In our previous blog, The states of data, Part 2: Why visibility is key for protecting data at rest, we discussed the importance of discovering data; classifying it; assigning the right permissions; and getting rid of redundant, obsolete, or trivial data to protect data at rest. While doing all this can get you started, achieving data security takes more than that.

CyberArk’s Privileged Access Management helps organisations secure privileged accounts and protect sensitive data from cyber threats. This article covers its key features, how it works, and the benefits it offers for cybersecurity, with insights on how it stands out in the market.

Trustwave's Threat Intelligence team has discovered a new malware dubbed Pronsis Loader, with its earliest known variant dating back to November 2023. This loader shares similarities with the D3F@ck Loader , which surfaced in January 2024. Pronsis Loader has been observed delivering different malware variants, including Lumma Stealer and Latrodectus as its primary payloads. Additionally, the team identified infrastructure linked to Lumma Stealer during the investigation.

Microsoft Hyper-V is a type 1 hypervisor that you can install on Windows – including on Windows 10 and Windows Server 2019. In some scenarios, you may need to uninstall Hyper-V on your Windows machine. For example, VMware Workstation and Hyper-V are not compatible when installed on the same machine. The same issues occur with other type 2 hypervisors like VirtualBox.

This report is the latest in a series that will delve into the deep research the Trustwave SpiderLabs Threat Intelligence team conducts daily on the major threat actor groups currently operating globally. The information gathered is part of a data repository that helps Trustwave SpiderLabs identify possible intrusions as it conducts threat hunts, vulnerability scans, and other offensive and defensive security tasks.

In today's digital age, the prevalence of cyber attacks has become a major concern for organizations across various industries, with higher education institutions particularly vulnerable. As the volume and complexity of cyber threats continue to escalate, there is a growing need for innovative solutions to bolster cybersecurity defenses.

Fall brings certain things annually: leaves falling, pumpkin spice, and cybersecurity awareness. Looking back at the past nine months, cybersecurity awareness is more important now than at any other time in history.

The second Network and Information Systems Directive (NIS2) will come into effect on 17 October 2024. This is the date by which all EU member states must implement the directive into national law. Not far behind is the Digital Operational Resilience Act (DORA), an EU regulation which came into force on 16 January 2023 but is effective 17 January 2025.