Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

One Identity Manager: Strengthening Compliance Through User-Driven Identity Governance

Companies face mounting pressure to prove compliance with regulatory frameworks while maintaining operational efficiency. identity governance and administration (IGA) sits at the center of these compliance requirements, making the choice of IGA solution a strategic decision that can determine audit success or failure. When evaluating compliance-focused IGA platforms, user testimonials offer invaluable insight into how solutions perform under actual deployment conditions.

What is Shadow SaaS? Causes, Risks, and Management Tips

Security teams are familiar with the comforting sense of safety that comes from utilizing security controls like Single sign-on (SSO) providers to manage their organization’s major applications and critical tools. When these applications are routed through Okta, Azure AD, or other identity providers, your SaaS environment can seem managed and accounted for. But lurking underneath is a significant vulnerability: the SSO blind spot.

Fool Me Once: How Cybercriminals Are Mastering the Art of Deception

LevelBlue is proud to present the second edition of our biannual Threat Trends Report! This report builds on what we started in our first edition, providing cybersecurity teams with critical insights into current threats. Our second edition delves into threat actor activity observed in the first half of 2025 by LevelBlue Managed Detection and Response (MDR) and LevelBlue Labs threat intelligence teams.

From alert fatigue to action: Smarter SOC workflows for defence teams

Free your analysts to focus on what really matters: security outcomes. Security teams in the UK Ministry of Defence (MOD) are facing a dual burden: the growing volume and sophistication of cyber threats and the relentless operational grind of triaging alerts, managing compliance, and stitching together intelligence from fragmented systems. The reality is clear: Traditional security operations center (SOC) workflows aren't built for today’s pace and quantity of threats.

Anubis and the Death of Data: A New Era of Ransomware Operations

Ransomware activity continues to increase, and Bitsight data illustrates the scale of this growth. In our State of the Underground 2025 report, Bitsight TRACE observed a nearly 25% rise in unique ransomware victims publicly listed on leak sites. Additionally, the number of leak sites operated by ransomware groups grew by 53%.

PharmaFraud: how illegal online pharmacies endanger your health and your wallet

Pharma fraud: How illegal online pharmacies endanger your health and your wallet Even when a website looks legitimate, buying medicine online can expose you to scams that might seriously impact your finances, data or even physical health. When you’re in urgent need of medication – whether it’s a routine antibiotic, a high-demand weight loss treatment, or something more private – the internet can seem like the quickest, most discreet option.

Unlocking Enhanced Security: What Egnyte's FedRAMP Moderate Equivalency Means for You

You may have read our recent blog about the EgnyteGov platform achieving FedRAMP Moderate Equivalency, and why it’s a significant milestone. In this latest blog, I’ll explain how Egnyte’s FedRAMP Moderate Equivalency benefits our current and prospective customers in managing their critical data.

How Continuous DAST Empowers OWASP Top 10 Compliance

Your app isn’t just HTML anymore. It is containers talking to microservices, SPA front ends calling GraphQL, and third‑party SDKs everywhere. That mix creates blind spots and unpredictable OWASP Top 10 gaps. Continuous DAST looks through every layer, including mobile backends, APIs, and container workloads, simulating attacker behaviour across your entire technology stack. Hence, no more guessing which component hides the next SSRF, injection, or misconfiguration.

DAST Best Practices: A Guide for CXOs & Security Leaders

DAST often underdelivers, not because the tool is broken, but because it’s misapplied. It gets dropped into pipelines without strategy, runs against partial environments, skips authenticated areas, and generates findings that teams ignore. The result is predictable: wasted cycles and lost credibility. DAST best practices focus on addressing operational failures that render scans ineffective.