There Is Still No Such Thing as a Zero Day: Staying Ahead of the Vulnpocalypse

Posted on by Mike Shinn

The zero day claim, 20 years on, and the amassing vulnpocalypse About twenty years ago I told a conference audience that there is no such thing as a zero day. I meant it then and I mean it more now. A “zero day” is a fact about the vendor’s calendar: the bug became public before […]

Protecting Industrial Operations from Legacy IT Security Risks

Posted on by Dean Lombardo

Legacy systems in OT environments often include aging Windows, Linux, and Unix-based computers that configure, monitor, and manage industrial equipment. These systems can introduce vulnerabilities into critical operations, while compatibility and uptime requirements complicate conventional security measures. Agentless EDR offers a way to extend continuous security and compliance monitoring to difficult-to-protect systems. Industrial operations rely […]

The Vulnerability Came Back: Why Old CVEs Still Demand Attention

Posted on by Dean Lombardo

Old vulnerabilities do not necessarily disappear from attackers’ playbooks. Instead, older CVEs can remain actively exploited years after their initial disclosure, particularly when vulnerable legacy and end-of-life (EOL) systems remain in operation. As artificial intelligence (AI) and automation accelerate vulnerability exploitation, organizations need to identify and protect weaknesses regardless of their age. Atomicorp helps organizations […]

NIST SP 800-171 Rev. 3: The Current Modern CUI Baseline

Posted on by Dean Lombardo

For government contractors and MSPs that store, process, or transmit Controlled Unclassified Information (CUI), NIST SP 800-171 Rev. 3, published on May 14, 2024, provides a modern framework for strengthening security while preparing them for evolving federal cybersecurity requirements, including those that may be reflected in future CMMC and FedRAMP updates. Atomicorp delivers the endpoint […]

Why Continuous Compliance Monitoring Matters More Than Ever

Posted on by Dean Lombardo

Continuous compliance monitoring provides the ongoing visibility organizations need as AI-accelerated attacks shorten the time between vulnerability discovery and exploitation. Atomicorp’s Atomic OSSEC EDR delivers continuous compliance monitoring and benchmarking across IT and OT environments through agent-based or agentless deployment on modern, legacy, and unsupported operating systems. Built-in antivirus, endpoint firewall, file integrity monitoring, vulnerability […]

Securing Unsupported Software With Layered Compensating Controls

Posted on by Dean Lombardo

Unsupported software security—or a lack of it—has quietly become one of the greatest sources of cyber risk. While discussions often focus on legacy web applications, organizations rely on many kinds of software that can no longer be patched, upgraded, or supported. This includes not only internet-facing applications, but internal business systems, middleware, custom applications, industrial […]

Unsupported Windows Security: Protecting End-of-Life Systems

Posted on by Dean Lombardo

Unsupported Windows systems continue to power manufacturing, healthcare, retail, OT, and critical business applications long after Microsoft support ends. Unfortunately, attackers don’t stop targeting these systems simply because the vendor has retired them. As security updates disappear and new vulnerabilities continue to emerge, organizations need compensating security controls that help reduce risk while extending the […]

Unix System Security: Real-Time FIM, CVE Detection, and Compliance for Legacy AIX and Solaris

Posted on by Dean Lombardo

Atomicorp has expanded coverage for legacy Unix system security by delivering both real-time file integrity monitoring (FIM) and CVE detection and correlation for AIX and Solaris platforms. These extra-edge capabilities deliver the visibility, monitoring, and compliance controls organizations need to secure business-critical systems beyond vendor support lifecycles, reduce risk, and avoid operational disruption. Request a […]

Drag and Drop Firewall Management in Atomic OSSEC

Posted on by Dean Lombardo

Simple Drag and Drop Firewall Management with Full Control Firewall management has traditionally relied on CLI workflows, requiring manual configuration and ongoing rule maintenance. While powerful, this approach can create challenges around consistency, visibility, and operational efficiency—especially at scale. Conversely, drag-and-drop firewall management offers simplicity and easier orchestration. Atomic OSSEC 7.0 introduces drag-and-drop firewall management, […]

Kubernetes Security: Protecting API Servers, Endpoints, and Workloads

Posted on by Mike Shinn

Kubernetes API Security: Protecting Endpoints and Cluster Infrastructure Kubernetes has become the foundation of modern cloud-native infrastructure, helping organizations orchestrate containers, automate deployments, scale workloads, and manage distributed applications across cloud and hybrid environments. Often described as the “operating system for distributed containers,” Kubernetes provides the automation and flexibility needed to support modern application development […]