Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

March 2024

TSSR: Protecting Australian Telecos Against Cyber Threats

The telecommunications sector provides critical infrastructure for many countries, enabling the exchange of information across various industries. Due to the widespread use of digital information in telecommunications, the sector has become a prime target for cyber threats from hackers, state actors, and cyber criminals. In 2023, telecommunications experienced higher credential stuffing rates than other sections, according to F5.

U.S. Veteran Data Security: Third-Party Risk Management at the VA

The United States Department of Veterans Affairs (VA) is a federal agency that provides comprehensive healthcare services, benefits, and support to military veterans and their families. The VA operates a nationwide system of hospitals, clinics, and benefits offices focused on ensuring the health, welfare, and dignity of those who served in the United States armed forces.

Modernizing financial services: A deep dive into Elastic Cloud on AWS for Observability, Security, and more

In the dynamic landscape of financial services, data is not just currency; it's the key to innovation and operational excellence. Data is constantly streamlining from devices, logins, transfers, transactions, and much more, and it’s bound to increase with an ongoing reliance on digital channels. This creates a massive opportunity and responsibility for financial institutions, as their customers (and regulators) demand more from banking providers.

7 Ways to Quickly Detect Malicious Websites

Navigating the internet today can be a minefield. With the rise of malicious websites, customers and employees must now think twice before clicking on unfamiliar links or sites. Attackers often try to spoof and ‘brandjack’ well-reputed organizations and lure users into giving away personal info, money or letting hackers into their systems.

Significant changes to attack surface overview and many new tests

The new attack surface overview puts the changes and potential risky exposures to your attack surface front and center. But that’s not all we’ve shipped in February. We’ve improved our Azure domain connector, simplifying onboarding for those users, and sent dozens of new vulnerability tests, such as CVE-2024-27199: TeamCity Authentication Bypass and CVE-2024-21893: Ivanti Connect Secure, Policy Secure SSRF.

(Re)Imagine Workplace Access Management

As organizations seek out solutions to secure their hybrid and remote workplace, some daily tasks like signing into 10, 20, or 30 applications can really interfere with employee productivity. The fatigue of remembering so many passwords for so many applications nearly always leads to undesirable password behaviors such as password re-use and choosing weak passwords, plus the annoyance of forgotten passwords and the burden of resets.

Xalient Network as a Service (NAAS)

Cloud-based Network Solution In today’s digital age, businesses need a flexible and scalable network infrastructure that can keep up with the demands of the modern world. That’s where NaaS (Network as a Service) comes in – by providing a cloud-based network solution designed to meet your business's unique needs. Why NaaS? Flexible: NaaS solutions are highly flexible, allowing businesses to choose the level of service that best meets their needs. Whether you need a basic network solution or a more complex one with advanced features, NaaS providers can offer customized solutions to meet your unique requirements.

Why Identity Security Is Essential to Cybersecurity Strategy

In the modern digital landscape, cybersecurity isn’t just a technical challenge – it’s a business imperative. At the heart of cybersecurity is identity security – the principle that the right people have the right access at the right time. As we venture further into the digital world, protecting the business from modern threats is crucial, which inherently adds complexity, making smart privilege controls a must-have step toward an identity-first strategy.

How to Disseminate Honeytokens At Scale: Step-by-Step Guide to Deployment Jobs

Learn how GitGuardian Honeytoken's new feature, Deployment Jobs, revolutionizes early breach detection and code repository protection. Automate honeytoken deployment across multiple repositories with ease, ensuring ongoing security and peace of mind.

What Is MXDR and Why Do You Need It?

Managed XDR (MXDR) is a service-led security solution that uses a wide range of telemetry sources to better unify and automate incident investigation, analysis, and response. Extended Detection and Response (XDR) is the technology at the heart of MXDR. It is a security platform that unifies telemetry across multiple security layers, such as networks, endpoints, applications, email, identities, and cloud services, into a single platform.