Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Reducing the Fog of War by Increasing Cybersecurity Readiness

A unique attribute of the current commercial and public sector is the convergence of warfare principles with information technology operations and security. In the realm of modern warfare, uncertainty is a constant companion. The term “fog of war,” coined by the Prussian military theorist Carl von Clausewitz, encapsulates the chaos and unpredictability inherent in military operations.

Policy as code in Kubernetes: security with seccomp and network policies

The dynamic world of Kubernetes and cloud security is constantly evolving. As we explore this complicated ecosystem, it’s crucial to understand the role of policy as code (PaC) and its impact on operations and security teams. Emerging from the broader paradigm of infrastructure as code (IaC), PaC represents a significant shift in how we manage and secure cloud-native environments.

Cybersecurity at Ports Gets a Boost with New Bipartisan Bill

Cybersecurity's role in geopolitics is growing more significant by the day. In a world of increasingly sophisticated cyber threats, governments worldwide are recognizing the impact digital attacks can have on national security, trade, and infrastructure. This has never been more evident than with the recent introduction of the Protecting Investments in Our Ports Act by U.S. Senators John Cornyn (R-TX) and Gary Peters (D-MI), along with U.S.

A Step-by-Step Guide to DORA Finance Compliance: Practical Advice for Financial Institutions

In the previous post, we explained what the Digital Operational Resilience Act (DORA) is and why it’s crucial for financial institutions and meeting their financial compliance requirements. Now, let’s dive into the steps you need to take to ensure your organisation is fully prepared by the January 2025 deadline.

Key learnings from the 2024 State of Cloud Security study

We’ve just released the 2024 State of Cloud Security study, where we analyzed the security posture of thousands of organizations using AWS, Azure, and Google Cloud. In particular, we found that: In this post, we provide key recommendations based on these findings, and we explain how you can use Datadog Cloud Security Management (CSM) to improve your security posture.

DLP 101: How to Prevent Data Exfiltration in the Cloud

These days, your organization's data is its most valuable asset. But what happens when that data slips through your fingers? Picture this: It's Friday afternoon, and your security team receives an alert about an unusual number of downloads from your cloud storage app, Google Drive. As you investigate, you realize it's corporate IP that's being downloaded en masse by a departing employee. This type of exfiltration incident isn't just hypothetical; it's a reality that organizations face on the daily.

Are You in Sync with Your Security Vendor?

In today’s rapidly evolving threat landscape, the relationship between a security vendor and its customer is more critical than ever. As information security professionals, the pressure to ensure robust security postures is constant. Yet, the tools and services relied upon often fall short due to a fundamental disconnect between vendors and their customers.

Brain Cipher Ransomware: A Growing Threat and How to Defend Your Business

In the always-changing world of online threats, ransomware attacks are getting trickier because bad people are always finding new ways to scam people. There is a new bug called Brain Cipher that is very dangerous. Brain Cipher ransomware is very bad. It can cost a company a lot of money, hurt its reputation, and make things not work right. Brain Cipher ransomware is cutting edge and dangerous. It has hurt companies all over the world a great deal.

Top 5 Logistics and Postal Scams of 2024

From groceries to gadgets, everything can be delivered to your doorstep these days with just a few clicks. In this e-commerce world, logistics and postal companies have become critical players in the retail sector, with brand names that everyone recognizes. But this has also made them goldmines of PII that attackers would do anything to get their hands on.

Container Security Best Practices

Containers are transforming how enterprises deploy and use applications - their efficiency and cost-effectiveness making them a cornerstone of modern IT strategies. Compared to traditional virtualization, where the server runs a hypervisor, and then virtual machines with entire guest operating systems and software run on top of the hypervisor, containers allow more versatility since they simplify management and provide faster provisioning of applications and resources.