A conversation with Dr Darren Williams, Founder and CEO of BlackFog
Founded in 2015, BlackFog is a global cybersecurity company that has pioneered on-device anti data exfiltration (ADX) technology to protect companies from global security threats such as ransomware, spyware, malware, phishing, unauthorised data collection and profiling. BlackFog’s preventative approach to security recognises the limitations of existing perimeter defence techniques and neutralises attacks before they happen at multiple points in their lifecycle.
The European spoke to CEO Dr Darren Williams to find out why BlackFog is trusted by corporations all over the world, and how it is redefining modern cybersecurity practices.
What is Anti Data Exfiltration (ADX) technology, and how does it differ from traditional cybersecurity measures like Antivirus and EDR/XDR?
When most people think about cybersecurity, they instinctively think about protecting the perimeter to keep the bad guys out. BlackFog makes the assumption that if they are intent on getting in, they will, and as such we take an entirely different approach with ADX, a new cybersecurity category we pioneered in 2021. Rather than focusing on protecting the perimeter, BlackFog is essentially watching the back door, preventing the bad actors from leaving with any data. We do this by filtering network traffic in real-time to effectively stop cyberattacks as they happen.
BlackFog is also automated and requires no human intervention or laborious data classification. Threats are stopped automatically which is very different to most cybersecurity solutions in the market today.
How does BlackFog’s ADX technology help in preventing ransomware attacks and data breaches?
Cyberattacks today are all about data theft for extortion; in fact, in 2024 we are seeing data exfiltration occur in 94% of all publicised ransomware attacks. By preventing unauthorised data exfiltration, BlackFog effectively stops attackers in their tracks. No data loss means no successful cyberattack and no data breach. We’re proud to say we are effectively blocking 99% of ransomware and none of our customers have had a successful attack.
Can you explain how BlackFog’s AI-based algorithms enhance cybersecurity and protect against zero-day attacks?
BlackFog’s AI-based algorithms are trained on a wide range of parameters that monitor process behaviour, intent and data chain of custody to determine the legitimacy of every packet. Unlike signature detection-based techniques it is able to determine in real- time whether a zero day attack is underway.
Outline some of the key benefits of using BlackFog’s on-device data privacy technology for organisations?
Organisations who have added BlackFog to their cybersecurity defence strategy really benefit from 24/7 automated protection from all cyberthreats, across all of their devices, no matter where their employees are based. In a world where the majority of attacks are taking place at night, holidays and weekends, this is invaluable when it comes to preventing ransomware and other cyberthreats. Most solutions operate on an “alert” basis where someone is required to react to the identified threat, BlackFog is doing this automatically without any human intervention. In addition, our customers can rest assured that their data is secured across the network, and on all end user devices.
How does BlackFog ensure compliance with global privacy and data protection regulations?
BlackFog is entirely focused on securing data and preventing unauthorised data exfiltration. Leveraging, on-device technology, AI-based algorithms and Geofencing, BlackFog blocks unauthorised data transfers in real-time, helping organisations comply with data protection regulations that mandate the safeguarding of sensitive information.
BlackFog also provides detailed reporting and analysis. This transparency aids organisations in demonstrating compliance during audits and assessments. BlackFog assists organisations in maintaining compliance with data protection regulations such as GDPR, HIPAA, and CCPA, thereby reducing the risk of data breaches and associated penalties.
Which industries can benefit the most from BlackFog’s cybersecurity solutions, and why?
BlackFog is an effective solution for all industries. No one is immune from attack, and everyone has data to protect. It’s automated 24/7 protection is particularly valuable for organisations with limited IT resources. BlackFog also offers a Virtual CISO solution for those who prefer a completely managed service backed by dedicated professionals.
Can you share some success stories or case studies where BlackFog has effectively prevented cyberattacks?
A recent one that comes to mind involved a manufacturing customer of ours. On a Saturday afternoon one of their servers was attacked using a core process, hackers were attempting to exfiltrate data to the dark web. This particular attack was reported as an aggressive dark web attack 992 times in the few days prior. With no action required from the organisation BlackFog stopped this attack dead in its tracks, ensuring no data was exfiltrated.
In another recent incident attackers were using a series of Botnets to attack devices globally. BlackFog stopped over 200 of these attacks which were reported as being Brute Force, Port Scanning, Hacking, Phishing and Exploited host attacks. These attacks had been reported globally around 500 times from nine countries, BlackFog was able to stop these attacks instantly for our customers. Finally, another weekend attack on a US manufacturing firm saw attackers attempting to deploy a RAT (remote access tool) to gain control of their server and all of their sensitive data. The attackers made over one million attempts and BlackFog blocked every one of them, forcing them to move on to the next target. So many of these incidents occurred in the evening or on the weekend, demonstrating the power and necessity of round the clock automated threat prevention.
What are the latest developments or upcoming features in BlackFog’s cybersecurity offerings?
We recently announced BlackFog 5.0 and this latest version takes cybersecurity protection to an entirely new level with “Air Gapping”, “Real-Time Geofencing” and “Baseline Activity Monitoring”, for even more powerful insider threat protection. In addition, BlackFog 5.0 has been SOC 2 Type II certified by an independent auditor to ensure that our security protocols and use of data meet strict data security requirements. This highlights BlackFog’s commitment to security and trust with customer data and our cybersecurity platform.
Further information
www.blackfog.com
