Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

What a 3-Year Plan to Cut Software Risks by 75% Looks Like

Organizations face an increasing number of software security threats that can compromise their sensitive data and disrupt business operations. To effectively manage these risks and enhance their security posture, it’s crucial for organizations to adopt modern application risk reduction strategies that not only mitigate potential vulnerabilities but also provide clear, actionable next steps and insights for reporting purposes.

Hooked by the Call: A Deep Dive into The Tricks Used in Callback Phishing Emails

Previously, Trustwave SpiderLabs covered a massive fake order spam scheme that impersonated a tech support company and propagated via Google Groups. Since then, we have observed more spam campaigns using this hybrid form of cyberattack with varying tactics, techniques, and procedures (TTP). Between July and September, we witnessed a 140% increase in these spam campaigns. In this blog, we will showcase the different spam techniques used in these phishing emails.

Are You in Sync with Your Security Vendor?

In today’s rapidly evolving threat landscape, the relationship between a security vendor and its customer is more critical than ever. As information security professionals, the pressure to ensure robust security postures is constant. Yet, the tools and services relied upon often fall short due to a fundamental disconnect between vendors and their customers.

Policy as code in Kubernetes: security with seccomp and network policies

The dynamic world of Kubernetes and cloud security is constantly evolving. As we explore this complicated ecosystem, it’s crucial to understand the role of policy as code (PaC) and its impact on operations and security teams. Emerging from the broader paradigm of infrastructure as code (IaC), PaC represents a significant shift in how we manage and secure cloud-native environments.

The Role of Content Management Systems in Web Accessibility: Opportunities and Pitfalls

Web accessibility is a crucial aspect of modern website design and development, ensuring that people with disabilities can fully engage with online content. Content Management Systems (CMS) play a significant role in shaping the accessibility of websites. While CMS platforms offer numerous opportunities to enhance accessibility, they also present potential pitfalls that website owners and developers must navigate.

The Rise of Automated Redaction Software: Why Businesses Can't Ignore It

In a world where data breaches and privacy concerns are increasingly prevalent, the need for effective data management solutions has never been greater. Enter automated redaction software-a powerful tool designed to help businesses protect sensitive information. But what exactly is automated redaction software? At its core, it automates the process of identifying and removing sensitive information from documents, ensuring compliance with regulations and enhancing data security. As businesses navigate the complexities of data privacy, understanding the benefits and applications of this technology becomes essential.

Introducing Graylog 6.1: A Monster Release Just in Time for Halloween

It’s no coincidence that Graylog 6.1 is making its debut right before Halloween. This release is a true behemoth, designed to tackle some of the longest-standing and most challenging issues in Security Event and Information Management (SIEM). Packed with innovations, Graylog 6.1 is here to change the game.

The Importance of Software Testing Types: Emphasizing Regression Testing

Is there any way for a software development team to ensure that applications built by them perform flawlessly after launching to the public? Well, in the world of software development, this is one of the most asked questions. Making sure that the application works without any error when shared with the public is important for any software development company. Luckily, there are comprehensive testing methods that rigorously test the application before its launch.