Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

The 2025 DORA Deadline is Here: Simplify Compliance with Teleport

The Digital Operational Resilience Act (DORA) comes into full effect on January 17, 2025. This deadline marks a monumental shift in how financial institutions and their technology providers prioritize and maintain operational resilience and cybersecurity standards – and sets in stone real business and regulatory consequences to ensure resilience is achieved. And like any sweeping security regulation, organizations must embark on an uphill journey to earn full compliance.

Microsoft Corporation Latest Security Update on Actively Exploited Zero-Day Flaws for Safer Digital Operations

Organizations need to be watchful and vigilant with their cyber space because cyber threats keep on evolving. And, in fact, urgency is provided by the security update of January 2025 from Microsoft, which patches at least 161 vulnerabilities, including three zero-day flaws actively exploited in the wild.

Ransomware Gangs Claimed More Than 5,000 Attacks in 2024

Ransomware groups claimed responsibility for 5,461 attacks in 2024, with 1,204 of these attacks being publicly confirmed by victim organizations, according to Comparitech’s latest Ransomware Roundup report. The average ransom demand was more than $3.5 million, and the average ransom paid was $9.5 million. Many of these attacks involved data theft extortion, leading to the breach of nearly 200 million records.

AI in Cybersecurity: 20 years of innovation

From predictive systems to the recent proliferation of generative AI-based virtual assistants such as ChatGPT, artificial intelligence has become a key driver in many sectors, and cybersecurity is no exception. The disruptive impact of GenAI has popularized AI use recently but this technology has actually been deployed for over 20 years in the security sector, serving as an additional and critical tool for proactive threat management that enhances operational efficiency.

Fortinet Discloses Active Exploitation of Critical Zero-Day Vulnerability: CVE-2024-55591

Note: These vulnerabilities remain under active exploitation and Kroll experts are investigating. If further details are uncovered by our team, updates will be made to the Kroll Cyber Risk blog. A critical authentication bypass vulnerability (CWE-288) affecting FortiOS and FortiProxy (FG-IR-24-535) allows remote attackers to obtain super admin privileges via Node.js WebSocket traffic.

EP 69 - Cloudy with a 100% Chance of Secrets: Decoding Secrets Management in the Cloud

In this episode of the Trust Issues podcast, host David Puner dives into the complexities of secrets management with Ritesh Desai, General Manager at AWS Secrets Manager. They discuss the evolving landscape of secrets management, emphasizing the importance of a multi-layered defense strategy as organizations increasingly adopt cloud services, digital transformation and agile development practices.

Understanding WordPress Price Plans for WordPress Web Builders: A Deep Dive into Elementor's Advantages

WordPress is the world's most popular content management system (CMS), powering over 43% of all websites on the internet. Its versatility, scalability, and open-source nature make it a go-to choice for everyone from beginners to seasoned developers. For those looking to create visually stunning and highly functional websites, WordPress price plans play a crucial role in determining the resources and tools available. Among the many tools for WordPress, Elementor stands out as a leader in web building, offering robust features at competitive price points.

Best SPF Flattening Tools in 2025

SPF (Sender Policy Framework) refers to a type of email authentication protocol through which business owners can prevent various forms of cyberattacks (e.g. phishing, spoofing, etc.). With SPF, you can easily determine the sending mail servers to which you give permission to send emails on behalf of your organization.
Featured Post

Understanding Task Automation: All You Need to Know

How often do you find yourself starved of time or unable to complete all the tasks on your to-do list? Rather than burning yourself out, working these tasks into the ground, consider task automation. By entrusting automation to handle essential tasks for you - whether it's internal approval processes, customer communication procedures, or anything in between - you can unlock precious work hours and resources. Nowadays, organizations face mounting pressure to keep operations moving and optimized while maintaining strict security, and automation is pivotal in helping them achieve that goal.