Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Recently, I started working with my children's school to enhance their online safety measures and develop a digital mindfulness course in collaboration with their digital literacy lead. This experience highlighted the fact that our schools are not only expected to provide safe places of learning but also extend that safety into the digital spaces.

Nearly half (46%) of businesses observed an increase in deepfakes and generative AI-related fraud last year, a new report from AuthenticID has found. Additionally, phishing attempts increased by 76% in 2024, and more than 90% of cyberthreats were driven by social engineering. The report also noted a rise in workplace-related fraud, including employee impersonation and account takeover.

In today’s flexible and fast-paced digital environment, email still remains the backbone of communication for many organizations. Employee email accounts are chock-full of sensitive information from intellectual property to customer data, which makes securing email servers crucial. Data leakage and unauthorized access not only disrupt operations and cost time and money to fix, but they can also damage an organization’s reputation.

This article provides details on how Bitsight TRACE addressed CVE-2024-23897, an arbitrary file read vulnerability that affects Jenkins, a well-known open-source automation server. It includes technical details, common pitfalls, and decisions made since the CVE disclosure until now. The investigation of CVE-2024-23897 is an example of how we can obtain the target instance version but not solely rely on it to classify an instance as vulnerable. First, we go deep to understand the vulnerability.

Are You Testing for Compliance or Preparing for Real Attacks? Cybersecurity isn’t just about checking boxes—it’s about staying ahead of threats. Many businesses rely on Penetration Testing (Pentesting) and Red Teaming to identify vulnerabilities. However, these traditional methods often assume that attackers play by the same rules as defenders. Reality has other plans.

Automatic Zero Trust protection. Bulk labeling of files. Easy-to-use tools. Here’s 3 ways to secure external collaboration without impeding workflows. Just as one broken link can disrupt a physical supply chain, it only takes one security gap to infect a digital supply chain. Digital supply chains are as vital to modern workflows as they are fallible to attack. From infected software to accidental third-party leaks, one single vendor can bring down the whole supply chain.

Nowadays, most aspects of business are digitalized and it’s essential to ensure your company is cyber resilient. Just as you've struggled to weather the ups and downs of the market, it's time to protect sensitive data and confidential information from increasingly sophisticated threats. With an average of 75,520 attacks per day, according to WatchGuard's threat landscape, it is clear that enterprises must go beyond detection and response.

Maintaining network compliance is essential for enterprises to ensure security, operational efficiency, and adherence to industry standards. Failing to comply not only increases the risk of cyberthreats, but can also result in substantial regulatory fines and reputational damage. A strategic approach to network compliance is crucial for protecting your network infrastructure effectively.