Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

4 takeaways from A-LIGN's 2024 Compliance Benchmark Report

A compliance audit shows your customers exactly what measures you have in place to keep their data and assets safe. Given that trust is such a crucial aspect of customer relationships, the quality and efficiency of your compliance audit is more important than ever. ‍ A-LIGN, one of Vanta’s technology-enabled security and compliance partners, recently released its 2024 Compliance Benchmark Report, based on an annual survey of nearly 700 business leaders and compliance professionals.

7 Important Theft Protection Features for a Cryptocurrency Wallet

While you don’t always need a cryptocurrency wallet to trade blockchain assets, using a good wallet to facilitate exchanges is a matter of common sense. Wallets don’t just provide a convenient way to manage your crypto funds, but they also help keep your tokens safe from the malicious parties that are all too commonplace in the world of blockchain currencies.

IoT: Internet of Threats?

The Internet of Things (IoT) has slowly but surely weaved its way into our homes and places of work. From smart homes to industrial control systems, IoT has brought convenience and efficiency to our lives. However, with this increased connectivity we have increased our risk. The IoT Attack Surface IoT devices are often designed with functionality in mind, rather than security. This means that many devices have weak or default passwords, unpatched vulnerabilities, and insecure communication protocols.

Inside Look: How SenseOn's Security Engineering Team Perfects Their Detection Analytics

In the Security Engineering team at SenseOn, we are constantly seeking methods to achieve big goals with minimal input. This is where our focus on automation becomes essential. If you peek inside our team, you’ll find a trove of unique and effective automation tools that aid us on our journey. From small Python scripts to GitHub actions to Slack bots, we have it all.

Transforming Sales Enablement: The New Era of Lab Engine

For years now, 11:11 Lab Engine has helped IT administrators navigate the pressures of our fast-paced, global business environment. With IT departments around the world facing increasing workloads and an array of new technical challenges, Lab Engine has allowed organizations to rapidly deploy and scale virtual environments for everything from testing, quality assurance, and training to marketing events and sales experiences. Indeed, an invaluable tool.

Stargazer Goblin's Fake GitHub Accounts and Malware Distribution Tactics

In a significant development in cybersecurity, the threat actor known as Stargazer Goblin has established a complex network of fake GitHub accounts to facilitate a Distribution-as-a-Service (DaaS) operation. This network, comprising over 3,000 inauthentic accounts, has been actively spreading various information-stealing malware and generating $100,000 in illicit profits over the past year.

CISO Webinar Outlines Trustwave's Journey to Adopting Microsoft E5 Security Offerings

The decision on whether to implement the Microsoft Security offerings available with the Microsoft 365 E5 license certainly involves deep security discussions, but it's also a business decision. In that respect, this process allows security leaders to engage with their CFO and other business leaders to elevate conversations.

What is a SaaS Starter Kit? 5 Things to Consider Before Choosing One

In the fast-paced world of software-as-a-service (SaaS) development, speed and efficiency are crucial. This is where a SaaS Starter Kit comes into play. But what exactly is a SaaS Starter Kit, how does it work, and why do you need one? Let’s delve into these questions and explore five critical factors to consider when selecting the right Starter Kit for your project.

Gemini Exchange Breach Highlights Supply Chain Vulnerabilities

A recent security incident has shaken the cryptocurrency community as Gemini, a prominent US-based crypto exchange, disclosed a supply chain breach that compromised personal and banking information of thousands of customers. This breach underscores the importance of robust digital footprint analysis and brand protection strategies in the ever-evolving landscape of cybersecurity.

CVE-2024-6327: Critical RCE Vulnerability in Progress Telerik Report Server

On July 24, 2024, Progress published a knowledge base article disclosing a critical vulnerability (CVE-2024-6327) impacting Telerik Report Server, a product by Progress designed for streamlined report management within organizations. This vulnerability can lead to remote code execution (RCE) due to the deserialization of untrusted data. Arctic Wolf has not identified a publicly accessible proof of concept (PoC) exploit or active exploitation of this vulnerability. However, most notably.