Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Take Action This Cybersecurity Awareness Month With Four Essential Steps

As we embrace October, it’s time not just to passively celebrate Cybersecurity Awareness Month – it’s time to actively engage in it. At Keeper Security, we believe that while awareness is important, the time has come to move swiftly and proactively against evolving cyber threats. With advancements in Artificial Intelligence (AI), cybercriminals are weaponizing sophisticated tools to launch targeted attacks at a massive scale.

Fireblocks Deploys Hashnote's USYC via Off Exchange

Fireblocks now enables customers to use Hashnote’s regulated tokenized money market fund, US Yield Coin (USYC), as a collateral asset on Deribit through Fireblocks Off Exchange. This significant milestone marks the first time a major crypto derivatives exchange is supporting a regulated tokenized money market fund, and the first time this type of token is being used as collateral. USYC is a cross-collateral currency on Deribit.

Boost security for your Mac customers against MFA bombing campaigns

It all started when I began receiving multiple notifications on my Mac asking me to approve an authentication request. I ignored them at first, thinking it was a system error. But they kept popping up again and again, until they started interfering with my work. I was busy so I didn't stop to investigate. Then I received a phone call from a person claiming to be from my company's IT support team.

Detecting Microsoft Entra ID Primary Refresh Token Abuse with Falcon Next-Gen SIEM

Microsoft Entra ID Primary Refresh Tokens (PRTs) are an attractive target for threat actors because they are long-lived, they are broadly scoped and they often don’t have additional multifactor authentication requirements after they are obtained. In this blog, we will discuss what PRTs are, how they are issued and how recently released research gives threat attackers a new way to obtain them. Finally, we will examine how organizations can detect these attacks using CrowdStrike Falcon Next-Gen SIEM.

Australia Considers Mandatory Reporting of Ransom Payments

New legislation is on the horizon in Australia that is set to change the way businesses deal with ransomware attacks. This law, not unlike the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) in the US, aims to improve transparency when it comes to paying ransoms. There's no question that cybercrime is on the rise in the country.

DFIR Bluesky Ransomware: Strategies for Incident Response and Threat Containment

When Bluesky ransomware first appeared, it caused a lot of trouble for businesses of all kinds. This sophisticated and dangerous threat actor has shown that they are determined to stop activities and get money by any means necessary. To mitigate the Bluesky danger, businesses need to take a thorough and proactive approach to handling incidents and keeping threats inside their borders.

Five Challenges of National Information Assurance and How to Overcome Them

The National Information Assurance (NIA) Policy is a framework for offering organizations a foundation for information security management. It was designed and developed to aid organizations with the necessary steps to ensure information security, from assessing and classifying risk to choosing and implementing controls for mitigation.

Protect against identity-based attacks by sharing Cloudflare user risk scores with Okta

Cloudflare One, our secure access service edge (SASE) platform, is introducing a new integration with Okta, the identity and access management (IAM) vendor, to share risk indicators in real-time and simplify how organizations can dynamically manage their security posture in response to changes across their environments.

Vanta accelerates ANZ momentum with localised frameworks, regional support, and a new Australian data centre

Managing compliance across various frameworks and standards can be challenging and confusing. Organisations must earn and maintain compliance with local and international standards and industry-specific regulations, all while keeping up with ever-evolving security and privacy best practices. This is particularly true for startups and scaleups in the ANZ region looking to accelerate growth, expand into international markets, and sell to new and larger customers with higher expectations. ‍