Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

March 2024

Revolutionizing Spaces: The Brivo Way to Smarter, Personalized Access

Dive into the world of smart spaces with Brivo! In this video, we explore how Brivo is leading the charge in transforming spaces into intelligent, personalized, and accessible environments. Using the power of open data and artificial intelligence, Brivo is not just about access control; it's about creating a seamless experience that understands and adapts to your needs. From commercial real estate to multifamily residential buildings, discover how Brivo's innovative solutions are setting new standards in security and convenience.

Mend.io Launches Mend Container

While cloud-native development brilliantly solves problems related to scalability and effective resource use, a more complex architecture and new security challenges come along for the ride as well. The added layer of abstraction of container architecture can make tracking down vulnerabilities and poorly stored secrets, assessing true risk, and enforcing policies difficult for security teams using only traditional AppSec tools.

Elevating Security Intelligence with Splunk UBA's Machine Learning Models

One of the most challenging aspects of running an effective Security Operations Center (SOC) is how to account for the high volume of notable events that actually do not present a risk to business. These events often include common occurrences like users forgetting their passwords a ridiculous number of times or accessing systems at odd hours for valid reasons. Despite their benign nature, struggling to handle the volume of such potential threats may often overwhelm limited staff.

Cloud Unfiltered with Nick Eberts - Complexity of Fleet Management - Episode 6

Nick Eberts sits down with host Michael Chenetz to discuss platform engineering, fleet management and cloud-native security on this episode of Cloud Unfiltered. Outshift is Cisco’s incubation engine, innovating what's next and new for Cisco products and sharing our expertise on emerging technologies. Discover the latest on cloud native applications, cloud application security, generative AI, quantum networking and security, future-forward tech research, our latest open source projects and more.

What is an Incident Response?

After a bank heist, the work begins with specialized teams and plans engaged, allowing for analysis of the event, and from this analysis, the bank can prepare a response to the incident. The incident response may include stricter entry protocols, additional guards inside or around the building, or the installation of metal detectors, ID scanners, and panes of bulletproof glass surrounding the tellers.

Celebrating Cybersecurity Excellence: Forbes Most Cybersecure Banks, 2024

To recognize best-in-class consumer financial institutions and their Chief Information Security Officers (CISOs), Forbes just released its 2024 list of the top 50 consumer banks with the most robust cybersecurity. Together with Forbes, we are proud to recognize top CISOs and their dedication to safeguarding customer data.

Cross-Mapping and GRC Compliance

As businesses grow, they encounter more regulatory requirements — and soon enough, those requirements can feel like a straitjacket of overlapping obligations. The way to wriggle free from that straitjacket is to develop strong governance, risk, and compliance (GRC) capabilities. One important GRC capability is control mapping: mapping various regulatory requirements to specific controls your business does (or does not yet) have, so that you can see where you need to introduce new controls.

Why PCI 4.0 Matters: A Deep Dive into Its Importance

The Payment Card Industry Data Security Standard (PCI DSS) is a crucial security standard for protecting personal data during credit card transactions — and managing PCI compliance is essential for businesses that handle such data. The latest PCI DSS standard, Version 4.0, goes into effect March 2024. Organizations will need to adapt to new requirements and maintain compliance to safeguard sensitive information.

How to Get Started with Red Teaming - Expert Tips

During my time delivering red team engagements over the last few years, I've had the luxury of working with organisations who’re just starting out with their red teaming approaches, all the way up to battling hardened and heavily monitored networks. In this experience, I’ve found that one of the key areas that makes or breaks a successful operation is the scoping, sizing and planning of an engagement. It can often be daunting to explore more threat-led and realistic testing approaches.

The Inevitable Threat: AI-Generated Email Attacks Delivered to Mailboxes

Generative AI exploded in popularity not too long ago but its influence on text and media creation is already undeniable. AI content is becoming ubiquitous on the internet, and this technology is slowly seeping into real life, impacting sectors such as healthcare, finance, agriculture, and education. In a previous blog post, we discussed the rise of malicious AI chatbots and how they can be leveraged in cyberattacks. Now, we are seeing these potentially AI-written spam being distributed via email.

Trustwave Government Solutions Named a Major Player in the IDC MarketScape: U.S. National Government Professional Security Services 2024 Vendor Assessment

Trustwave Government Solutions (TGS) was named as a Major Player in the inaugural IDC MarketScape: U.S. National Government Professional Security Services 2024 Vendor Assessment (doc #US51875423, February 2024), citing our numerous solutions created with federal agencies in mind. We’re honored that the IDC MarektScape has named TGS a Major Player.

What is a Social Engineering Attack? Techniques and Ways to Prevent

Everyone has received a spam text or email at some point. Their hallmarks are widely known; they often include poor or strange grammar, suspicious links, suggested connections with companies or people, or random individuals asking for help in some capacity. Sometimes, these communications allow scammers and malicious actors to learn about their targets. These targets may be individuals, companies, vendors, software hosts, or any other entity with data worth a cent.