Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

The State of SME IT in the U.S.

The United States has faced some significant economic headwinds and shifts in the last few years. Even the geographical spread of wealth in the U.S. economy has shifted considerably since the pandemic. Now, an already struggling economy is forecast to continue to slow. What does this mean for small- to medium-sized enterprises (SMEs) in the U.S.? In a recent survey, JumpCloud asked this question to over 300 IT professionals working at SMEs in the U.S. Read on to learn the results.

Another API Security Breach: Life360

Another day, another API breach in the news. The latest breach occurred on the Life360 platform where an advisory was able to gleam 400k user phone numbers, based on the article written on Bleepingcomputer.com. Known only by their 'emo' handle, they said the unsecured API endpoint used to steal the data provided an easy way to verify each impacted user's email address, name, and phone number.

How To Detect & Prevent Employee Fraud in 2024

You’ve worked tirelessly to build your business, carefully assembling a team you trust. However, even the most successful companies face an unsettling reality—the risk and the impact of employee fraud. Occupational fraud costs businesses up to 5% of annual revenue, with $3.1B lost to fraud in 2024. Here, we discuss practical strategies for detecting and preventing employee fraud. We look at various types of fraud, red flags to watch for, and prevention tactics to protect your business.

The Top SIEM Technical Interview Questions

If you are evaluating a new role that requires proficient knowledge of SIEM, this comprehensive guide offers an extensive list of frequently asked interview questions. Each question is paired with detailed, well-explained answers to ensure you fully understand the concepts and can confidently showcase your expertise.

How to Implement Cyber Security Monitoring in 2024

Cyber security monitoring refers to the continuous observation and analysis of an organisation's network and information systems to detect and respond to security threats. It plays a vital role in protecting sensitive data and preventing data breaches, making it an essential practice in 2024. In today's digital landscape, the frequency and sophistication of cyberattacks have dramatically increased.

Comprehensive Guide to Healthcare Data Security: Essential Safety and Compliance Tips

Healthcare data security is one of the top responsibilities in this digital age. Since patients’ sensitive information can be stored and shared online, healthcare companies need to work hard on securing it by implementing more stringent measures as cyber threats are rapidly changing. In this piece we will explore deeply the central aspects of healthcare data security: challenges, best practices and future activities.

Indusface - Product Release & Rollout SOP

Business continuity is at the forefront of most systems and process design at Indusface. In a recent blog, we discussed how Indusface follows design-for-failure principles a powerful approach that enables us to deploy faster. In this blog, I will talk about the processes we have to ensure that our code and rule deployments do not cause widespread downtime to our protected assets.

FAQ: How Are STIGs, SRGs, SCAP, and CCIs Related?

In the world of government-adjacent security and compliance, there are many different terms and acronyms you’ll encounter for the processes you have to perform. Often, these terms are interrelated in a single process, so you tend to learn them in clusters. One such cluster includes STIGs, SRGs, SCAP, and CCIs. What are these, what do they mean, and what do you need to do to utilize them properly? Let’s answer the most commonly asked questions.

New Phishing Scam Leverages Chat To Add Credibility And Ensure Success

A new phishing scam is leveraging trusted aspects of ecommerce to make their scams look legitimate. Perception Point has spotted a new level of credibility used by phishing scammers in which fake payment pages include the use of legitimate support chat. Spoofed payment pages resembling marketplace, like Etsy and Upwork, ask business owners to “claim” payments for products or services sold.

Elastic Security excels in the AV-Comparatives Business Security Test

Elastic Security has exceptionally powerful capabilities that surpass those of smaller vendors Elastic Security has achieved remarkable results in the recent AV-Comparatives Business Security Test, ranking in the top five with other notable security vendors. Elastic Security was identified as being in the larger end of the market and offers exceptionally powerful tools with capabilities that surpass those of smaller packages.