Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

With the publication of its Final Rule on October 11, the CMMC program is real. CMMC will begin appearing in contracts early next year. If you've been skeptical or waiting on the sidelines, the ambiguity is gone. You need to be focused on understanding and addressing CMMC now. The CMMC rule itself is long and confusing, over 470 pages and 130,000 words of acronyms and contract language. We will break down the rule, translate it into plain English, and explain the requirements and how your business will be affected. We'll cover the key points including.

Welcome to Episode One of Salt Security’s New Series: Founder’s Corner This series will share insights and conversations from founders on markets, technology, trends, and other interesting topics of the day. Starting off the series with Salt’s Co-Founders, Roey Eliyahu and Michael Nicosia, as they talk about how they became founders, what inspired them to start Salt Security, where the name came from, and the future of API Security.

Industry data says 50% of cyber attacks are from external sources that bypassed your defenses. How do you respond? EDR is a great start. Then what? What is the cost of downtime in your business? How long do you wait on data during an incident? Find out in this episode why Tanium is the best platform for incident response in the industry.

In this episode of Razorwire, we're joined by Jack Jones, creator of the FAIR risk model, to explore the complexities of Governance, Risk and Compliance (GRC) tools. We cut through the noise to deliver actionable insights on how to truly manage risk and improve the value and efficiency of your GRC solutions.

Jack Jones explains how GRC tools are often more focused on compliance than true risk management. Discover why most tools miss the mark when it comes to managing the frequency and impact of loss events.​

In this video, we explore a real-world example of a GraphQL exploit that exposed 30 million user accounts to attackers. Learn how vulnerabilities in GraphQL led to access token generation and account takeovers, and what this means for API security.

Watch the full video for more...

Like all technology companies, protecting itself against cybercrime is a top priority for Synopsys. Discover how this maker of electronic design automation tools needed a better way to manage its fleet of 23,000 endpoints.

Learn how to integrate Jit with GitHub to start scanning your codebase for security vulnerabilities, while implementing continuous scanning for newly introduced vulnerabilities.

In this insightful episode, Stuart Seymour, Group CISO and CSO at Virgin Media O2, joins Andrew Ash (CISO, Netacea) to discuss how his experience as a British Army Captain shaped his unique leadership style in cybersecurity. Stuart also shares his passion for building diverse, neurodiverse teams, drawing from his own experience with dyslexia. He dives into the growing importance of AI in SOCs and the complex challenges of navigating global cybersecurity regulations. A must-listen for anyone looking to understand the evolving role of a CISO in today's landscape.