Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Securities and Futures Commission (SFC) is the body that regulates Hong Kong’s securities and futures markets. In recent years, the SFC has been placing an increasing focus on regulatory requirements for digital assets, especially for crypto-native firms and already regulated capital market participants.

Ransomware attacks have emerged as a significant threat to educational institutions. Cybercriminals encrypt sensitive data and demand payment for its release, severely disrupting school operations and leading to exorbitant recovery costs for districts. With ransomware tactics continually evolving, the security of the entire U.S. education system is at risk.

Ever feel like some tools are designed by people who’ve never had to use them? Like those public restroom hand dryers that leave your hands wetter than before, or CAPTCHAs that make you question if you even know what a bicycle looks like—it’s like a bad joke at our expense. In the 2022 Devo SOC Performance Report, questions were raised about the biggest challenges faced by security operations center (SOC) teams.

Shadow technology, regardless of name, is a manifestation of the same issue - unmonitored, unauthorized, or hidden technology operating outside official oversight. Over the past ten years, with the adoption of SaaS services, Shadow IT became a significant concern for security teams. With the more recent explosion of AI tools, we’ve started to hear the term Shadow AI being used for the same reasons.

Learn how IT asset lifecycle management ensures optimal asset use and the crucial role of real-time visibility in an effective strategy.

As businesses settle into the new year, managed service providers (MSPs) should thoroughly review and strengthen their customers' endpoint cybersecurity strategies. According to WatchGuard data, in Q3’2024, endpoint malware detections were up significantly. This is a 300% increase compared to Q2, highlighting the importance of strengthening security measures at this time of year.

Only allowing one test story at a time when change control is enabled is restricting. That’s why builders can now create multiple drafts in a story. Set changes live faster by duplicating drafts and publishing smaller edits first. And in the spirit of speed and efficiency, easily delete drafts from a story using the API. Read more on change control →

Struggling with vault sprawl and NHI secrets? GitGuardian’s new HashiCorp Vault integration helps cybersecurity teams centralize secrets management, reduce blind spots, and strengthen security for today’s intricate infrastructures.

As macOS becomes more prevalent in businesses, ensuring an application does not expose a user to vulnerabilities or your organization to business risk, is an important part of managing an organization’s risk. These apps often handle sensitive data, manage authentication and access system resources, making them attractive targets for cyber criminals to exploit. MacOS has unique security features that allow developers to build secure applications, but they must be correctly leveraged.

Today’s adversaries have long been accelerating and evolving their operations. Now they are developing a business-like structure, refining and scaling their successful strategies, and exploring new technologies to cultivate a more efficient approach to cyberattacks. 2024 was the year of the enterprising adversary. The CrowdStrike Global Threat Report delivers critical insights into the evolving threat landscape and adversary behavior and tradecraft.