Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

The Types of Online Scams

Some of the different types of online scams you need to look out for are phishing scams, catfishing, job offer scams and online shopping scams. These online scams try to trick you into giving up your personal information, which scammers will use for malicious purposes. You need to learn how to recognize the different types of online scams to avoid falling for them.

Users Fall for Smishing Attacks 6-10 Times More Than Email-Based Attacks

With organizations heavily focusing on protecting the corporate endpoint, cybercriminals are switching focus onto mobile devices where users are more prone to fall for their social engineering tactics. We consume so much content from people you don’t personally know that it’s not part of your everyday process to stop and be critical of what’s being presented to you. And that’s exactly what cybercriminals are taking advantage of.

Who Knew Neanderthals were so High-Tech?

Researchers at ESET describe various types of scams launched by users of Telekopye, a telegram bot that assists in crafting social engineering attacks. The scammers call their victims “mammoths,” so ESET has dubbed the scammers “Neanderthals.” The first type of scam is simply financial data theft via phishing sites.

My Top 7 Cybersecurity Reflections for 2024

The digital landscape is evolving at an exponential rate, and with it, the cybersecurity challenges we face. As we approach 2024, I've reflected on the insights gleaned from recent discussions I was privileged to partake in, such as the World Economic Forum's annual cybersecurity conference, ThreatCon and conversations with industry leaders, academics, and government representatives. Here are my top seven takeaways for 2024.

Mastering NIST Penetration Testing: Your Essential Guide to Robust Cybersecurity

Securing your organization’s information systems is a top priority in the ever-evolving digital landscape. Organizations face an ongoing battle against cyber threats; penetration testing is a powerful weapon to avoid these risks. The National Institute of Standards and Technology (NIST) Penetration Testing Framework, known as “nist pen testing,” offers a robust and structured approach to assessing and enhancing cybersecurity defences.

ATO Process: What is an Authority to Operate in Cybersecurity?

When a business works with the general public, there’s a certain level of risk inherent in the process. We see it time and time again, with companies subject to data breaches and the loss of public information, like what happened to Target in 2013, Equifax in 2017, 23andMe in 2023, and many, many more. While there are security standards in place for private corporations, enforcement is slim, and violations tend to be retroactively applied.

Zero Trust and (Why It Isn't Always About) Identity

What is the relationship between zero trust and user identity? There’s no doubt that identity is a fundamental component of an effective zero trust approach, but there is also a danger that organisations become so overly focused on this one element, they forget there are others. To believe that achieving zero trust is all about user identity is, I believe, a fundamental misunderstanding of the concept.

Cyber Regulations in the EU: 5 Proven Strategies for Compliance

The emergence of cyber risk regulations like DORA, NIS2, and PS21/3 signals an imperative need for resilience. In a world where digital disruptions can cripple nations and economies, the industry needed a shift from reactive defence to proactive fortification. CISOs that demonstrate strong cybersecurity leadership, aligning with broader business objectives and proving a positive impact on the organization's bottom line, are better positioned to build trust with stakeholders and minimize cyber risks.