Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

NIS 2 Directive: Strengthening IoT Security in the EU

In today’s interconnected world, the Internet of Things (IoT) plays a crucial role in various sectors, from healthcare and transportation to energy and critical infrastructure. However, with the increasing reliance on IoT devices comes the heightened risk of cybersecurity threats. To address these challenges and enhance cybersecurity measures across the European Union (EU), the NIS 2 Directive (Directive (EU) 2022/2555) was introduced.

Immutable Backups: Importance, Benefits, and Implementation

Ransomware, human errors, and disasters are constant threats to your business’s most valuable asset –its data. Traditional backups, while essential, aren’t always enough since ransomware can still infiltrate them. That’s where immutable backups emerge as a crucial layer of protection. They ensure that even if the worst happens, your critical information remains untouched and recoverable.

Enhancing Cybersecurity with BlueVoyant's AI Technology for Emerging Vulnerabilities

After a new zero-day vulnerability is announced, the National Vulnerability Database (NVD) publishes a measure of its severity under the Common Vulnerability Scoring System (CVSS). CVSS scores are a crucial tool for organizations as they give an approximation of the severity of disclosed vulnerabilities.

How does BluVault keep your M365 data secure without breaking budgets?

Learn how businesses can strengthen their M365 data security with cost-effective backup and recovery solutions. According to Morgan Lewis, in 2023, the average cost of a data breach reached $4.45 million. This is 2.25% higher than the statistics in 2022. These numbers are a clear indication of why data security solutions are a must for enterprises. Protecting M365 data is crucial because threats like ransomware, data breaches, and insider risks can cause serious problems for companies.

Controlled Unclassified Information (CUI) Marking Requirements & Management in M365 & GCC High

In July 2022, the Pentagon’s acquisition office issued a memo reminding acquisition officials of the DoD’s requirements for handling controlled unclassified information (CUI). The standard which applies to Defense contractors is not new. The original Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012 requirement went into effect in 2017.

Identity Theft: What It Is, How To Prevent It, and Why It's Terrible

Identity theft is one of the things you never expect to happen to you until it does. The scariest part is not the theft itself but what follows after. Victims of identity theft don't often discover their financial, reputational, and bureaucratic lives are destroyed until long after the crime was committed. This delay makes it extremely difficult for authorities to investigate identity theft cases.

Choosing Attack Surface Visibility Software in 2024

There’s one major between organizations that fall victim to a data breach and those that don’t - attack surface awareness. Even between those who have implemented an attack surface management solution and those who haven’t, the more successful the cybersecurity programs more likely to defend against a greater scope of cyber threats are those with greater attack surface visibility.

Stages of Burnout in Cybersecurity: Recognising the Signs | Razorthorn Security

Unpack the stages of burnUnpack the stages of burnout in the demanding field of cybersecurity out in the demanding field of cybersecurity with this detailed analysis from the Razorwire Podcast. Explore how high energy and engagement initially characterize effective work, but can degrade into ineffectiveness, overextension, and ultimately, disengagement. This episode delves into the psychological progression of burnout, emphasizing the critical point where professionals feel they can no longer manage alone, highlighting the importance of seeking help.

Cisco Duo Third-Party Compromise

On April 16, 2024, Cisco Duo informed affected customers of a breach involving their SMS and VOIP multi-factor authentication (MFA) service provider. The breach occurred on April 1st due to a phishing attack, allowing unauthorized access to the provider’s systems, including SMS and VoIP MFA message logs for specific Duo accounts between March 1st and March 31st, 2024. Though the threat actor accessed message logs, they did not obtain message content.

Critical Authentication Bypass Vulnerability in Delinea Secret Server Disclosed Along With PoC

On April 12, 2024, Delinea issued an advisory to address a critical authentication bypass vulnerability identified in the SOAP API component of its Secret Server product, available in both Cloud and On-Premises solutions. A threat actor could exploit this vulnerability to bypass authentication, gain administrative access, and extract sensitive information.