Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

AsyncRAT: Using Fully Undetected Downloader

AsyncRAT is an open-source remote administration tool released on GitHub in January 2019. It’s designed to remotely control computers via encrypted connection, providing complete control via functionalities such as: Although the official GitHub repository contains a legal disclaimer, AsyncRAT is popularly used by attackers and even some APT groups. Netskope Threat Labs recently came across a FUD (Fully Undetected) Batch script which is downloading AsyncRAT from an Amazon S3 Bucket.

Our Commitment to Security: Rubrik Attains Microsoft Teams Backup & Restore Certification

Today, I’m excited to announce that Rubrik has achieved the status of a certified Backup & Restore provider for Microsoft Teams. We’re thrilled to demonstrate proficiency and commitment to meet Microsoft customers’ evolving needs in today’s security-first, cloud-first world and a distinguishing mark within Microsoft’s partner ecosystem.

Applying the principle of least privilege to Kubernetes using RBAC

The principle of least privilege (PoLP) is a defensive strategy in the software development world. Alternatively called the principle of minimal privilege or the principle of least authority, PoLP ensures that users can only access the systems, processes, networks, and files required to complete their assigned tasks. When properly configured, unauthorized users can’t navigate to restricted application functions or switch roles.

ROI of Automated Mobile App Security & Privacy Testing

Several companies aren't still aware of the fact that automated mobile app security testing brings better ROI than manual testing. Perhaps, they don't know what aspects of automation testing directly or indirectly impact the ROI. However, we got you covered. This blog discusses three almost hidden ways in which automation testing impacts and holds the potential to improve your ROI. And by the end, you'll be convinced to transition to complete automation testing.

What is the Purpose of a Password Manager?

Most users recycle their passwords across numerous websites and choose very weak passwords. How are you expected to create secure, one-of-a-kind passwords for every website you visit? A password manager offers the answer. The purpose of a password manager is to safely store online credentials, help you log in into any account automatically and generate strong and unique passwords. A master password is used to lock down an encrypted vault where these passwords are kept.

Understanding Security Automation vs. Orchestration

“Automation” and “orchestration” are terms that frequently appear within the same sentence – which is unsurprising, because they are closely related. In fact, they’re so similar in meaning that it can be easy to confuse their meanings or assume that there is basically no real difference between security automation and orchestration. But, as with many concepts in the world of IT and security (“observability” vs.

Best practices for container isolation

Containers are a standardized software packaging format that provides a predictable, replicable way to run applications. Container isolation is one of the primary benefits of containerized applications. Using containers enables us to isolate our software from its environment, increasing consistency and reliability across our development and staging environments. You’re probably familiar with — or are using — Docker containers.

Harmonizing the Federal Effort on Automating Software Bill of Materials

When the Biden administration released Executive Order 14028, “Improving the Nation's Cybersecurity”, it included guidance to enhance the security of the nation’s software supply chain. As a result, key building blocks are being developed to both strengthen software security and bolster software Supply Chain Risk Management (SCRM) programs across the Federal government.

SaaS Applications Streamline Application Development and Exploitation

Software-as-a-Service (SaaS) applications are built on the premise of streamlining business practices to improve productivity. Microsoft 365, Salesforce, and similar SaaS platforms commonly integrate automation tools that allow business users to develop the tools that they need to do their jobs. The latest iteration of this is the integration of low-code/no-code platforms into these SaaS solutions.