Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

The Value of Cyber Risk Quantification Models Vs. CRQ Frameworks

From the individual to the global level, managing risk is a part of life. While in some contexts, poor risk planning merely results in minor, inconsequential outcomes, in others, such negligence can be catastrophic. Take the July 2024 CrowdStrike incident, for instance, during which a faulty software update put global airlines out of commission, took broadcasters off the air, and cost the market upward of $5 billion in uninsured losses.

EP 61 - Put Your Name on It: Identity Verification and Fighting Fraud

Aaron Painter, CEO of NameTag, joins host David Puner for a conversation that covers several key themes, including the inadequacies of current identity verification methods, the rise of deep fakes and AI-generated fraud – and the importance of preventing identity fraud rather than merely detecting it. Aaron discusses the role of advanced technologies like cryptography, biometrics and AI in improving identity verification.

How Attackers Are Bypassing PowerShell Protections

PowerShell is one of the most popular platforms for malicious actors. To protect your critical data and systems, it’s vital to implement strategies for blocking and detecting attacks that exploit PowerShell. However, you should not assume those security measures are airtight — adversaries are constantly looking for ways to bypass your defenses. Let’s explore three of those techniques, so you can build an even more robust strategy for defending your data and your business.

Losses From Investment Scams have Increased Six-Fold Since 2021

The Better Business Bureau (BBB) has observed a six-fold increase in losses from investment scams over the past three years. The BBB has received more than 4,000 reports of investment scams since 2020, with the median reported loss rising from $1,000 in 2021 to almost $6,000 in 2024.

Insider Threats: The Hidden Enemy Within Financial Services

Financial services organizations already face a dizzying array of external threats, but just as dangerous and often harder to spot are the threats posed by people inside their firm, according to the Trustwave SpiderLabs' Financial Services Deep Dive: Insider Threat. The report noted that insider threat attacks have become more common over the past year, with 40% of organizations reporting more frequent insider threat attacks compared to previous years.

5 Recent Examples of Fake Websites

What do bank account takeovers, credit card scams, purchase of counterfeit goods, and frequent flier mile theft, all have in common? All these cyber crimes usually begin with a user visiting a fake website. In the first quarter of 2024, over 963,000 unique phishing sites were detected worldwide. Phishing sites are just one category of fake websites that mimic legitimate sites to steal information. The overall scope of fake websites is likely much broader.

The Evolution of NDR: From IDS to Advanced Threat Detection

It is always important to be one step ahead of cyber attackers. The tools and methods used to protect computer networks need to keep improving to match the growing cyber threats. One big change in this area is moving from old-fashioned Intrusion Detection Systems (IDS) to newer Network Detection and Response (NDR) solutions. This blog will look at how IDS has changed into NDR, emphasizing their main differences and the better features NDR offers.

Was Your SSN Found on the Dark Web? Here's What To Do.

You may be concerned if your Social Security number (SSN) was found on the dark web following the recent breach that, according to CNBC, exposed almost three billion SSNs. National Public Data, a company that conducts background checks, suffered a data breach involving SSNs, email addresses, phone numbers and home addresses. If your SSN was found on the dark web, you are most likely concerned about your identity being stolen.