Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Ask the Experts: Black Friday Bot Attacks

As Black Friday approaches, retailers are gearing up for the inevitable surge in online traffic. But cybercriminals are also preparing for this high-stakes season, fine-tuning their bot attack strategies to exploit inventory, pricing, and customer accounts. To shed light on these threats and what retailers can do to prepare, we consulted five experts from Netacea who shared their insights on the bot attack landscape during Black Friday and beyond.

Why Multifactor Authentication (MFA) Alone Isn't Enough to Stay Secure

Once upon a time, a username and a password were all you needed to get into most online accounts. It was convenient for users — but also convenient for hackers, who only had to acquire two static strings of characters to get unlimited access to a system until their victim (or their victim’s IT department) realized something was up.

A CISO's grimoire for outsmarting attackers

For security leaders, staying vigilant and prepared is like wielding a well-crafted spellbook. OWASP, MITRE ATT&CK, and threat research are the critical chapters in this spellbook that leaders need to leverage to anticipate and counter emerging threats effectively, because you can’t afford for your organization to be ensnared by threats that could have been foreseen.

Security training - How to ensure your training is effective

The best way to solve this issue is to provide training that is interesting, interactive, and engaging. A great example would be the Defense.com videos offered. They provide a fun, informative and. with the inclusion of exams, interactive way to train staff on cyber security. Even just informal quiz sheets could help staff retain the information and put it into practice when the situation arises.

Managed Vulnerability Scanning: Key Findings and the Importance of Regular Patching

There is no doubt about the value of conducting Managed Vulnerability Scanning. Trustwave has posted multiple blogs on the topic, (just check here, here, and here) for a look at how Trustwave approaches this very important cybersecurity procedure. One point we have not covered is exactly what kind of vulnerabilities Trustwave SpiderLabs’ analysts find during a scan. Are they truly dangerous? What would happen if the client had opted to give a pass to an MVS occurrence?

How to Implement a Security-as-Code Approach

Did you know that in 2023, the average data breach cost companies a whopping $4.45 million? Ouch! And with development cycles spinning faster than a hyper-caffeinated hamster, those risks are only multiplying. So how do you keep security from becoming a costly afterthought in this high-speed race? Enter Security as Code (SaC) – your secret weapon for weaving security into the very fabric of your development process.

Understanding Polymorphic Viruses and Polymorphic Malware

Polymorphic viruses and polymorphic malware represent some of the most sophisticated challenges in modern business. These types of malware are designed to evade traditional cyber security measures by constantly changing their appearance making them particularly difficult to detect and eliminate.