Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

Polyfill.io and Software Supply Chain Security: A Cautionary Tale

Over 100,000 websites using a popular JavaScript service (polyfill.io) are now victims of a web supply chain attack. A web supply chain attack is a cyberattack is a type of software supply chain attack that targets a third-party web software component to gain access to an organization’s systems or data. These attacks can be difficult to prevent because they can be hard to detect, take advantage of trust, and have long-lasting effects.

UK Election - The Hacktivism Perspective

The UK General Election marks a monumental time in UK politics. There has been a lot of internal tension regarding the future of the Conservatives, with a large majority of individuals voting to ensure that the party did not continue its 14 years in power. On 5 July 2024, Labour won the General Election in a major landslide victory for the party, putting them in power for the first time since 2010.

How To Protect Your Data if Your Phone Is Lost or Stolen

If your phone is ever lost or stolen, your data could be at risk of being compromised. One of the main ways your stored data could be in danger is if you have a weak passcode, such as 0000 or 1234. If the person who found or stole your phone could guess your passcode, your data would become compromised. Read below to learn more about how to protect your phone when it’s lost or stolen and how to keep your phone’s data safe.

Guide to SWIFT CSCF (Customer Security Controls Framework)

The SWIFT Customer Security Controls Framework (CSCF) is a key global cybersecurity framework that provides recommended and mandatory security controls for banking institutions that use the SWIFT banking system. The framework is designed to help financial institutions improve their cyber resilience and ensure that participants within the SWIFT network adhere to a stringent set of security compliance standards. Find out how UpGuard helps the financial services industry meet compliance standards >

Security Misconfigurations - Detection and Automatic Remediation

Security misconfigurations can open the door to potential cyberattacks, leading to data breaches, system compromises, and other severe consequences for organizations. In modern IT environments, including cloud infrastructure and other digital platforms, these misconfiguration vulnerabilities are becoming increasingly common and complex. Preventing and addressing security misconfigurations requires a collaborative effort across DevOps, DevSecOps, and security teams.

How to evaluate AI features in workflow automation platforms

If you’ve been paying attention to the latest AI product releases or evaluating AI tools for your teams, you’ll probably have noticed how difficult it is to distinguish between hype and reality. Vendors are under an enormous amount of pressure to deliver AI features, and, as a result, many of these new tools feel rushed and fragile, and simply aren’t capable of solving important, real-world problems.

Common WhatsApp Scams and How To Avoid Them in 2024

WhatsApp is a messaging app that enables users to message and voice call other WhatsApp users. Many people from all over the world use WhatsApp to communicate. This has made it a common platform for scammers to target people. Some of the most common scams on WhatsApp include an invitation to “WhatsApp Gold,” impersonation scams, WhatsApp tech support scams, as well as charity and romance scams.

Why Is Manual Testing a Thing of the Past?

Before end-to-end (E2E) testing frameworks, the software development industry struggled with fragmented and inefficient testing methods. Testing was manual, labor-intensive, and prone to human error, which limited testing coverage and left many critical issues undetected until later stages of development. This manual approach relied heavily on developers and testers executing test cases by hand, leading to substantial inefficiencies and incomplete test coverage.

Lessons From the Front Line - Examining Real-Life Cyber Breaches

Cybersecurity professionals are bracing themselves as the relentless cycle of new phishing scams, malware attacks, and AI-enabled threats make it hard to stay a step ahead. Against this background, the Department of Home Affairs is proposing to establish a Cyber Incident Review Board to protect and investigate Australian organizations that have been breached. But is this enough?

ThreatSync+ NDR: Bringing AI-Driven Threat Detection to Every Business

In a world where cybersecurity threats are ever evolving and increasingly sophisticated, businesses of all sizes need robust solutions to protect their networks. However, these solutions have traditionally been costly and complex. WatchGuard is changing that tradition with the launch of its new ThreatSync+ Network Detection and Response (NDR) solution.