Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Machine War Has Begun: Cybercriminals Leveraging AI in DDoS Attacks

In the digital landscape, the integration of Artificial Intelligence (AI) into cybercriminal activities has marked the beginning of a new era of threats. The “machine war” has indeed commenced, with AI enhancing the scale and sophistication of cyberattacks. Distributed denial of service (DDoS) attacks, in particular, have become more formidable with AI’s capabilities, presenting significant challenges for cybersecurity defenses.

Two New IDE's get Veracode Scan

We're happy to announce two new Veracode Scan products: Veracode Scan for Eclipse and Veracode Scan for Visual Studio. Building on the success and adoption of Veracode Scan in Visual Studio Code, IntelliJ, PyCharm, and Rider, we're releasing versions for Eclipse and Visual Studio. Now the power of Veracode’s outstandingly accurate Static Application Scanning is avaialble two of the most widely used and customer-requested IDE’s.

Why is Vulnerability Management-as-a-Service Essential for Businesses?

As cyber threats get smarter and more common, companies of all sizes need to make vulnerability management a top priority to keep their private data safe and their operations running smoothly. Traditional vulnerability management methods, which involve a lot of manual work and restricted visibility, aren't working well against the complicated problems that modern cyberattacks pose.

Combat Cybercriminals With Sound Office Policies

According to the FBI, cybercrime cost American businesses $12.5 billion in 2023. More worrying was that this was a 22% increase from the previous year, even though there were fewer complaints in 2023. Just over 60% of those losses were due to phishing emails, showing that humans are the weakest link. As a result, you need to ensure that your office policies are on point. In this article, we'll look at where to focus your efforts. We'll discuss physical security, third-party vendors, and training your team.

Are Existing Security Protocols Enough for the Advancements in VR Tech?

Virtual reality (VR) has come a long way from being a futuristic concept to a widely used technology. It's not just about gaming anymore; VR is making waves in education, healthcare and even corporate training. As companies dive into the world of VR, the question arises: are existing security protocols enough to keep up with these advancements? This is particularly important in sectors like education and healthcare where data security is paramount.

Are Bitcoin ATMs Safe? Security Tips for Users

Navigating the world of Bitcoin ATMs can sometimes feel like walking through a digital forest, full of potential rewards but also hidden risks. You've likely seen these machines popping up in various locations, offering a bridge between physical cash and digital currencies. However, as you stand in front of one, you might wonder about the safety of these transactions and what you can do to protect your investments. With the right knowledge and precautions, you can significantly reduce your vulnerability to common threats.

A Comprehensive Guide to NIST SP 800-53B compliance in 2024

NIST 800-53B, Control Baselines for Information Systems and Organizations, offers security and privacy control baselines for the Federal Government. It serves as a companion to NIST Special Publication (SP) 800-53, Revision 5, which outlines security and privacy controls for information systems and organizations.

The Cloud Security Confidence Gap: What Leaders Need to Know

In this increasingly cloud-first world, data protection is more important than ever. With so many organizations relying on cloud applications to get work done, keeping sensitive information secure is a top priority. But balancing convenient access with strong security measures is no easy feat. In fact, only a small fraction of security leaders feel truly confident in their current data security measures. Lookout recently surveyed 100 executives to get their take on data security in the cloud.

Introducing Ephemeral IDs: a new tool for fraud detection

In the early days of the Internet, a single IP address was a reliable indicator of a single user. However, today’s Internet is more complex. Shared IP addresses are now common, with users connecting via mobile IP address pools, VPNs, or behind CGNAT (Carrier Grade Network Address Translation). This makes relying on IP addresses alone a weak method to combat modern threats like automated attacks and fraudulent activity.

Static Code Analysis for Python: 7 features to look out for

Python dominates the coding world, powering everything from web apps to AI breakthroughs. It’s so popular that 70% of developers have Python in their toolkit. It’s no wonder it consistently ranks among the top languages year after year. But with great power comes great responsibility…to write bug-free code. That’s where the secret weapon of top Python pros comes in: Static Code Analysis (SCA).