On Friday, April 12, 2024, Palo Alto Networks PAN-OS was found to have an OS command injection vulnerability (CVE-2024-3400). Due to its severity, CISA added it to its Known Exploited Vulnerabilities Catalog. Shortly after disclosure, a PoC was published.

The Windows event log serves as a comprehensive and time-sequenced documentation of system, security, and application notifications. It’s maintained by the Windows operating system and utilized by network administrators for troubleshooting system issues and anticipating future challenges. This systematic recording of various system and application activities in event logs provide a chronological record of events that occur on the system, offering invaluable insights into its operation and health.

31% of executives cite improper risk identification as their organizations’ top cybersecurity challenge. Reacting only to attacks leads to an average 118-day breach detection time, which can significantly impact business. Staying informed about cybersecurity risks is crucial. OWASP offers a list of common threats for testers, but some find them insufficient due to its crowdsourced nature.

A necessary step in securing an application is evaluating the supply chain of each component used to create the application—no matter how many hands were involved in its development. If any links in the supply chain are obscured, it can be difficult to confidently assess the amount of risk that an application is susceptible to.

Security teams spend an average of 130 hours per week monitoring and tracking threats. 43% of cyber attacks are aimed at small businesses, while only 14% are prepared to defend themselves. Companies with more than 10,000 employees have the most critical-severity vulnerabilities. A vulnerability is an exploitable gap in your application's security. As your threat landscape increases, the attack surface and the number of vulnerabilities might also increase.

Cyber crime rose by more than 20% in 2023, and a data breach could cost your company millions of dollars in damages. Today’s organizations need a comprehensive enterprise data protection strategy to ensure the integrity, availability, and confidentiality of sensitive data and prevent data breaches before they occur. In this guide, we'll cover the many facets of enterprise data protection and discuss best practices that can keep your business safe. ‍

Insider risk management targets threats from the very heart of an organization—its people. Whether intentional or accidental, actions by insiders like employees, contractors, or partners can lead to severe financial and reputational damage. And as high-profile incidents of corporate sabotage and intellectual property theft by insiders continue to make headlines, businesses can no longer afford to be complacent.