Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Deepfake Cyber Crime to Shift the Cyber Threat Landscape

61% of organizations have seen deepfake incidents increase in the past year – with 75% of these attacks impersonating the CEO or another C-suite executive, according to a recent report by Deep Instinct. Moreover, 97% are concerned they will suffer a security incident as a result of adversarial AI.

The Role of Supply Chain Cyber Risk in U.S. Healthcare: Inside SecurityScorecard's new report

In late February of this year, Change Healthcare experienced a massive ransomware attack. The company, a subsidiary of United Healthcare, is the largest clearinghouse for insurance billing and payments in the U.S, processing 15 billion medical claims each year.

SMBv3 Vulnerabilities Explained

Workplaces have evolved. While hybrid and remote work existed before COVID-19, these working arrangements became even more prevalent during and after the pandemic. Today, workplaces offer the flexibility for employees to work and access company resources from anywhere worldwide, with the Server Message Block (SMB) protocol at the center of this.

Phishing Attacks in the UK Have Surged

Over 11 million phishing attacks have been reported to the UK’s Suspicious Email Reporting Service (SERS) over the past year, according to new data from Action Fraud. The UK’s National Cyber Security Centre has also taken down more than 329,000 phishing sites since the SERS program started in 2020.

8 Mobile Banking Security Tips to Protect Your Finances

Like everything we do, our devices have become a valuable asset in managing our lives. One of the most important things we all have to manage is our finances, and mobile banking has become the new norm for many of us to: The number of people relying on online banking is steadily increasing. By 2025, the number of people managing their finances is projected to reach 217 million. For this reason, mobile banking security is crucial to prevent cyber criminals from emptying your accounts.

Implementing AI within your security strategy: 7 best practices

There’s a ton of media hype about the swift integration of AI across different business functions. It has also been reported that 98% of technology executives have paused their AI programs to establish guidelines and policies around its implementation. Depending on when and where you read about it, opinions on the speed of AI adoption vary. Nevertheless, AI is more than just hype.

A Detailed Overview of SQL Injections (+ Free cheatsheet)

SQL injection vulnerabilities may affect any website or application that employs an SQL database, such as MySQL, Oracle, SQL Server, or others. Malicious actors may use them to gain unauthorized access to sensitive information, such as customer information, personal data, trade secrets, and more. For example, SQL injections were responsible for 23% of global vulnerabilities in 2023, Moreover, 19% of the internet faces cross-site scripting (stored) attacks.

CIS Microsoft Windows Server 2022 Benchmark v1.0.0

In February 2022, the Center for Internet Security (CIS) released the Microsoft Windows Server 2022 Benchmark v1.0.0, which includes over 50 new features, Group Policy Objects (GPOs), capabilities, and services. The document compares Server 2019 and Server 2022 for their similarities and differences, as well as Windows 11 and Windows 10.

Reverse engineering eBPF programs

eBPF is one of the most widely used technologies in today’s computing ecosystem, starting from the cloud sector up to routing and tracing in companies like Cloudflare. Many companies are basing and transforming their core products to use eBPF as an alternative to kernel modules because of all the benefits it offers both on the business side and technological side. Since this shift is gaining a lot of momentum I wanted to shed some light on eBPF.

What Is Sensitive Data?

With the advent of the digital transformation — spurred on by the pandemic-related rise in remote work — companies now store most of their data digitally. While moving to digital data storage is incredibly convenient and promotes increased collaboration and efficiency, it has also opened the door for an unprecedented number of cyber-attacks and data breaches.