Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

February 2024

Unlocking Efficiency: Building Automation in ThreatQ Threat Intelligence Platform

Staying ahead of evolving threats is crucial for organizations in all industries. Threat intelligence platforms ( TIPs) play a pivotal role in this endeavor, providing a centralized hub for collecting, analyzing, and disseminating threat intelligence. Introducing the ThreatQ Platform, purpose-built for threat detection and response. To further enhance its capabilities, organizations can leverage automation, streamlining processes and fortifying their cybersecurity posture.

What are secrets? Why hardcoded secrets are a security risk. Explained in 60 seconds

Secrets like API keys, Certificates, and credential pairs are used throughout modern software development. However, these pose a significant risk as attackers are always after them to gain unauthorized access to our system. This video explains in 60 seconds why hardcoding secrets or insecurely storing them is a security issue. The video also addresses some tools to use to manage your secrets or to scan your sourcecode for secrets,

Pros and Cons of Open-Source Software to Support Critical Infrastructure

Open-source software is becoming a top choice for professionals. From completing internal tasks to supporting public-facing servers, you can see open-source applications everywhere. But before you start using such software for critical infrastructure, you must understand its pros and cons. Once you know both sides of the open-source software, it would be easy to conclude whether to use it or not.

2.7 SecurePortal Update: Did You Say Dashboard Widgets?

‍A trusted authority in cybersecurity, our Product & Systems Owner boasts a proven track record in Penetration Testing. Their clear communication empowers teams to take decisive action towards a safer digital environment. Confident, professional, and insightful, they are a valuable asset in today's digital world.

Random but Memorable - Episode 12.1: Data Breach Box Set with Jayson E Street

We're back! Join the podcast crew for a brand new season of random security. We're kicking off our first episode with notorious hacker and expert security consultant, Jayson E. Street. Settle in, as he recalls how understanding human behavior led him to successfully robbing banks and organizations on five different continents.

Introducing Cato EPP: SASE-Managed Protection for Endpoints

As cyber threats continue expanding, endpoints have become ground zero in the fight to protect corporate resources. Advanced cyber threats pose a serious risk, so protecting corporate endpoints and data should be a high priority. Endpoint Protection Platforms (EPPs) are the first line of defense against endpoint cyber-attacks. It provides malware protection, zero-day protection, and device and application control. Additionally, EPPs serve a valuable role in meeting regulatory compliance mandates.

Reporting AppSec risk up to your CISO

For security leaders, building a strong working relationship with your CISO often comes down to your ability to provide clear reports and concise risk summaries. Your reports allow CISOs to perform a vital responsibility of their role: translating highly technical security jargon into actionable recommendations that will reduce risk and improve security maturity across the organization. And in the case of a breach or zero-day event, CISOs may be the bearer of bad news.

A Deep Dive into Penetration Testing of macOS Applications (Part 3)

This is the final installment of the blog series “A Deep Dive into Penetration Testing of macOS Applications.” Previously, we discussed the structure of macOS applications and their analysis techniques. Now, we will focus on client-side attacks in macOS applications. In penetration testing, the goal is to identify vulnerabilities in the app. To do that effectively, it’s important to understand how these attacks work. So, let’s dive in and learn more!

Cloud Security and the Power of Runtime Insights

Today’s digital organizations thrive in the cloud. The advantages are undeniable – cost savings, scalability, and seamless access to resources, applications, and data all foster better business agility, collaboration, and innovation. With over 85% of organizations adopting a cloud-first strategy by 2025, it’s clear that the cloud is integral to modern operations.

APIs and automation: The good, the bad, and the better

APIs are often adopted by businesses as a way to automate certain operational tasks. This not only helps to introduce efficiencies, it also reduces the chance of human error in repetitive, manual actions. But the relationship between APIs and automation doesn’t end there. To streamline the API management process, developers have started automating a variety of tasks in the API lifecycle, from development to production.