Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Going beyond the standard: Announcing the State of Trust Report 2024 and VantaCon agenda

Building and scaling trust has become more difficult for organizations of all sizes. With more reliance on third-party vendors and AI technologies, security leaders face an increasingly complex threat landscape. However, many teams are left to manage this complicated landscape with screenshots, spreadsheets, and legacy solutions that rely on manual updates and limit them to point-in-time visibility into their security posture.

Vulnerability-Free C and C++ Development in Automotive Manufacturing and Software Defined Vehicles (SDV)

The automotive industry is at a unique inflection point in its history with the advent of the Software Defined Vehicle (SDV). During the Society of Automotive Engineers (SAE) World Congress held in Detroit April 16th - 18th, 2024, it was explicitly stated there is more than a $500 billion market that will see investment in R&D and technological advancements for the automotive industry.

Beyond the Code: Why API Security Matters More Than Ever in Tech

API security has become a critical focus for organizations in the technology sector as the reliance on APIs (Application Programming Interfaces) continues to grow rapidly. APIs are the foundation of modern applications, facilitating communication between software systems, integrating services, and driving innovation. However, as the use of APIs expands, so do the associated security risks.

LLM Prompt Injection 101

Prompt injection attacks exploit vulnerabilities in natural language processing (NLP) models by manipulating the input to influence the model’s behavior. Common prompt injection attack patterns include: 1. Direct Command Injection: Crafting inputs that directly give the model a command, attempting to hijack the intended instruction. 2. Instruction Reversal: Adding instructions that tell the model to ignore or reverse previous commands. 3.

How to Protect Your IoT and OT Devices from Cyberthreats

The rise of the Internet of Things (IoT) and Operational Technology (OT) devices is reshaping industries, accelerating innovation and driving new efficiencies. However, as organizations increasingly depend on these devices, the security challenges associated with them are mounting. Traditional security measures often fall short in protecting these critical assets from cyberthreats, leaving organizations vulnerable to potentially severe disruptions.

External IP Addresses to Include in Pentest: Best Practices for Security Testing

Carrying out a pentest correctly is important for finding and fixing security holes in a company. Including useful external IP addresses is an important part of pentesting. Hackers can get into a company's network and possibly take advantage of vulnerabilities by using these addresses as entry points. Companies can make sure their pentests are thorough and useful by carefully choosing and ranking which external IP addresses to test.

Compliance Cheat Sheet: GDPR vs. CPRA vs. HIPAA vs. SOC

Those who work up close and personal with security compliance standards can always use another tool in their tool belt. So we won’t waste your time. Using this cheat sheet, you can quickly explore the ever-changing requirements and penalties for some of the most significant regulatory compliance standards across the globe. It’s difficult to keep up while meeting data compliance standards, which is why it’s crucial to have a resource for your efforts.

Training a million models per day to save customers of all sizes from DDoS attacks

Our always-on DDoS protection runs inside every server across our global network. It constantly analyzes incoming traffic, looking for signals associated with previously identified DDoS attacks. We dynamically create fingerprints to flag malicious traffic, which is dropped when detected in high enough volume — so it never reaches its destination — keeping customer websites online. In many cases, flagging bad traffic can be straightforward.

Fueling the SOC of the Future with Built-in Threat Research and Detections in Splunk Enterprise Security

The cybersecurity threat landscape is ever-changing and evolving, with bad actors implementing increasingly sophisticated strategies to evade detection. However, many security teams struggle to adapt their detection strategies at the same pace. Supporting advanced threat detection requires organizations to invest in consistent threat research and detection engineering. Without that, they cannot develop the high-quality detections needed to target the latest threats.