
CISA Wants Defenders to Plant Fake Credentials and Systems to Catch Hackers
CISA published guidance urging organizations to deploy decoy credentials, accounts, systems, and honeytokens to detect post-compromise attacker activity.
7 stories, newest first · one card per story

CISA published guidance urging organizations to deploy decoy credentials, accounts, systems, and honeytokens to detect post-compromise attacker activity.

CISA's first decoy guidance tells critical infrastructure to deploy honeytokens and tripwires inside networks, mapped via MITRE ATT&CK and Engage, to speed detection.

CISA released guidance, "Using Cyber Decoys to Strengthen Detection and Response," helping resource-constrained teams deploy honeytokens and honeypots with existing tools.

CISA's new guidance urges organizations to deploy cyber decoys like honeytokens and tripwires to detect attackers using valid credentials and living-off-the-land techniques.

CISA issued guidance on deploying honeypots, honeytokens, and decoy systems to detect adversaries and gather threat intelligence in critical infrastructure.

CISA issued first-time guidance advising critical infrastructure operators to deploy honeypots, honeytokens, and decoys to detect and distract intruders.
CISA released guidance on cyber decoys—tripwires, breadcrumbs, honeytokens—to help defenders detect adversaries using valid credentials and living-off-the-land techniques.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views