Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Mapping the MITRE ATT&CK Framework to API Security

API attacks include many of the tactics, techniques, and procedures (TTPs) identified in the MITRE ATT&CK framework. This white paper analyzes and maps three common API attack scenarios to the TTPs found in the MITRE Enterprise Matrix. By understanding how the MITRE ATT&CK TTPs relate to API security threats, security leaders can: Download now to learn how to defend against API attacks by leveraging this well-known security framework.

The Top 10 Critical Pentest Findings in 2022

We live in a world where nearly everything can connect to the internet. While this is one of the greatest times in technology, it also brings an overwhelming amount of cybersecurity threats and challenges. CISOs and IT teams are pushed to the limits of being able to adequately and quickly protect their customers from emerging cyber threats. Cybercrime continues to increase by 15% year over year; costing the U.S. 6.9 billion just in 2021. By 2025 cybercrime will cost the entire world 10.5 trillion annually.

Top 10 Cyber Security Best Practices for SMBs

This white paper provides valuable information for small and medium-sized businesses (SMBs) as it relates to implementing security best practices as well as achieving compliance requirements. SMBs can use the information provided in the white paper to develop a roadmap to a mature information security program.

Importance of Insurance-Validated Risk Models to Quantify Cyber Risk

By its nature, cyber risk is dynamic. New events happen and evolve all the time, making it difficult for enterprises to financially quantify their financial exposure to cyber attacks. Around two years ago, for example, distributed denial-of-service (DDoS) attacks were making headlines, and now ransomware has come into heightened focus. It's reasonable to believe that other types of attacks will emerge in another two years and continue to change thereafter.

2022 seems to be on target for the lowest year of reported breaches by large US corporations

The number of data breaches reported in the first 6 months of 2022 has put this year on track to be the lowest year of reports in the last 5 years for large US corporations. By looking at the rate at which data breach events have been reported so far this year, we predict that the number of events reported is expected to be 15-20% of the number of breaches reported in 2021