Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

September Release Rollup: Improvements in Prompt Library, Autodesk Construction Cloud Integration, and More

We’re excited to share new updates and enhancements for September, including: For more information on these updates and others, please read the complete list below and follow the links for more detailed articles.

Create a Reusable Function to Validate Configuration Settings Across Device Types

In a typical enterprise environment, NTP server configurations may differ not just between vendors, but even across OS variants within the same vendor. Ensuring that these configurations are correct and standardized is critical for time synchronization, which underpins security, logging, and automation.

From Folding to Folded: Hacking High Volume Mailer Machines

The Quadient DS-700iQ is a high-volume folder-inserter machine designed for automating the process of assembling, folding, and inserting mail into envelopes for large mailing operations. It features a modular design that can handle complex mailing jobs, supports multiple feeders and enclosures, and offers integration with barcode/OMR/2D scanning for document integrity and sorting.

Introducing Mend.io's AI Security Dashboard: A Clear View into AI Risk

Most dashboards are like a busy beach with one lifeguard watching the entire shoreline. They keep an eye on everything, but the sheer scope means that critical issues—like risks in AI applications—can get lost in the crowd. Mend.io’s AI Security Dashboard changes that. It’s like a lifeguard tower posted directly at the AI section of the beach, keeping a sharp, dedicated watch on AI specific risks that other tools overlook.

PCI DSS 6.4.3 Script Management: What CISOs Actually Need to Know

Tell me if you’ve heard this one before: a company audits its checkout page and discovers 47 scripts running. Only 12 were approved. The other 35? A mystery, and a risk. Nobody knows who added them or whether they’ve been compromised. That’s what we’re here to talk about today.

SpiderLabs Ransomware Tracker Update September 2025: Qilin, Akira Top Ransomware Attackers

The threat groups Qilin and Akira together conducted about one-quarter of the 402 ransomware attacks tracked by Trustwave SpiderLabs in September, with the manufacturing and technology sectors receiving the brunt of these efforts. This information was derived from a new SpiderLabs ransomware tracking tool that gathers information from a variety of open intelligence sources and our own proprietary research.

How to Detect and Mitigate Zero-Day Vulnerabilities

Companies face more sophisticated, unpredictable cyber threats. Zero Day vulnerabilities are among the greatest risks, as these software flaws are unknown and exploited before a fix is available, potentially compromising thousands of organizations. Stopping zero-day attacks is a top priority for security teams, requiring faster identification, detection, and mitigation to prevent damage. But how do these attacks work, and what practices really help?

Introducing Astra Trust Center: Proof of Security, Simplified

Ironically, most ‘Trust Center’ platforms don’t inspire trust. Click a vendor’s “Trust Center” and you’ll find one of two things: a dusty archive of “final-final” PDFs or a glossy page of buzzwords with zero verification, and a cheerful nudge to “email ” if you want the details. No wonder 86% of enterprise buyers today bail if they can’t verify security early.

Unlocking the Vault: Your 2025 Blueprint for Twitch Video Views

Ever feel like you're pouring your heart into every broadcast, only to find your past streams gathering digital dust? You're creating fantastic content, but the viewer count for your Videos on Demand (VODs) doesn't reflect that. Welcome to the new frontier of content creation. The landscape has shifted; it's no longer just about the live moment, but about building a library that works for you around the clock.