Bottom line: Security leaders must deploy decoys to detect and distract adversaries, and prioritize realistic deception tactics to evade detection.
What's happening: The Cybersecurity and Infrastructure Security Agency (CISA) has issued its first guidance on using decoys to detect and distract adversaries. The guidance focuses on deploying decoy systems, such as honeypots, to identify and isolate malicious actors. The US Department of Energy (DOE) has already started using decoy systems to detect and respond to cyberattacks.
What to do: Security leaders should prioritize realistic deception tactics to evade detection, and consider using third-party vendors, such as Honeycomb, to deploy and manage decoy systems. Conduct regular threat assessments to ensure decoy systems are effective and up-to-date.