Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Blogs

Best Practices When Using a Password Manager

When you invest in a password manager, you should follow some best practices when setting it up to ensure your information stays secure. Some of the best practices when using a password manager include creating a strong master password, enabling MFA, changing weak passwords, auditing your passwords and setting a short inactivity logout timer. Continue reading to learn more about the best practices when you use a password manager like Keeper.

What To Do if You Receive an OTP Code You Didn't Request

Receiving a One-Time Password (OTP) code that you didn’t request over text or email could be a sign that someone is trying to log in to one of your online accounts to gain access to your private information. An OTP code is a numeric code used as an additional form of verification to authenticate users before they can log in to their accounts. As the name suggests, this code can only be used once.

Emerging IoT Wiper Malware: Kaden and New LOLFME Botnet Variants

Wipers are malware that delete data on a device or make it inaccessible. They can be used for sabotage, to destroy evidence of an attack or simply to make a device unusable. IoT wipers often rewrite important parts of the firmware of an IoT device, rendering that device useless, so they are also known as “brickers”. Recent notorious examples of IoT wipers are AcidRain which was used by a Russian APT to brick satellite modems in Europe at the outset of the Russian invasion of Ukraine in 2022.

SAST - All About Static Application Security Testing

Updated on 07/18/2024 Static Application Security Testing (SAST) has been a central part of application security efforts for more than 15 years. According to the Crowdstrike 2024 State of Application Security Report, eight out of the top 10 data breaches of 2023 were related to application attack surfaces, so it’s safe to say that SAST will be in use for the foreseeable future.

Pyramid Scheme: What Is it and How Does It Work?

Pyramid schemes are one of the world's most well-known forms of financial fraud. For many years, they have victimized people who trust the promises of quickly making easy and significant profits. The frightening thing about these schemes is that they are built on a "business model" doomed to collapse. It is essential to understand what principles the pyramid operates in to be able to reveal and then avoid involvement in such a scam.

How to Create a Cybersecurity Incident Response Plan: Guide for 2024

Few organizations know how to handle a cybersecurity incident properly and minimize its impact on the business. Having a well-designed incident response plan (IRP) in place can save your organization time and resources spent on incident remediation. We can help you build an efficient IRP. Read this post and create an IRP that fits your organization’s needs using the best practices from the NIST incident response planning framework.

How State and Local Governments Can Stay Safe From Cyber Attacks

Cyber threats are increasing and, unfortunately, local and state government entities have become top targets. In 2023, the FBI reported that government entities were the third most-targeted sector by ransomware, and Arctic Wolf’s own research saw the average ransom for government organizations top $1 million USD. And that’s just one kind of cyber attack.

Best Practices for Cybersecurity in .NET Applications

In today's digitally interconnected world, cybersecurity is not just a priority-it's a necessity. For developers working with.NET applications, ensuring robust security measures can protect sensitive data, maintain user trust, and prevent costly breaches. Here are the essential best practices for enhancing cybersecurity in.NET applications. Keeping your.NET applications updated is crucial for maintaining security. For example, migrating from.NET Core 3.1 to.NET 6 can bring significant security enhancements and performance improvements.

Advanced Vulnerability Assessments: Beyond Penetration Testing

Sensitive information must be protected from constantly evolving cyber threats in the digital age. For companies of all sizes, this is an imperative and not just a desirable objective. A sound, proactive approach to cybersecurity involves "stress-testing" an organization's defenses to see where they can be penetrated-by whom, and using what techniques.