Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

Is Slack using your data to train their AI models? Here's what you need to know.

AI is everywhere—but how can you be sure that your data isn’t being used to train the AI models that power your favorite SaaS apps like Slack? This topic reached a fever pitch on Hacker News last week, when a flurry of Slack users vented their frustrations about the messaging app’s obtuse privacy policy. The main issue?

TruffleHog vs. Gitleaks: A Detailed Comparison of Secret Scanning Tools

TruffleHog and Gitleaks are popular secrets scanning tools that can automatically surface hardcoded secrets such as API keys, passwords, and tokens. They can both be integrated into the Software Development Lifecycle (SDLC) to proactively scan repositories to identify and rectify potential issues before they can be exploited. The need for effective secret detection tools underscores a broader shift toward more secure software development practices.

Automate Non-Human Identity Security and Management with Torq and Astrix

Organizations’ zero-trust policies and identity-centric programs ensure that user identities and login credentials are vigorously protected with IAM policies and security tools like MFA or IP restrictions. However, the situation is very different regarding non-human identities (NHI) like API keys, OAuth apps, service accounts, and secrets. Lack of visibility, monitoring, and governance of this permissive access is everywhere, and attackers have figured it out.

The UK's Cybersecurity: Where Is it and Where Is it Going?

In early April this year, the UK's Department for Science, Innovation and Technology (DSIT) released its Cybersecurity Breaches Survey 2024. It provides a comprehensive overview of the UK's cybersecurity landscape, exploring the different cyberattacks and cybercrimes businesses, charities, and private sector educational instructions face, the impacts on these organizations, and how they respond. The report is a valuable resource for the cybersecurity community.

Learning from cloud transformation as we move to AI

Development teams of all sizes are embracing the excitement and possibility of using AI tools to build software. Coding assistants like Google Gemini and Github Copilot have the potential to accelerate development like never before, and developers are adopting these tools — whether or not leadership has officially approved them. As your team considers the best ways to adopt this new technology, this transition might feel like déjà vu.

Top 10 FFXIV Items to Have In Your Inventory: Gear, Mounts, and Weapons

The world of Final Fantasy XIV (FFXIV) is vast and filled with an endless array of items to collect, from powerful gear and weapons to unique mounts, minions, and more. As you start on with your adventures across Eorzea and beyond, effective inventory management becomes crucial. Having the right items at the right time can make all the difference in your journey. In this article, we'll go through the 10 must-have items that every FFXIV player should strive for. Let's begin.

How to Spot and Avoid the Most Common Online Scams

In 2024, online scams continue to run rampant, with cybercriminals constantly adapting their tactics to exploit unsuspecting victims. From phishing emails and fake websites to social media fraud and pop-up scams, the digital landscape is fraught with potential pitfalls. While scammers are always developing new schemes, many of these online traps share common red flags that savvy internet users can learn to spot.

The Cyber Security Risks of The Remote Work Revolution

The COVID-19 pandemic kickstarted a seismic shift in how we work, transforming remote work from a niche arrangement to a mainstream necessity. While this shift has unlocked numerous benefits such as increased flexibility, reduced commute times, and enhanced work-life balance, it has also exposed organisations to a new array of cyber security risks. Cyber attacks were expected to have cost the world $8 trillion USD in 2023, with that number expected to rise to $9.5 trillion in 2024 and $10.5 trillion in 2025.

Dissecting a Multi-stage Phishing Attack.

Phishing is one of the most common forms of cyber attack that organizations face nowadays. A 2024 risk report states that 94% of organizations fall victim to phishing attacks, and 96% are negatively impacted by them. However, phishing attacks are not only growing in number but are also more sophisticated and successful. This is owing to the modern multi-stage phishing attack, which is common nowadays.

What are Solar Panel Scams?

The sun produces enough energy every 90 minutes to power the world for a year. Despite this, in 2020, only around 0.2% of solar’s potential power production was utilized. Many organizations and nations have planned to move toward solar power. Still, consumers must have individual wealth, knowledge to vet potential installation companies, and wisdom to recognize and avoid potential traps.