Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Operational Technology Penetration Testing & The Importance of OG86

In the realm of industry and infrastructure, Operational Technology (OT) refers to hardware and software systems designed to monitor and control physical devices. OT is a cornerstone in managing and automating essential services in a variety of sectors including utilities, manufacturing, and transportation. Key elements of OT include Industrial Control Systems (ICS) and Industrial Automation, which support critical infrastructure operations.

ThreatQuotient: A Leader in Quadrant Knowledge Solution's SPARK Matrix for Digital Threat Intelligence Management

Quadrant Knowledge Solution’s SPARK MatrixTM is a research service that includes a detailed analysis of global Digital Threat Intelligence Management solution market dynamics, major trends, vendor landscape, and competitive positioning analysis. The study provides competition analysis and ranking of the leading Digital Threat Intelligence Management vendors in the form of SPARK MatrixTM. In the ever-evolving landscape of cybersecurity, staying ahead of potential threats is a constant challenge.

Reverse engineering eBPF programs

eBPF is one of the most widely used technologies in today’s computing ecosystem, starting from the cloud sector up to routing and tracing in companies like Cloudflare. Many companies are basing and transforming their core products to use eBPF as an alternative to kernel modules because of all the benefits it offers both on the business side and technological side. Since this shift is gaining a lot of momentum I wanted to shed some light on eBPF.

CIS Microsoft Windows Server 2022 Benchmark v1.0.0

In February 2022, the Center for Internet Security (CIS) released the Microsoft Windows Server 2022 Benchmark v1.0.0, which includes over 50 new features, Group Policy Objects (GPOs), capabilities, and services. The document compares Server 2019 and Server 2022 for their similarities and differences, as well as Windows 11 and Windows 10.

Why the DORA Regulation Matters Beyond the EU

The Digital Operational Resilience Act (DORA) is a robust cybersecurity regulation in the European Union (EU) taking effect next year. It is designed to help protect against evolving digital threats to financial systems. Like GDPR, the scope of DORA isn’t only limited to financial services companies and banks. Service providers in Information, Communications and Technology (ICT) and third-party vendors are also on the hook. If you haven’t been preparing, the time to be is now.

Identity Security: The Keystone of Trust

A few weeks ago, my wife asked me why stopping threat actors from impacting our lives is so difficult. In this digital age, the necessity to connect online brings inherent exposure to vulnerabilities. The challenge for you as a security leader lies in reducing the sense of vulnerability by building trust. You need to protect your organization and reassure employees so they can perform their jobs without fear.

EP 55 - AI Insights: Shaping the Future of IAM

In this episode of Trust Issues, Daniel Schwartzer, CyberArk’s Chief Product Technologist and leader of the company’s Artificial Intelligence (AI) Center of Excellence, joins host David Puner for a conversation that explores AI’s transformative impact on identity and access management (IAM). Schwartzer discusses how CyberArk’s AI Center of Excellence is equipping the R&D team to innovate continuously and stay ahead of AI-enabled threats.

Winner of the 2024 IoT HealthTech Innovation Award

IoThinkTank is proud to announce Device Authority as the 2024 IoT HealthTech Innovation Award winner for their groundbreaking KeyScaler-as-a-Service (KSaaS) solution. This accolade recognizes exceptional advancements in IoT technologies that significantly improve patient care and data security in the HealthTech sector.

Finding and fixing exposed hardcoded secrets in your GitHub project with Snyk

Snyk is an excellent tool for spotting project vulnerabilities, including hardcoded secrets. In this blog, we'll show how you can use Snyk to locate hardcoded secrets and credentials and then refactor our code to use Doppler to store those secrets instead. We'll use the open source Snyk goof project as a reference Node.js boilerplate application, so feel free to follow along with us.