Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

When it comes to closing a sales deal, trust and security are often just as important as the product or service you’re selling — sometimes even more important. The reason is simple. Before bringing you on as a new vendor, customers need to be confident that you’re a safe and secure partner. The challenge is proving your security posture quickly, without dramatically slowing the deal.

Recently, two critical security flaws were discovered in Kentico Xperience 13, a popular digital experience platform (CMS). Tracked as CVE-2025-2746 and CVE-2025-2747, these vulnerabilities allow unauthenticated attackers to bypass the Staging Sync Server’s authentication, potentially gaining administrative control over the CMS.

With the rise of hybrid work and IoT, the demand for secure, scalable, and adaptive network access has never been greater. Traditional network access control (NAC) was built for on-premises environments, focusing on visibility, device compliance, and access control. But it no longer meets modern security demands. This blog explores the limitations of traditional NAC and how Netskope offers a more dynamic and comprehensive solution for universal zero trust network access (UZTNA).

The cyber insurance industry continues to face challenges related to traditional cyber security risks, and more recently, data privacy risks. In many cases, traditional cyber insurance policies may cover legal fees or costs related to a data privacy infringement. Organizations not only get hit with class action lawsuits following incidents like breach of PII/PHI, but are seeing demand letters from law firms who are looking to protect their clients from any possible disclosure of their sensitive data.

When we first launched Project Calico in 2016, we set out to make Kubernetes networking easy, reliable, and scalable for all organizations. Our goal was to abstract away the complexity and performance overheads of other CNI plugins while simultaneously extending Kubernetes network policy to make it easier to secure your Kubernetes workloads.

The average amount of money requested in business email compromise (BEC) attacks spiked to $128,980 in the fourth quarter of 2024, according to the Anti-Phishing Working Group’s (APWG’s) latest report. This is nearly double the amount requested during Q3 2024. The researchers found that Gmail accounts were used to launch 81 percent of BEC scams last quarter. The report also warns of a surge in SMS phishing scams impersonating toll operators in the US, driven by a popular Chinese phishing kit.

Staying on top of corporate security trends may seem like a hassle, but it actually has great benefits for your organization. Understanding security trends helps businesses benchmark their performance—including within their specific industry—and strengthen their security posture to align with the best performers.

Managing the vendor remediation process is no small feat. While on the surface, it might seem like the bulk of the heavy lifting is done once you complete your initial assessment, you (and every other security team on the planet) know this couldn’t be further from the truth. After all, if your team doesn’t constantly track remediation efforts and validate corrective actions, how else are you supposed to ensure vendors effectively mitigate the risks you identified?

New StilachiRAT malware enables crypto theft and reconnaissance, AMOS and Lumma stealers spread via Reddit posts, and 41% of user logins used compromised passwords.

For founders of early-stage startups in Australia and New Zealand, growth is the ultimate goal. You’re focused on building an exceptional product, winning customers, and scaling fast. But one thing that should also be on your radar is security compliance. ‍ The reality is, compliance isn’t just about meeting legal requirements or ticking a box when an enterprise customer asks for certifications. It’s a strategic advantage.