Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Anonymous User Security for Everyday Users

Windows permits an anonymous user to carry out specific actions, such as listing the names of domain accounts and network shares. This functionality proves useful in scenarios when an administrator needs to provide access to users in a trusted domain lacking a reciprocal trust agreement. By default, the Everyone security identifier(SID) is excluded from the token generated for anonymous connections. Consequently, permissions assigned to the Everyone group don’t extend to anonymous users.

Leading Analyst Reports on Security Service Edge (SSE) Underscore A Platform-forward Future

In case you missed it, Netskope was once again named a Leader in the Gartner Magic Quadrant for Security Service Edge (SSE), placed highest in Ability to Execute and furthest in Completeness of Vision. 2024 is the third year in a row that Netskope has been named a Leader in this important Magic Quadrant and the second year to be placed Highest in Execution and Furthest in Vision.

The Evolution of Cyber Threats in the Age of AI: Challenges and Responses

Cybersecurity has become a battlefield where defenders and attackers engage in a constant struggle, mirroring the dynamics of traditional warfare. In this modern cyber conflict, the emergence of artificial intelligence (AI) has revolutionized the capabilities of traditionally asymmetric cyber attackers and threats, enabling them to pose challenges akin to those posed by near-peer adversaries.

Growing Attack Surfaces Highlight the Need for Managed Detection and Response Services

One reason organizations have difficulty defending against cyber threats is their attack surfaces are constantly growing, creating more entry points for bad actors to target. And target they will, creating an onslaught of alerts that drive the need for managed detection and response (MDR) services and other measures to help thwart them. Numerous trends are driving the increase in attack surface, including the proliferation of Internet of Things (IoT) devices.

Navigating the NIS 2 Landscape - Part 1

The European Union (EU) is taking a significant step forward in the fight against cybercrime by introducing the Network and Information Systems Directive 2, or NIS 2. This directive represents a major overhaul of cybersecurity regulations across the continent, aiming to bolster defenses against the ever-evolving threats of the digital age. In this first of four blog posts, we will introduce the basics of NIS 2.

What's New With Keeper | May 2024

Keeper Security is excited to announce that we now support passkeys on Android and iOS mobile apps. This update extends passkey management functionality in the Keeper Vault beyond the Keeper browser extension support for Chrome, Firefox, Edge, Brave and Safari that we announced last year. Passkeys are a new type of credential that can entirely replace passwords or be used for multi-factor authentication.

Securing the unseen: MITRE's EMB3D framework for embedded devices

The security of embedded devices is in the news over the last few years, especially IoT assets and OT systems. From connected medical devices to industrial control systems to smartwatches and building automation, connected IoT devices will expand to over 25 billion by 2028.

Building for Cyber Resilience in the Manufacturing Industry

For the third year in a row, manufacturing was the most attacked industry according to IBM X-Force incident response data. Phishing was the top initial infection vector, used in 39% of incidents, and malware was deployed in 45% of attacks. In 2023 alone, manufacturing organizations in the semiconductor, building, automotive, industrial controls systems, boating and consumer packaged goods industries suffered significant attacks.

From crisis to control: Unveiling PAM vendor security flaws and a path to resilience

Cyber attackers relentlessly scour online resources for vulnerabilities, particularly within software solutions. Despite the best efforts of dev teams and quality assurance processes, maintaining a defensive edge is a relentless challenge. Unfortunately, vulnerabilities persist, especially in trusted software solutions used by companies as the cornerstone of their cybersecurity posture, such as privileged access management (PAM).