Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

FedRAMP ATO, P-ATO & Certification: What's the Difference?

FedRAMP JAB ATO, P-ATO, and Certification can be a tricky set of requirements to navigate, and the confusion starts early. For example, what are any of those terms, and what do they mean? While some of you already know, everyone has to learn somewhere, so let’s go through and define them, what they mean, and what you need to do to adhere to them. Beyond that, we’ll help you navigate the process and find the best way to get the accreditation status you need.

Nightfall Launches Cloud DLP for Microsoft Teams

San Francisco, CA, November 2, 2023—Nightfall AI, the leader in cloud data leak prevention (cloud DLP), announced the launch of the industry’s only AI-native DLP solution for popular communication app Microsoft Teams. Microsoft Teams continues to grow as a top enterprise collaboration tool, with over 300 million monthly active users reported in Q3 of 2023. As the dominant communication app in highly regulated industries (e.g.

Unlocking the Secrets of GDPR Data Mapping: A Comprehensive Guide

Imagine a world where you confidently navigate the complexities of General Data Protection Regulation (GDPR) compliance, streamline data processes, and safeguard sensitive information. Sounds enticing, right? The key lies in unlocking the secrets of GDPR data mapping. Let’s explore the ins and outs of this powerful process and learn how to harness its full potential for your organization.

Enhance your cloud security with MITRE ATT&CK and Sumo Logic Cloud SIEM

As cloud applications and services gain prominence amongst organizations, adversaries are evolving their toolset to target these cloud networks. The surge in remote work and teleconferencing presents unprecedented opportunities for nefarious activities. Enter the MITRE ATT&CK Framework, also known as a MITRE ATT&CK Matrix—a treasure trove for defending cloud infrastructure and on-premises infrastructure against the newest adversary tactics, techniques, and procedures (TTPs).

Okta evolving situation: Am I impacted?

Cybersecurity is never boring. In recent months, we’ve seen major cyberattacks on Las Vegas casinos and expanded SEC cybersecurity disclosure rules are top of mind. Is it any wonder we consistently recommend taking a proactive approach to secure your environment with a defense-in-depth strategy and appropriate monitoring? News outlets reported the recent compromise at the Identity and Authentication (IAM) firm, Okta.

Private Status Page: A Comprehensive Guide

Private status pages are very special websites used to maintain transparent communication between the company's employees and other stakeholders. It's mostly used for important performance updates but also for disruption and downtime notifications (and every other problem that should be addressed on short notice). The purpose of any private status page is to encourage communication and support to those who have access to it, providing updates on issue status and incident management.

The new standard of Kubernetes misconfiguration remediation

According to research done by ARMO, 100% of Kubernetes clusters that were tested contained at least one misconfiguration, while 65% had at least one high-severity misconfiguration. 50% of clusters had 14 or more failed security controls. According to Redhat research from 2023, 45% of respondents experienced security incidents or issues related to containers and/or Kubernetes due to misconfigurations.

3 Things You Need to Know About the Okta Breach

In a recent security breach, a threat actor with stolen credentials was able to access Okta’s support case management system. That support case management system contained several HAR files, or HTTP Archive files, in support tickets. A HAR file is a JSON-based file format that records and stores detailed information about the interactions between a web browser and a website.

Introducing Cyber Essentials and Essential Eight: Putting customers first globally

Just a little over a year ago, Vanta went global with the opening of a European headquarters in Dublin as well as an office in Sydney. And over the past several quarters, we’ve accelerated international momentum by scaling investments across the product and business, from opening our EU data centre to rolling out localised product capabilities, in-region technical support, and more.