Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

The Ban That Wasn't: What Happened to the FTC's Non-Compete Ban?

Today was supposed to mark a significant shift in employment law in the US: the Federal Trade Commission’s (FTC) ban on non-compete clauses was set to go into effect. However, this anticipated change was blocked by a US District Court in Texas, leaving many wondering about the implications for small and medium-sized enterprises (SMEs) and the IT professionals they employ.

What you should know about PHP code security

When it comes to web development, PHP is a widely used scripting language. With its popularity, it is crucial to understand the potential security risks associated with PHP and the measures to mitigate them. Whether you deploy CMS applications using WordPress or build enterprise applications with the Laravel PHP framework, the importance of PHP security and the business impact of some notable PHP interpreter vulnerabilities are crucial for developers to get right.

Threat Actors Increasingly Exploit Deepfakes for Social Engineering

The availability of deepfake technology has given threat actors a valuable tool for social engineering attacks, according to researchers at BlackBerry. “Typically, online scams prey on the presumed weaknesses and susceptibility of the targeted individual,” the researchers write.

Understanding Adjust Memory Quotas for a Process

The windows security setting adjust memory quotas for a process, specifies who has the permission to change the maximum amount of random access memory (RAM) that a program or application can access at any specific time. Doing so controls and manages system resources, ensuring the system runs smoothly. The adjust memory quotas for a process setting decides who can change a program or process' memory quota.

Keeper Named Value Leader by EMA for Privileged Access Management

Keeper is cost-effective and easy to deploy – and the industry is taking notice. Keeper Security’s zero-trust Privileged Access Management (PAM) solution, KeeperPAM, has again been recognized as a Value Leader by the IT and data management analyst research and consulting firm Enterprise Management Associates (EMA) in its 2024 PAM Radar Report: Read the Full Report.

How SASE and the Internet Took Over Wide Area Networks (Part 2)

This blog is part of the ongoing “I&O Perspectives” series, which features insights from industry experts about the impact of current threats, networking, and other cybersecurity trends. In the first part of this blog series, we observed the inception of an internet-based model where corporate networks have no borders anymore, home is the office, applications are in the cloud. This paradigm shift makes connectivity ubiquitous. But security risks have dramatically increased.

A Peek Inside Fireblocks Tokenization Engine: The Backbone of Your Tokenization Solution

Fireblocks offers businesses a broad suite of solutions to meet all of their tokenization needs. The Fireblocks Tokenization Engine — only one part of our ecosystem — is a platform powering the future of financial markets and digital asset ownership. Businesses can use the Tokenization Engine to launch and manage any tokenization solution and securely mint, custody, distribute, and manage tokenized assets.

Revival Hijack - PyPI hijack technique exploited in the wild, puts 22K packages at risk

JFrog’s security research team continuously monitors open-source software registries, proactively identifying and addressing potential malware and vulnerability threats to foster a secure and reliable ecosystem for open-source software development and deployment. This blog details a PyPI supply chain attack technique the JFrog research team discovered had been recently exploited in the wild.

Is your SIEM ready for the AI era? Essential insights and preparations

A head-spinning series of acquisitions and mergers is transforming the security information and event management (SIEM) market. Behind this market shakeup is the ongoing technological shift from traditional, manually intensive SIEM solutions to AI-driven security analytics. Legacy systems — characterized by manual processes for log management, investigation, and response — no longer effectively address today’s fast-evolving cyber threats.