by threat actors like eCrime groups, for instance, SCATTERED SPIDER, and state-affiliated actors like North Korea’s FAMOUS CHOLLIMA, who exploit security vulnerabilities to penetrate organizations, navigate laterally, and avoid detection.
The key aspect of these attacks is the misuse of legitimate credentials. Adversaries no longer forcibly breach systems; instead, they discreetly “log in” using stolen or compromised credentials. By doing so, they merge with regular traffic, using authorized tools and processes, which makes it tough for security measures to spot them as they cross domains and heighten their access levels.
The growing trend of cross-domain and identity-centric threats has revealed a significant flaw in organizations that only treat identity security as a checkbox for compliance rather than an integral part of their security framework. Many companies use disconnected security tools that address just pieces of the identity challenge, which leaves gaps in visibility and operational inefficiency. This fragmented approach can’t secure the identity landscape effectively. It also produces security tool gaps and causes a dangerous disconnection between security teams. For example, a divide between teams that manage IAM tools and those in charge of security operations leads to critical visibility gaps and exposes vulnerabilities in security architecture across on-premises and cloud environments. These are the vulnerabilities that adversaries exploit in their attacks.
Awards
Start the journey today