Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Facebook Malvertising Epidemic - Unraveling a Persistent Threat: SYS01

The Trustwave SpiderLabs Threat Intelligence team's ongoing study into how threat actors use Facebook for malicious activity has uncovered a new version of the SYS01 stealer. This stealer is designed to take over Facebook accounts, steal credential information from affected users' browsers, and then leverage legitimate accounts to further the spread of the malware.

Data Scraping Legal Issues: Exploring hiQ vs LinkedIn Case

The high-profile case of hiQ Labs Inc vs LinkedIn Corporation (that took place in the US) shed light on the much-discussed data scraping legal issues. We know you don’t want to get lost in legalese. So, we have prepared an easy-to-read summary of the most important points of this decision. The court sided with the scraper and established that scraping public data is not a violation of the CFAA (Computer Fraud and Abuse Act).

The Role of Encryption in Protecting LLM Data Pipelines

Encryption is a fundamental procedure in cybersecurity that transforms data into a coded format, making it inaccessible to unauthorized users. It has evolved significantly from simple ciphers in ancient times to complex algorithms like AES (Advanced Encryption Standard) and RSA (Rivest-Shamir-Adleman), which are used today. Encryption ensures data confidentiality, integrity, and authenticity, which is crucial in protecting sensitive information across various domains.

BDRSuite Awarded G2 High Performer and Momentum Leader Badges in Summer 2024

The Summer 2024 G2 Report have been released, and BDRSuite is proud to announce that we received 17 badges! BDRSuite also achieved a remarkable 4.3-star rating on G2. This exceptional rating reflects the satisfaction of our users across various categories, including ease of use, quality of support, ease of admin, and setup.

From simulation to success: the impact of fuzzing in software-in-the-loop testing

Software-in-the-loop (SiL) testing is a pivotal method in the software development lifecycle, especially for embedded systems and critical applications. By simulating real-world conditions and integrating software components within a controlled virtual environment, SiL allows for the early detection of bugs, ensuring higher code quality and reliability. Read on to learn how to introduce SiL testing in your project.

Cloud Threats Memo: CloudSorcerer, a Recently Discovered APT, is Exploiting Multiple Legitimate Cloud Services

A recently discovered advanced persistent threat (APT) provides a particularly meaningful example of how multiple cloud services can be combined inside the same attack chain to add layers of sophistication and evasion. CloudSorcerer is the name that researchers at Kaspersky have coined to describe an advanced threat actor targeting Russian government entities.

FDA's cybersecurity requirements for medical devices and when to comply with them

The United States Food and Drug Administration (FDA) is a federal agency within the Department of Health and Human Services. The FDA is responsible for protecting and promoting public health through the control and supervision of medications, vaccines, biopharmaceuticals, medical devices, and other types of products. To ensure the safety and security of medical devices, the FDA supports a variety of standards and guidelines that medical device manufacturers are highly recommended to follow.

How to secure an S3 bucket on AWS?

Amazon Web Services (AWS) Simple Storage Service (S3) has become a cornerstone in the world of cloud storage. It offers scalability, high availability, and performance, making it a go-to choice for businesses of all sizes. However, as with any cloud service, security is paramount. This is where the question of "how to secure an S3 bucket" comes into play. Securing your S3 buckets is not just about protecting your data from unauthorized access.

Web Scraping for SEO: Don't Waste Money on Expensive Tools

Of course, everyone wants to dominate the SERPs. It’s a no-brainer! Want to know one of my favorite ways to achieve better rankings? Yup, web scraping! Web scraping is particularly useful for SEO; not only is it very cheap, but it allows you to access hyper-specific data that sometimes is not even visible through SEMRush’s or Ahrefs’ databases. Keep in mind anyone can disallow these two bots (and any bot actually) via their robots.txt.