Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Hunting PrivateLoader: The malware behind InstallsKey PPI service

Since July 2022, Bitsight has been tracking PrivateLoader, the widespread malware downloader behind the Russian Pay-Per-Install (PPI) service called InstallsKey. At the time, this malware was powering the now decommissioned ruzki PPI service. Figure 1 presents a brief description of the service, which was found in their sales telegram channel. Fig. 1 - Service description on telegram channel profile (Russian and English).

Tenable for Vulnerability Scans: Maximizing Your Security Posture

Vulnerability scans are essential to an effective cyber defense strategy, offering a proactive approach to uncover and mitigate potential threats before they can exploit your systems. At the forefront of this crucial practice are Tenable and RiskOptics, each offering comprehensive solutions designed to conduct thorough vulnerability assessments. These tools identify weaknesses and help prioritize and address them, significantly strengthening your overall security posture.

Why There's No Such Thing as PCI Certification

If your business takes debit or credit card payments online or in person, you’ve most likely heard of “PCI DSS” or “PCI SSC.” These words relate to sensitive data security procedures, namely the controls that a retailer or payment processor should have to protect payment card data from cyber attacks. Being PCI compliant does not ensure a company’s systems are safe; nonetheless, it is a significant step in that direction.

Who Owns PCI Controls? Unpacking ZenGRC in Compliance

PCI DSS compliance is crucial for any business that processes, stores, or transmits cardholder data. But who exactly is responsible for implementing and enforcing PCI DSS requirements? This blog post will unpack PCI data security standard controls, who owns them, the penalties for non-compliance, and how a Governance, Risk management, and Compliance (GRC) platform like ZenGRC can help streamline compliance.

Programmable Logic Controllers and Cybersecurity Risk

Considered the "brain" of industrial automation, programmable logic controllers (PLCs) are an important factor in industrial control systems (ICS), especially for critical infrastructure in the public sector. PLCs are an industrial computer used to control automated devices in a variety of industries, including industrial manufacturing and critical infrastructure. This article offers suggestions for PLC security risks, as well as cybersecurity standards for risk mitigation.

2024's Best GRC Platforms for Enterprises: An Expert Ranking

In today’s highly complex business landscape, enterprises are ever more aware of the need for robust governance, risk management, and compliance (GRC) capabilities. Hence the demand for effective GRC platforms has never been higher. These platforms not only assure that organizations stay on the right side of regulations. They also secure your business against a plethora of cyber threats and streamline governance processes.

The EU AI Act Explained: Implications for Your Business

The European Union’s Artificial Intelligence Act emerged at the end of 2023 as a landmark law for the digital age and for the regulation of artificial intelligence. It is the world’s first comprehensive AI legislation to govern the ethical development and safe use of AI technologies. The “EU AI Act,” as it’s known, strives to impose a balanced framework as businesses automate manual tasks and deploy AI algorithms to drive efficiency and innovation.

TPRM Strategies for India's Digital Personal Data Protection Act

India established a framework for protecting and processing personal data called the Digital Personal Data Protection Bill. After passing both houses of Parliament, this bill evolved into the Digital Personal Data Protection Act (DPDP) in 2023. This act creates a robust and comprehensive framework to protect sensitive information while supporting India's economic growth and digital transformation.

Introduction to Cloud Risk Management for Enterprises

Every business needs to manage risks. If not, they won’t be around for long. The same is true in cloud computing. As more companies move their resources to the cloud, they must ensure efficient risk management to achieve resilience, availability, and integrity. Yes, moving to the cloud offers more advantages than on-premise environments. But, enterprises must remain meticulous because they have too much to lose.

Risk Management in Aviation Logistics: Mitigating Challenges for Seamless Operations

As a trusted partner to the United States Government, aviation logistics consists of and involves the complex coordination of various activities to ensure the timely and efficient movement of goods and movement of people by way of air. With increased demand for faster, more expeditious forms of transportation, air transportation has grown exponentially and therefore the logistics sector faces multiple challenges that can disrupt operations and even sometimes result in jeopardizing safety.