Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

July 2024

The Importance of Know Your Business (KYB) in the Fintech World

In the dynamic and rapidly evolving fintech industry, regulatory compliance and risk management are crucial for maintaining trust and ensuring sustainability. One critical component of this regulatory framework is the Know Your Business (KYB) process. KYB involves verifying the legitimacy and credentials of business clients and partners, ensuring they are who they claim to be, and assessing their potential risks. In the fintech world, KYB is essential for mitigating fraud, ensuring compliance with regulations, and fostering a trustworthy ecosystem.

What are Microsoft Power Apps, and What are their Use Cases?

Microsoft Power Apps is a low-code application development platform that allows businesses to quickly build custom web and mobile apps for their organizations without writing code. Power Apps provides a graphical interface and drag-and-drop tools to design and connect apps to existing business data and systems.

The Top 5 Security Logging Best Practices to Follow Now

Security logging is a critical part of modern cybersecurity, providing the foundation for detecting, analyzing, and responding to potential threats. As highlighted by OWASP, security logging and monitoring failures can lead to undetected security breaches. With the average cost of a data breach adding up to $4.45 million, most organizations can’t afford to miss a security incident.

Pyramid Scheme: What Is it and How Does It Work?

Pyramid schemes are one of the world's most well-known forms of financial fraud. For many years, they have victimized people who trust the promises of quickly making easy and significant profits. The frightening thing about these schemes is that they are built on a "business model" doomed to collapse. It is essential to understand what principles the pyramid operates in to be able to reveal and then avoid involvement in such a scam.

SAST - All About Static Application Security Testing

Updated on 07/18/2024 Static Application Security Testing (SAST) has been a central part of application security efforts for more than 15 years. According to the Crowdstrike 2024 State of Application Security Report, eight out of the top 10 data breaches of 2023 were related to application attack surfaces, so it’s safe to say that SAST will be in use for the foreseeable future.

Emerging IoT Wiper Malware: Kaden and New LOLFME Botnet Variants

Wipers are malware that delete data on a device or make it inaccessible. They can be used for sabotage, to destroy evidence of an attack or simply to make a device unusable. IoT wipers often rewrite important parts of the firmware of an IoT device, rendering that device useless, so they are also known as “brickers”. Recent notorious examples of IoT wipers are AcidRain which was used by a Russian APT to brick satellite modems in Europe at the outset of the Russian invasion of Ukraine in 2022.

What To Do if You Receive an OTP Code You Didn't Request

Receiving a One-Time Password (OTP) code that you didn’t request over text or email could be a sign that someone is trying to log in to one of your online accounts to gain access to your private information. An OTP code is a numeric code used as an additional form of verification to authenticate users before they can log in to their accounts. As the name suggests, this code can only be used once.

Best Practices When Using a Password Manager

When you invest in a password manager, you should follow some best practices when setting it up to ensure your information stays secure. Some of the best practices when using a password manager include creating a strong master password, enabling MFA, changing weak passwords, auditing your passwords and setting a short inactivity logout timer. Continue reading to learn more about the best practices when you use a password manager like Keeper.