DDoS attacks are increasingly becoming common, especially for people who have their websites. This happens because DDoS attacks are harder to trace, and the perpetrators are hard to identify. As we advance into the IoT era, it's hard to deny that these attacks are becoming more frequent and powerful. This blog will cover DDoS attacks and how to prevent them.

As organizations grapple with new economic realities, security leaders face the familiar challenge of keeping their systems and data safe with limited resources. To continue to do more with, in many cases, even less is a tricky tightrope walk that requires creativity and strategy to ensure overall success. To make the most of whatever resources are available, it’s important for security teams to evaluate their unique needs and vulnerabilities carefully.

The safety of your identity, data and online accounts relies heavily on the strength of your passwords, which is why you should be able to tell the difference between weak vs strong passwords. The importance of password security goes far beyond personal safety, as corporate breaches due to compromised credentials affect millions of people and cost billions of dollars each year. In fact, a recent report by Verizon reveals 81% of hacking-related data breaches are due to stolen or weak passwords.

Trustwave SpiderLabs has found a vulnerability in the Sinilink XY-WFT1 Remote WiFi home Thermostat. When running firmware V1.3.6, it allows an attacker to replay the same data or similar data, possibly allowing an attacker to control the device attached to the relay without requiring authentication.

As we start a new year, let's think about how we can draw up a plan to exercise our cyber fitness and make it a culture that sticks. It's a critical time to get this done as we work toward a new era where we're breaking down silos, understanding the new ecosystem movement going forward and the edge computing phenomenon.

Read also: Twitter says there’s no evidence of a new breach, Microsoft fixes a Windows zero-day, and more.

Building a new API for your web app is an exciting undertaking. It’s beneficial for everyone involved: the developers who want to build integrations for your app, the users who will reap the rewards of those connections, and your bottom line as more people are drawn to your network. New APIs may be beneficial for developers, but hackers also see this as an opportunity to gain unauthorized access to data stored on your servers.

The HIPAA 1996 (Health Insurance Portability and Accountability Act) is a federal law enacted by the U.S. Congress that regulates how healthcare organizations handle PHI (protected health information) and ePHI (electronic protected health information). This includes complex and extensive rules for protecting critical medical data and sensitive patient information, so HIPAA non-compliance is often met with severe penalties.

I predict that 2023 will be the year of Passkeys. Passkeys are a new passwordless authentication method allowing users to create online accounts and sign in without entering a password. Passkeys have been years in the making and finally, industry fido alliance collaboration (fido2) and the adoption between Apple, Microsoft, and Google have now made it a reality. Passkeys leverage the WebAuthn API to let users log into various websites and applications.

The need for fast incident response is a given. No industry professional would deny how critical a rapid response is when dealing with a cyber threat and an incident. However, it is equally important to understand that the quickest response is not always the best in cybersecurity. Security operations centers (SOCs) and organizations must factor in other variables, too, when preparing for the inevitable, as recent cyber stats suggest.