Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

A security expert's view on Gartner's generative AI insights

Snyk’s goal has always been to empower developers to build fast but safely. This is why we created the developer security category and why we were amongst the first advocates of “shifting left.” Now, AI has changed the equation. According to Gartner, over 80% of enterprises will have used generative AI APIs or models, or deployed their own AI model, by 2026.

Elastic launches Express Migration program for Splunk customers

Level up to Elastic’s AI-driven security analytics, now with incentives to ease and accelerate your SIEM migration The SIEM is evolving again. Traditional SIEM solutions will be displaced in modern security operations centers (SOCs) by AI-driven security analytics, which uses the power of Search AI to replace largely manual SOC processes with automation.

Detect and respond to compromised identities in minutes with Sysdig

Sysdig continues to enhance our real-time cloud detection and response (CDR) capabilities with the introduction of Cloud Identity Insights, empowering customers to analyze identity attack patterns and get ahead of threat actors. In this post, we’ll explore how Sysdig uses Cloud Identity Insights to correlate suspicious events with potentially compromised user accounts.

Top 5 help center articles for tests

Running tests against your security controls and other systems is a critical aspect of protecting your organization from a potential data breach and ensuring that you maintain compliance. Vanta’s platform has automated tests with continuous monitoring that run on an hourly basis against your controls as well as customized tests that you can adapt to your organization's needs.

Asset and Inventory Management - The Foundation of the Vulnerability Management Lifecycle

Organizations face a myriad of cybersecurity threats that can compromise sensitive data and disrupt operations. A cornerstone of defending against these threats is an effective vulnerability management program. This program’s first, and arguably most critical, step is strong asset and inventory management. A thorough and accurate asset inventory is essential for identifying and mitigating vulnerabilities.

Windows Downdate: Downgrade Attacks Using Windows Updates

Downgrade attacks—also known as version-rollback attacks—are a type of attack designed to revert an immune, fully up-to-date software back to an older version. They allow malicious actors to expose and exploit previously fixed/patched vulnerabilities to compromise systems and gain unauthorized access.

Introducing Books

The months leading up to audits can be some of the most stressful for security and privacy teams. Some audits can take up to 9 months to prepare for and another 3 months to complete, with security and privacy teams spearheading the evidence collection. Collecting evidence used to be a walk in the park, but that was before multi-cloud environments, new standards, and emerging regional privacy requirements.

The Cyber Helpline Named Finalist for 2024 Not-for-Profit Cyber Award

London, UK, August 7th, 2024 - We are proud to announce that The Cyber Helpline is a finalist in this year's National Cyber Awards, for the fourth year in a row! The awards are now in their sixth year which recognise outstanding contributions and achievements in cybersecurity. Our charity has been a finalist and won the prestigious Not for Profit Award in 2021, 2022 and 2023. As digital threats continue to grow, the importance of cybersecurity cannot be overstated.

SharpRhino RAT: Hunters International's Latest Weapon in Cyber Attacks

In a notable development in the cybersecurity landscape, the emerging threat group known as Hunters International has added a novel remote access Trojan (RAT) to its arsenal. This group, which has quickly ascended the ranks of ransomware operators, is using the RAT, dubbed SharpRhino, to target IT professionals. Disguised as a legitimate network administration tool, SharpRhino facilitates initial access and persistence on targeted networks, setting the stage for ransomware attacks.