CISA urges business to deploy decoys, lures, and honeypots to catch hackers in the act
- CISA urged organizations to deploy honeypots, lures, and honeytokens as cyber decoys
- Decoys complement Zero Trust by detecting LOTL activity and producing high‑fidelity alerts
- Guidance outlines tripwires, breadcrumbs, MITRE ATT&CK/Engage steps for scalable implementation
The US Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to deploy honeypots and various lures to better detect cyber-intrusions and keep hackers busy with spoofed materials. To that end, it recently published a new guidance to help businesses of different sizes and cybersecurity maturity implement these “cyber decoy strategies”.
“Many organizations struggle to detect adversaries who use legitimate credentials, native tools, and living off the land (LOTL) techniques to conduct discovery, move laterally, and access data,.” CISA said in a new security advisory.
“Cyber decoys are assets that appear to be legitimate systems, accounts, or data, but are designed to distract adversaries, detect their presence, or facilitate collection of cyber threat intelligence (CTI). As...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
