Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Security

Banks: You don't need to deploy fraud detection tools on-premise anymore

It might seem like ‘the cloud’ has well and truly established itself as the de facto deployment choice. However, the market for cloud computing is still expected to grow – a lot – in the coming years (from $371.4 billion in 2020 to $832.1 billion in 2025). How can this much growth still be possible for a fairly mature market?

Why Auto Dealers Are Prime Targets for Ransomware Attacks

It’s no secret that cyber attacks — especially ransomware attacks — are increasing across industries and organizations. Attack methods are evolving and rapid digitization, along with the rise of cloud computing and a remote workforce, are creating new threat vectors and exposing new vulnerabilities. One industry that has become a major target for attacks is the automotive industry.

Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text

First things first, let’s be clear that this is NOT a new Log4Shell or Spring4Shell vulnerability. Although it is a remote code execution issue, the impact is neither as severe nor as easily exploitable as the issue in Log4j from December 2021. Similar to the Log4j issue, the essence of the problem is that you can perform a lookup that can then be misused. However, the Log4shell vulnerability was very easy to exploit — which is not necessarily the case this time.

Vulnerability Research: Here's How it Works at Mend

There are many types of security research, from digging into malware to discovering the latest DDoS attack vectors. At Mend, vulnerability research is a primary focus for our research team, but even that area has many different avenues to pursue. For example, we tend to focus on open source vulnerabilities, so it is quite unlikely that you’ll see us doing reverse engineering and trying to understand assembly code.

How to Automate Cyber Vendor Risk Management (Cyber VRM)

Because information security has become increasingly important and businesses are heavily relying on worldwide connectivity, Cyber VRM solutions are necessary to protect against emerging cyber threats and secure data effectively. However, managing vendors, in addition to their cyber risks, can be a challenging and time-consuming effort that requires more efficient solutions.