Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

Move From FedRAMP to DoD with Impact Level Assessment

We’ve written extensively before about FedRAMP’s impact levels. As a brief refresher, there are four: You can read our full guide to these four impact levels, how they’re calculated, and what they mean in this post. One important thing to know here is that FedRAMP is not the be-all and end-all security framework for the government.

Platform Engineering in a Cloud-First World

Welcome to “Cloud Unfiltered,” where we tackle everything about platform engineering and the cloud-first world! Today’s episode features an insightful chat with Abby Bangser, a Principal Engineer from Syntasso. Dive into the complexities of modern software development and the strategies that aid in streamlining operations in the tech-dominated business environment.

Can Someone Hack My Home WiFi?

Yes, it is possible for someone to hack your home WiFi. This can occur if you have a weak WiFi password, if you fail to update your router’s software or through a method called Domain Name Server (DNS) hijacking. Continue reading to learn how your home WiFi can be compromised, the signs of a hacked WiFi router, the steps to take if you get hacked and effective measures to prevent your home WiFi from getting hacked.

The Most Recent Malware Attacks on Companies in 2024

2024 has been quite the year for malware attacks. So far this year, major companies like Change Healthcare, Ticketmaster, Ascension Hospital, ABN AMRO and CDK Global have all been affected by malware attacks. Keep reading to learn more about each of these major malware attacks and how your company can protect itself from malware attacks.

How To Manage Sudo Users in Other Distributions: Guides on Similar Procedures for Different Linux Distributions

Jump to Tutorial Managing sudo users is one of the most important administrative tasks in any Linux distribution. This process allows a permitted user to run commands as the superuser or another user, defined through security policies. This reduces the potential security threat of having unprivileged users run any command on the system, and we can also audit executed commands or apply the least privilege principle.

Summer 2024 Product Release: What's New at Astra Security?

Cybersecurity has evolved from a technical challenge to a strategic business imperative. CXOs now grapple with a complex interplay of technological advancements, organizational shifts, and human error, which is only intensified by Generative AI, insider threats, third-party vulnerabilities, and persistent threat exposure.

Secure Password Policies for Active Directory: A Comprehensive Guide

One of the most common ways for attackers to slip into a corporate network is by compromising the username and password of a legitimate user account. Usernames are typically trivial to guess because they follow an established standard in a given organization, such as FirstnameLastname@domain.com. Unfortunately, compromising basic passwords is also surprisingly easy for threat actors today. For example, they can run a program that tries out various potential passwords for a particular user account.

Exploring the dynamic landscape of cybersecurity threats

Hello, My name is Chen, and I work as a threat intelligence analyst at Salt Security. Every day, I dive into the complex world of cybersecurity, uncovering the hidden threats that hide in our digital lives. Today, I'd like to take you on a journey through the evolving landscape of API threats. APIs are the quiet helpers of the digital world, allowing software applications to communicate easily with each other.

Not Just Us: North Korean Remote IT Fraudster Arrested in Tennessee

Just when we thought we had something special with our very own North Korean hacker, it turns out this type of fraud has made it to the Volunteer State. A recent arrest in Nashville, Tennessee is just another example of this global tactic finding its way into U.S. organizations. Fortunately, the authorities caught up with this one. According to the tech news site Cyberscoop, authorities arrested a 38-year-old man for allegedly getting himself hired by U.S. and British companies under false identities.