Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Blogs

Cyber Retail Fraud: A New Twist on an Old Game

People have always been susceptible to a deal that is too good to be true. In the 1800s, American con man George C. Parker was best known for his repeated successes in "selling the Brooklyn Bridge” to the unwary. Then, in the 1900s it became popular to sell "valuable" Florida real estate that turned out to be swampland.

Bumblebee Malware, Lynx and INC Ransomware, MITRE Threat Group Scenarios, and More: Hacker's Playbook Threat Coverage Round-up: October 2024

In this version of the Hacker’s Playbook Threat Coverage round-up, we are highlighting attack coverage for several new threats. SafeBreach customers can select and run these attacks and more from the SafeBreach Hacker’s Playbook to ensure coverage against these advanced threats.

How to Secure Your Network Infrastructure

With governments across the globe gearing up for major elections, experts have been predicting an increase in distributed denial of service (DDoS) attacks from nation-states and, so far, those predictions have paid off. According to Forbes, a recently thwarted DDoS attack found hackers sending traffic at 3.8 terabytes per second to a target server, peaking at 2.14 billion packets per second, making it the largest DDoS attack ever recorded.

Hardware Security Modules: Foundation for Post- Quantum Cryptography Implementation

With NIST's release of the final standards for Post-Quantum Cryptography (PQC), organizations are tasked with securely and efficiently implementing these complex algorithms. Hardware Security Modules (HSMs) stand out as a key component in this process, providing the robust infrastructure needed to manage post-quantum cryptographic operations while ensuring strong security.

Transforming Payment Systems in Education: Integrating Mobile Payment Solutions to Streamline Financial Transactions for Modern Learning Environments

In recent years, the management of finances within educational institutions has undergone significant shifts, driven largely by the rise of digital technologies. The transition from traditional, often cumbersome, payment processes to streamlined, electronic systems has become increasingly essential. At the forefront of this transformation are education payment solutions that simplify fee collection, improve payment accessibility, and align with digital-native expectations.

LEKT AI: Your Ultimate AI Chatbot Assistant

Ever wished you had a one-stop hub for all the coolest AI models out there? Well, guess what? LEKT AI just made that wish come true! It's like having a genius friend who's always got your back, whether you're tackling a school project, brainstorming marketing ideas, or just exploring the wild world of AI.

Remote Desktop Protocol (RDP) Vulnerability

Remote Desktop Protocol (RDP) is a protocol developed by Microsoft, providing the user access to remotely connect with another computer. Microsoft’s remote desktop protocol is one of the best currently available in the market, working efficiently with an effortless graphical user interface (GUI). It can be used between multiple Windows Operating Systems and Devices. This article discussed RDP protocol security and current RDP vulnerabilities.

DORA vs. NIS2 vs. PSD2: Navigating the Evolving Regulatory Landscape

The legal and regulatory landscape is constantly evolving, continually intensifying the demands placed on organizations. As well as meeting the requirements of existing regulations such as the Payment Services Directive 2 (PSD2), companies must contend with the upcoming introduction of the Network and Information Security Directive or NIS2 (Directive (EU) 2022/2555) and the Digital Operational Resilience Act (DORA).

CVE-2024-50388: Critical OS Command Injection Vulnerability in QNAP HBS 3 Hybrid Backup Sync

On October 29, 2024, QNAP issued a security advisory regarding a critical OS command injection vulnerability, tracked as CVE-2024-50388. Discovered by researchers at the Pwn2Own conference, this vulnerability affects HBS 3 Hybrid Backup Sync, a backup and disaster recovery solution used by organizations for secure data protection across multiple locations. The flaw allows remote attackers to execute arbitrary commands.