Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

CyberRisk Alliance: JFrog Field CISO Paul Davis on Securing Software in Today's Threat Landscape

In this executive interview with CyberRisk Alliance, JFrog’s Field CISO, Paul Davis, discusses the growing challenges of securing development workflows and the evolving role of the CISO. With an increasing focus on information security, Paul shares insights on balancing development speed with the need for robust security in today’s software environments.

Securing our world: Cybersecurity Awareness Month 2024

October marks Cybersecurity Awareness Month. This is a time to focus on the critical importance of cybersecurity and provide individuals and organizations with simple, effective tools to stay safe online and protect personal information. Increased awareness and taking appropriate actions are fundamental to a more secure digital work environment. The theme for this year, “Secure Our World,” emphasizes that cybersecurity is a shared responsibility.

GigaOm Radar Report 2024: Insights on Continuous Vulnerability Management

As organizations face increasingly sophisticated cyber threats, the importance of Continuous Vulnerability Management (CVM) continues to grow. GigaOm’s latest Radar Report for Continuous Vulnerability Management provides an in-depth analysis of the current landscape, offering a comprehensive look at the solutions and vendors leading the charge in this critical space. The report assesses a variety of platforms based on key criteria such as feature set, ease of use, performance, and innovation.

Anatomy of a Cyber Attack: The PAN-OS Firewall Zero-Day

On April 12, 2024, Palo Alto Networks published a security advisory detailing an actively exploited maximum severity zero-day vulnerability affecting the GlobalProtect feature of PAN-OS. Dubbed CVE-2024-3400, it was assigned the maximum critical severity score of 10.0 through the Common Vulnerability Scoring System (CVSS), meaning the potential for damage was large and the path to exploit was easy for cybercriminals.

What is Supply Chain Detection and Response?

Supply chain detection and response (SCDR) is a solution for supply chain incident responders that drives critical issue identification, vendor responsiveness, and time to incident resolution. SCDR solutions provide risk intelligence, AI-driven workflows, and collaboration capabilities to improve the security posture of your organization and your suppliers.

TDK Electronics Goes from Complexity to Confidence with CrowdStrike

TDK Electronics is a German manufacturer of electronic components, modules and systems. With more than 23,000 employees spread across 20 development and production sites worldwide, TDK serves a range of industries, including automotive, industrial and consumer electronics, IT and telecommunications.

How To Spot Fake Ads on Facebook

You can spot fake ads on Facebook if you notice that the ads feature very inexpensive products, poor-quality images, spelling mistakes or a lack of clear branding. Fake Facebook ads aim to trick you into sharing your personal information or paying for items that don’t exist. Continue reading to learn some of the most common signs of fake Facebook ads, how to avoid falling for these fake ads and what to do if you have already been scammed by them.

How To Prevent Man-in-the-Middle Attacks

You can prevent Man-in-the-Middle (MITM) attacks in your organization by investing in a password manager, using a VPN, monitoring your network and training employees on security best practices. MITM attacks occur when a cybercriminal intercepts private data sent between two businesses or individuals to steal or alter the data with malicious intent.

Sensitive Data Discovery Tools: Best Practices for GDPR, PII, and PCI Compliance

For most companies today, the question isn’t whether a data breach will occur, but rather when it will occur. This predicament is primarily due to the sheer volume of data, the challenges associated with monitoring sensitive data, and the transition to remote work. Consequently, IT security teams are constantly navigating a dynamic and enduring risk landscape, making it exceptionally challenging to maintain data security and implement effective sensitive data protection strategies.