Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

January 2025

8 Privileged Access Management (PAM) Best Practices for Cloud Infrastructure

Even the simplest mistakes can leave your data wide open to cyber threats. If the worst happens and there’s an attack, cybercriminals gain free-for-all access to your cloud resources. They tamper with your data, disrupt workflows, and steal sensitive information, meaning the need for Privileged Access Management (PAM) best practices are more indispensable than ever for any robust cloud security strategy.

How To Achieve Zero-Standing Privilege in Your Organization

Your organization can achieve zero-standing privilege by following best practices such as enforcing least privilege access, implementing Just-in-Time (JIT) access and continuously monitoring and auditing privileged access. Following these best practices ensures that privileged access is granted only when necessary, and for the shortest duration possible, significantly reducing your organization’s attack surface and enhancing overall security.

Securing Patient Privacy: Techniques for De-identifying Healthcare Data

Protecting patient privacy is vital in the healthcare industry. The rise of digital records has made safeguarding sensitive information more challenging. De-identifying healthcare data ensures compliance with regulations like HIPAA while protecting patient information. Key concepts include PHI (Protected Health Information), de-identification, and the safe harbor method.

Overview of Arctic Wolf Managed Security Awareness

In this overview of Arctic Wolf Managed Security Awareness, we take a look at the importance of addressing human risk. Find out how this program uses micro learning sessions to deliver frequent, easy to consume content that builds a strong security culture. Learn more how Arctic Wolf Managed Security Awareness ends human risk by delivering 100% relevant microlearning content.

Operational Resilience Deadlines Are Coming Soon

With increasing cyber threats, data breaches, and the rapid pace of digital transformation, operational resilience has become a top priority for financial institutions. As we begin 2025, this is especially true in the UK, because of new regulations going into effect. Regulatory bodies like the Financial Conduct Authority (FCA), Prudential Regulation Authority (PRA), and the Bank of England have introduced stringent rules to safeguard the stability and resilience of the financial services sector.

Smarter ticket handling with AI and the new wave of orchestration

In this guest post, Connor Brewer, Principal Solutions Architect at Uzado - a Canadian-based IT and security service provider - showcases an innovative IT help desk app built with AI in Tines, which boasts countless other potential applications. For many IT and security teams, outdated orchestration and automation solutions create more challenges than solutions.

Beyond SIEM: Transform Into a Data-Driven Organization With Devo

The Devo Platform has earned its reputation as a powerful and innovative force in Security Information and Event Management (SIEM). Customers rely on Devo to detect and respond to threats in real time, gain complete visibility into their security posture, and streamline their security operations. But the core strengths that make Devo a SIEM leader – unmatched scalability, real-time analytics, and flexible customization – also enable us to solve a variety of other data challenges.

Innovating to Secure Software Supply Chains: Veracode Acquires Phylum, Inc. Technology for Enhanced Software Composition Analysis

The rise of emerging open-source threats presents a growing risk to organizations as attackers increasingly exploit vulnerabilities in widely used libraries, frameworks, and tools. In fact, most Software Composition Analysis (SCA) tools on the market today are unable to keep up with the volume of new overtly malicious activities in the open-source ecosystem.

Managing identities in a growing organization: Lessons from SECURA Insurance

Joe Albers, Senior Information Security Engineer at SECURA Insurance, shares how effective identity management is crucial for compliance and security in the insurance sector. In this video, Albers discusses the challenges SECURA Insurance faced in managing identities as they grew from 600 to 1,100 employees. Timely deprovisioning and secure access to critical applications was a top priority during the transition from manual processes to automation, which the company achieved seamlessly with One Identity Manager.

Track and manage open source risk across your application portfolio with Black Duck SCA | Black Duck

Learn how your security teams can take a proactive approach to managing open-source risk using Black Duck Software Composition Analysis (SCA). Join us as we explore the process of analyzing scan results, addressing new CVEs, and prioritizing remediation efforts. Key Highlights: Discover how Black Duck SCA empowers teams to surface, understand, and prioritize findings efficiently, ensuring software security and compliance.