Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

North Korea ready to cash out more than $40 million in Bitcoin after summer of attacks, warns FBI

After a series of high-profile cryptocurrency heists, a state-sponsored North Korean malicious hacking group is poised to cash out millions of dollars. That's the opinion of the FBI, which this week has warned cryptocurrency companies about recent blockchain activity it has observed connected to the theft of hundreds of millions of cryptocurrency in recent months.

AWS Penetration Testing - A Step-by-step Guide

AWS stands for Amazon Web Services. AWS penetration testing is the process of testing a cloud infrastructure for potential vulnerabilities. It involves identifying, exploiting and reporting security flaws that could put the system at risk. This type of test helps organisations identify and mitigate any risks to their data and applications hosted on the AWS platform and provide maximum protection for their business operations.

A Guide to CREST Penetration Testing

CREST, or the Council of Registered Ethical Security Testers, is an independent accreditation and certification body for the information security industry. It ensures that penetration testers have a minimum standard of qualifications and experience. By using CREST-approved testers, organisations can be certain that their chosen tester is properly qualified to carry out the work.

Do we really need another cybersecurity tool?

Research shows many companies now own and operate more than 60 disparate security tools, yet breaches continue to make headlines. Throwing more tools at the problem is a tactic that simply doesn’t work and— with trends pointing toward tighter security budgets—may not even be possible anymore. Security leaders are now in a position that requires them to ask tough questions and carefully scrutinize new security tools before pulling the trigger on purchases.

3 Types of Privileged Accounts to Secure in a Transforming Enterprise

For security teams managing their enterprises’ privileged access management (PAM) programs, times have changed and what’s considered a privileged or high-risk account has drastically shifted. In turn, the way organizations not only manage privilege, but comprehensively secure it, must also shift. Historically, organizations have managed their PAM programs by vaulting and rotating credentials on privileged accounts.

How to Respond to CVE-2023-24489 Impacting Citrix ShareFile

CISA added CVE-2023-24489 to the Known Exploited Vulnerabilities Catalog in August 2023. CVE-2023-24489 is an access control vulnerability impacting the use of Citrix ShareFile StorageZones Controller version 5.11.24 and below. Citrix ShareFile is a real-time collaboration platform. While ShareFile primarily offers a cloud-based file-sharing application, there are some features that accommodate data storage through the use of a storage zone controller.

Over 95k M&T Bank Customers Lose Data in Recent Breach

M&T Bank was established in 1856 and is one of the largest banks in the US. It is based in Buffalo, New York, and currently has over 1,000 branches in 12 separate states. The bank houses data for hundreds of thousands of individuals, and some of that information may be at risk because of a recent breach. Learn all about the 2023 M&T Bank data breach below.

Interview with Cal.com: Enhancing Enterprise Experience with BoxyHQ

Cal.com provides an innovative scheduling and time management platform for individuals and enterprises to streamline their calendar and appointment processes. Their mission is to connect one billion people through the use of their platform by 2031. To achieve this, BoxyHQ’s enterprise-ready SSO would provide the reliable authentication they needed to maintain their customer's security and trust.