Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Fix key cloud security risks with version 2 of the Essential Cloud Security Controls Ruleset

Cloud security teams are faced with an ever-increasing number of challenges. Attackers are focusing on more cloud-native attacks than ever. Meanwhile, the number of cloud service offerings—and by extension, the number of misconfigurations in them—is only growing. And there is always the risk that a sophisticated adversary could abuse a vulnerability in a cloud service provider to target cloud customers.

Data Scraping Legal Issues: Exploring hiQ vs LinkedIn Case

The high-profile case of hiQ Labs Inc vs LinkedIn Corporation (that took place in the US) shed light on the much-discussed data scraping legal issues. We know you don’t want to get lost in legalese. So, we have prepared an easy-to-read summary of the most important points of this decision. The court sided with the scraper and established that scraping public data is not a violation of the CFAA (Computer Fraud and Abuse Act).

CVE-2024-6385: Critical Unauthorized Pipeline Job Vulnerability in GitLab

On July 10, 2024, GitLab issued an advisory regarding a critical vulnerability (CVE-2024-6385) in GitLab CE/EE that had been reported to them through a bug bounty program. This vulnerability allows a threat actor to trigger a GitLab pipeline as another user under certain circumstances. A GitLab pipeline is a collection of automated processes that run in stages to build, test, and deploy code.

Global SOC Survey Reveals Hope for SecOps Teams As Post-SOAR Hyperautomation Boosts Analyst Retention and Tenure

The SANS 2024 SOC Survey, a comprehensive new Torq-sponsored study, reveals that for the first time in decades, the tenure of SOC and Security Analysts is increasing. They’re choosing to remain at their posts for three-to-five years, up from an average of one-to-three years. Modern post-SOAR hyperautomation solutions are playing a significant role in alleviating the burdens these cybersecurity pros face.

Is Airport WiFi Safe?

No, using public WiFi in airports is not safe because you could unknowingly be sharing your private data with a cybercriminal. Because public networks are unsecured and airports are filled with people on the go, cybercriminals frequently target them to steal sensitive information and gain access to victims’ online accounts. Continue reading to learn what is so dangerous about using airport WiFi and how to stay safe if you do need to use it while traveling.

Sygnum taps Fireblocks for new instant settlement network

Sygnum, a global digital asset banking group founded in Switzerland, is launching Sygnum Connect – their new, 24/7 instant settlement network for fiat, digital assets, and stablecoin transactions. Aimed at institutional investors, liquidity providers, stablecoin issuers, brokers, exchanges, and more, Sygnum Connect launches with connectivity to 200+ Sygnum institutional clients. Sygnum has tapped Fireblocks to provide the fiat settlement infrastructure for Connect.

RansomHub Ransomware - What You Need To Know

Despite first appearing earlier this year, RansomHub is already considered one of the most prolific ransomware groups in existence. It operates a ransomware-as-a-service (RaaS) operation, meaning that a central core of the group creates and maintains the ransomware code and infrastructure, and rents it out to other cybercriminals who act as affiliates.

Unlock new revenue streams with blockchain payments use cases

Blockchain technology is making a significant impact in the payments sector. Some of the largest names in the industry are utilizing blockchain, including the likes of: As top-tier organizations like these continue to launch blockchain initiatives, it’s become clear that blockchain can facilitate the movement of value in the same way SWIFT, SEPA, and FedNow can, and can even be more efficient than traditional rails at times.