Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Blogs

Combat Cybercriminals With Sound Office Policies

According to the FBI, cybercrime cost American businesses $12.5 billion in 2023. More worrying was that this was a 22% increase from the previous year, even though there were fewer complaints in 2023. Just over 60% of those losses were due to phishing emails, showing that humans are the weakest link. As a result, you need to ensure that your office policies are on point. In this article, we'll look at where to focus your efforts. We'll discuss physical security, third-party vendors, and training your team.

Are Existing Security Protocols Enough for the Advancements in VR Tech?

Virtual reality (VR) has come a long way from being a futuristic concept to a widely used technology. It's not just about gaming anymore; VR is making waves in education, healthcare and even corporate training. As companies dive into the world of VR, the question arises: are existing security protocols enough to keep up with these advancements? This is particularly important in sectors like education and healthcare where data security is paramount.

Are Bitcoin ATMs Safe? Security Tips for Users

Navigating the world of Bitcoin ATMs can sometimes feel like walking through a digital forest, full of potential rewards but also hidden risks. You've likely seen these machines popping up in various locations, offering a bridge between physical cash and digital currencies. However, as you stand in front of one, you might wonder about the safety of these transactions and what you can do to protect your investments. With the right knowledge and precautions, you can significantly reduce your vulnerability to common threats.

History of Vulnerability Management: Lessons from Past to Present

Vulnerability management has been a key part of how companies protect their digital assets and has helped cybersecurity evolve. In the last few decades, vulnerability management has changed from simple patch management to complex, multi-layered plans meant to act upon cyber threats that are getting smarter all the time. In the early days of cybersecurity, people only took action after security was breached instead of trying to stop them.

A Comprehensive Guide to NIST SP 800-53B compliance in 2024

NIST 800-53B, Control Baselines for Information Systems and Organizations, offers security and privacy control baselines for the Federal Government. It serves as a companion to NIST Special Publication (SP) 800-53, Revision 5, which outlines security and privacy controls for information systems and organizations.

The Cloud Security Confidence Gap: What Leaders Need to Know

In this increasingly cloud-first world, data protection is more important than ever. With so many organizations relying on cloud applications to get work done, keeping sensitive information secure is a top priority. But balancing convenient access with strong security measures is no easy feat. In fact, only a small fraction of security leaders feel truly confident in their current data security measures. Lookout recently surveyed 100 executives to get their take on data security in the cloud.

Introducing Ephemeral IDs: a new tool for fraud detection

In the early days of the Internet, a single IP address was a reliable indicator of a single user. However, today’s Internet is more complex. Shared IP addresses are now common, with users connecting via mobile IP address pools, VPNs, or behind CGNAT (Carrier Grade Network Address Translation). This makes relying on IP addresses alone a weak method to combat modern threats like automated attacks and fraudulent activity.

Static Code Analysis for Python: 7 features to look out for

Python dominates the coding world, powering everything from web apps to AI breakthroughs. It’s so popular that 70% of developers have Python in their toolkit. It’s no wonder it consistently ranks among the top languages year after year. But with great power comes great responsibility…to write bug-free code. That’s where the secret weapon of top Python pros comes in: Static Code Analysis (SCA).

The Evolution of Automation and AI for Security Operations

In an era where cyber threats are constantly evolving and security teams are overwhelmed by an ever-expanding flood of alerts, tech sprawl, and an ongoing talent shortage, the modernization of the SOC is no longer optional — it’s imperative. According to Gartner, automation and artificial intelligence are the keys to unlocking new levels of efficiency, accuracy, and resilience in the fight against cyber threats.

Defensive Playbook: Understanding New Trends in External Risk with CyCognito's State of External Exposure Management Report

We just published our 2024 State of External Exposure Management Report. In this report, we looked at where serious issues hide on the average attack surface, how basic protections can help (or fail to) protect critical assets, and the ways that deprioritizing issues can help security teams spend their time on the right vulnerabilities.