Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

The Long Tail of the Supply Chain: Leveraging Exposure Management to Mitigate Risk from Current or Former Vendors

Every organization must prioritize the security of its systems and the protection of its customers’ sensitive information, but exposure doesn’t only happen through applications your own team develops and controls. Incidents like the recent exposure of customer data by Juniper Networks serve as stark reminders of the challenges and risks associated with managing the exposure of software, hardware, and services that you use.
Featured Post

How Telecommunications Providers Can Best Tackle DDoS Attacks

The UK's 2023 National Risk Register, published by the government in the summer, highlights the increasing cyberthreat posed to telecommunications providers who are a vital part of the communications critical national infrastructure (CNI) sector. The report lays out the volatile landscape these providers operate in and the government's acknowledgement of the seriousness of cyber threats to telecommunications infrastructure. It also details the difficulty in implementing the Telecommunications (Security) Act 2021, which establishes guidelines for telcos to follow.

Legal Takedowns vs. Cyber Takedowns: What to Use When

Imagine you’ve just discovered that threat actors have registered a lookalike domain and are using it to host content that impersonates your business. It’s a safe bet that your customers will soon begin falling for the ruse and handing over personal information to the threat actors, if they’re not already. Faced with this threat, how can you protect your business’s reputation and brand? There are two main options.

A Guide to the 2 Main Types of Retail & E-Commerce Fraud

The first step in combating retail fraud is learning which forms it takes. That’s easy enough, because there are two main types of retail and eCommerce fraud today: The second step in stopping retail fraud from harming your business is to understand how each type of fraud works, then implement a strategy to protect against it.

What is Offensive Cyber Security?

Offensive Security is a proactive approach to cyber security that focuses on actively seeking out and identifying security vulnerabilities and potential attack vectors before they can be exploited by malicious actors. This involves using techniques such as penetration testing, red teaming, social engineering, and exploit development to simulate real-world attacks and assess the strength of an organization's security measures.

Cross-site scripting attacks in action and how to protect against them

Cross-Site Scripting (XSS) attacks pose a significant security threat by infiltrating an application’s input fields with malicious code snippets. When users access the affected pages, this code is executed in their browsers, putting their sensitive information at risk. The malicious content injected into the web browser can take various forms, including JavaScript, HTML, Flash, or any other executable code.

Bringing the Light into the Dark Places: Invisible Threats, Visible Solutions

What is the biggest cybersecurity challenge facing companies worldwide? The answer may vary depending on who you ask, but one indisputable fact remains clear: “What you can’t see, can and will hurt you.” Cyber threats lurk in the depths of the digital world, constantly evolving, poised to strike unsuspecting victims. They often strike by compromising unseen connected devices which, experience has proven, represent up to 50% of all devices on a network.*

Insights from the NSA 2023 Cybersecurity Report

The digital landscape is ever-changing, causing cybersecurity to often feel like a moving target. Thankfully, the NSA 2023 Cybersecurity Report arrives to provide critical information and context to help organizations keep their peace of mind. This comprehensive report, drawing insights from a wide range of industries, delves into the pressing technological trends, emerging challenges, and the growing importance of sustainability in the tech sector.