Blog: cyber security in practice — Falcon Security https://falcon-security.org/blog/ Falcon Security blog: incident response, bug bounty, data breach and threat intelligence explained from practice, with checklists you can use the same day. en Tue, 29 Sep 2026 00:00:00 GMT The first hour of an incident: six steps before the responders arrive https://falcon-security.org/blog/first-hour-of-an-incident/ https://falcon-security.org/blog/first-hour-of-an-incident/ Tue, 29 Sep 2026 00:00:00 GMT What to do, and what not to touch, in the first hour after you notice an attack. A short checklist for the people who are on site. incident response forensics ransomware Bug bounty or penetration test: which one comes first https://falcon-security.org/blog/bug-bounty-or-pentest/ https://falcon-security.org/blog/bug-bounty-or-pentest/ Tue, 22 Sep 2026 00:00:00 GMT Both find vulnerabilities, but they answer different questions. How to choose, in what order to run them and how to tell that you are ready for a bug bounty. bug bounty penetration testing VDP Your password appeared in a data breach: what happens next https://falcon-security.org/blog/leaked-password-what-next/ https://falcon-security.org/blog/leaked-password-what-next/ Tue, 15 Sep 2026 00:00:00 GMT How a leaked password travels from an old forum to your corporate mail, why changing it in one place is not enough, and what a person and a company should do. data breach passwords credential stuffing MFA Threat intelligence that acts: from an indicator to a blocked attack https://falcon-security.org/blog/threat-intelligence-that-acts/ https://falcon-security.org/blog/threat-intelligence-that-acts/ Tue, 08 Sep 2026 00:00:00 GMT A feed with a million indicators is not intelligence. What the three levels of threat intelligence are, why indicators age in days and how to turn them into action. threat intelligence IOC SIEM cyber security