Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

March 2024

Celebrating 1,000 reviews on G2 and our first-ever Customer Week

Everything we do at Vanta, from the products we build to the support we deliver, is focused on putting customers first. So we’re especially excited to share our latest customer milestone. ‍ We’ve crossed 1,000 reviews on G2 and for the sixth consecutive quarter, Vanta has been named the #1 Leader in G2’s Grid® Report for Security Compliance | Spring 2024.

March Release Rollup: "Ask AI" on Desktop and Mobile App, Geo Location Search, Egnyte for Salesforce - Metadata for Folders and More

This month's product updates and enhancements rollup includes “Ask AI” on Desktop and Mobile App, Geo Location Search, and Egnyte for Salesforce – Metadata for Folders. Below is a summary of these and other new releases. Visit the articles linked below for more details.

TPRM for Government Contractors: General Services Administration Policies

The U.S. General Services Administration (GSA) is an independent agency that helps manage and support the basic functioning of federal agencies. The GSA supplies products and communications, provides transportation and office space, and oversees the government’s real estate portfolio, among other management tasks.

Third-Party Vendor Risk Management in U.S. Treasury Operations

The U.S. Treasury, also known as the Department of the Treasury, manages the finances of the U.S. government. This department has various duties, including maintaining the economic stability of the United States, managing government finances, and implementing policy decisions that impact both domestic and international affairs. Like most large organizations, the U.S.

Nightfall Named A Leader in Data Loss Prevention (DLP) by G2

Nightfall has been named a Leader in Data Loss Prevention (DLP), Sensitive Data Discovery, and Data Security in G2’s Spring ‘24 reports. We’d like to extend a huge thank you to all of Nightfall’s customers and supporters for making this possible. We’re also happy to acknowledge the Nightfall team’s tireless innovation, all in pursuit of helping customers to secure their sensitive data across SaaS apps, GenAI tools, email, and endpoints.

Narwhal Spider Threat Group Behind New Phishing Campaign Impersonating Reputable Law Firms

Using little more than a well-known business name and a invoice-related PDF, the “NaurLegal” phishing campaign aims at installing malware trojans. This new campaign spotted by security analysts at BlueVoyant demonstrates how effective spear phishing can be — even when the phishing execution itself is relatively basic. According to the analysis, threat actors impersonate well-known law firms and send out PDF attachments with the filename "Invoice_.pdf." Simple enough, right?

75% of Organizations Believe They Are at Risk of Careless or Negligent Employees

New data shows organizations are well aware that their users are one of their greatest cybersecurity risks today, and yet aren’t taking the right steps to remediate the risk. KnowBe4 exists and continues to thrive because the human threat surface is far and wide. Email, text, web surfing, phone calls and crafty combinations therein all create somewhat unique attacks. In each of these instances, the user is relying on technology to stop the threat before the attack gets to them.

New Malware Loader Delivers Agent Tesla Remote Access Trojan Via Phishing

A new malware loader is delivering the Agent Tesla remote access Trojan (RAT), according to researchers at Trustwave SpiderLabs. The malware is distributed by phishing emails with malicious attachments. “The threat begins with a fake bank payment email designed to deceive recipients,” the researchers write.

Enterprise End User SSO Login

Learn how to create your Keeper Account on iOS in less than 2 minutes with our step-by-step guide. Your Keeper vault is easy to create, simple to use, and you’ll be up and running in just minutes. You can create and access your Keeper vault by either logging in directly from Keeper via an email invitation from your Keeper Administrator or from your SSO provider dashboard.

Keeper 101 - How to Create Your Keeper Account on Android

Learn how to create your Keeper Account on iOS in less than 2 minutes with our step-by-step guide. Signing up for Keeper's Android mobile app is easy. Simply visit the Google Play Store on your device, search for Keeper, and install the Keeper Password Manager application. Once the download is complete, tap Open to start Keeper.

Common Disaster Recovery Mistakes To Avoid

In a world driven by data, the importance of disaster recovery solutions cannot be overstated. From natural disasters to cyberattacks and human errors, the risks of data loss continues to grow alongside businesses. Today, we will cover the 3 common mistakes companies make when creating a DR strategy, key steps for building an effective DR strategy for your business, and the ways Opti9 can protect your data in AWS.