Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

How to Detect Insider Threats (And Stop Them From Happening)

In early 2022, a Yahoo employee, Qian Sang, exploited his access to confidential information, and stole the company’s AdLearn product minutes after receiving a job offer from a competitor. By the time the breach was discovered, the damage was extensive, costing the company millions in fines, legal fees, and lost business . This incident is not an isolated case.

Handling Internal Security Threats: A Balanced Approach

While external cyberattacks often make the headlines, internal security risks (aka insider risks) present a significant danger that is sometimes underestimated. These risks can arise from disgruntled employees, negligent insiders, or malicious actors with privileged access. The repercussions of such breaches can be severe, resulting in data loss, financial harm, legal fines, and harm to reputation.

How to Prepare for a Cyber Essentials Plus Audit

Cyber Essentials is a UK government-supported certification scheme that helps organizations protect themselves against cyber threats by providing a framework of basic security controls for safeguarding systems. Cyber Essentials Plus builds on this foundation by requiring a more in-depth, hands-on assessment by an independent auditor. This audit not only verifies that essential cybersecurity controls are in place but also ensures they are functioning effectively in practice.

What Are Network Security Solutions?

Picture this, you are trying to protect a chest full of treasure and have no idea what lurks in the shadows, waiting to take it all away. Scary, isn’t it? Fear should be the same when it comes to running a network without proper security. How you’ll guard your treasure with everything you’ve got, network security solutions do the same. It protects your organization’s critical information from cyber threats.

NIS 2 Cybersecurity Risk Management Measures Explained

The Network and Information Systems Directive 2 (NIS 2) is a cornerstone of European cybersecurity regulation, imposing stringent requirements on critical infrastructure sectors. To ensure their resilience, NIS 2 mandates specific cybersecurity risk management measures. Let's break down these ten essential measures and understand their implications.

Elevate Your Security Strategy with Effective Vulnerability Prioritization

Vulnerability prioritization is essential for organizations to efficiently allocate resources, reduce risk, and protect critical assets. However, with an increasing number of vulnerability scanning tools in use, security teams face a growing backlog of findings. This overwhelming volume of data can lead to analysis paralysis, where critical vulnerabilities remain unaddressed while minor issues consume valuable time and resources.

Friday Flows Episode 33: From Traditional SOAR to Tines Automation: An engineers perspective

FRIDAY FLOWS #33 Pt.1 - From Traditional SOAR to Tines Automation: An Engineers Perspective A longer form episode with Tino Sif Baksh. An experienced SOAR engineer who has been blown away by Tines' capability since joining. This is part 1 of our chat. Three really simple unique things covered here: How SOAR has changed as a technology and automation going from ‘nice to have’ to ‘need to have’. Building rules into the Tines’ Webhook action to reduce noisy alerts. The power using Tines’ email mode within the receive email action to simplify the Phishing Response workflows.

Friday Flows Episode 32: Beyon Cyber: An MSSP Journey from Traditional SOAR to Tines

FRIDAY FLOWS #31 - Beyon Cyber: An MSSP Journey from Traditional SOAR to Tines For any MSSPs out there, this is a really interesting deployment we did with Beyon. Service Providers will look to use SOAR as backend automation for their services. However, traditional SOARs can create their own problems. Requiring dedicated Dev teams to deploy & write automation. Not allowing customisable integration ability outside the box and ultimately being very resource-intensive to maintain.

Friday Flows Episode 31: Analyze Elastic alerts, block IPs, and notify in Slack and Tines Cases

FRIDAY FLOWS #31 - Analyze Elastic alerts, block, IPs, and notify in Slack and Tines Cases Personally, my favourite partners to work with. Elastic and Tines go hand in hand technology wise. Whether you're using Elastic for SIEM, Cloud Security, Endpoint, or outside security like Observability, Tines acts as the automation glue for those tools. I hope you enjoy today's episode with Michael Tolan and as always, check out the Tines community edition in the comments to play around with this specific story and more.