Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Security

TrustCloud Replaces Manual Risk Registers with Programmatic and Predictive Risk Tracking to Reduce Business Liability

New TrustRegister™ application introduces programmatic risk assessments, empowering companies to proactively surface risks and remediation plans, map to customer contracts, and understand potential business impact.

The 443 Episode 236 - Another Software Supply Chain Attack

This week on The 443, we discuss the latest software supply chain attack with a potential blast radius of thousands of organizations. Then we cover a new protocol vulnerability in the Wi-Fi wireless standard before ending with some research into insecure Microsoft Azure applications. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

Ransomware Trends 2023, Q1 Report

The first quarter of 2023 was the best quarter we’ve seen for the ransomware industry in a long time, even exceeding Q1 2022. With 831 victims, Q1 2023’s victim count was much higher than the first quarter of 2022, with just 763 victims. Unsurprisingly, LockBit3.0 remained the number one group claiming an average of around 23 victims per week and almost 33% of all ransomware cases this quarter.

Rogue AI is Your New Insider Threat

When ChatGPT debuted in November 2022, it ushered in new points of view and sentiments around AI adoption. Workers from nearly every industry started to reimagine how they could accomplish daily tasks and execute their work — and the cybersecurity industry was no exception. Like shadow IT, new rogue AI tools — meaning AI tools that employees are adopting unbeknownst to the organization they work for — can pose security risks to your organization.

Cybersecurity middleware: abstraction layer for cybersecurity

Almost eight years ago, Christof Jungo, who was at the time head of security architecture and engineering at Swisscom, proposed the idea of cybersecurity middleware. Christof’s idea was that although it is easy to collect all security telemetry in one place, it is difficult to operationalize it for fast and efficient incident response. He proposed a concept of interchangeable and interoperable parts that can act as a middleware, a higher-level abstraction layer for security.

Polaris Software Integrity Platform | Synopsys

Looking for an efficient and effective way to test your applications for security vulnerabilities? Look no further than Polaris Software Integrity Platform, the cloud-based application security testing solution optimized for the needs of development and DevSecOps teams. With Polaris, developers can easily onboard and begin scanning their code in just a matter of minutes, while security teams can effortlessly track and manage testing activities and risks across hundreds or even thousands of applications.

Trustwave Named 2023 Company of the Year and Innovation Leader for Managed and Professional Security in the Americas by Frost & Sullivan

The analyst firm Frost & Sullivan awarded Trustwave the dual honors of being named 2023 Company of the Year for Managed and Professional Security in the Americas, Excellence in Best Practices, and as the Leading Innovator in the 2023 Frost Radar™: Americas Managed & Professional Security Services Market. Trustwave was also recently named a Top 5 Innovator in the Global MDR Radar Report.

Chinese fraudsters: evading detection and monetizing stolen credit card information

Cyber attacks are common occurrences that often make headlines, but the leakage of personal information, particularly credit card data, can have severe consequences for individuals. It is essential to understand the techniques employed by cyber criminals to steal this sensitive information.