Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How Feroot Helps Security Teams Meet NIST SP 800-53 Controls for Web Application Protection

NIST Special Publication 800-53 is a cybersecurity and privacy framework developed by the National Institute of Standards and Technology (NIST). It provides a standardized set of security controls for federal information systems, covering everything from access control and incident response to system monitoring and supply chain risk management.

Everything you need to know about NIST's new guidance in "SP 1800-35: Implementing a Zero Trust Architecture"

For decades, the United States National Institute of Standards and Technology (NIST) has been guiding industry efforts through the many publications in its Computer Security Resource Center. NIST has played an especially important role in the adoption of Zero Trust architecture, through its series of publications that began with NIST SP 800-207: Zero Trust Architecture, released in 2020.

Addressing API Security with NIST SP 800-228

According to the Wallarm Q1 2025 ThreatStats report, 70% of all application attacks target APIs. The industry can no longer treat API security as a sidenote; it’s time to treat it as the main event. NIST seems to be on board with this view, releasing the initial public draft of NIST SP 800-228, a set of recommendations for securing APIs.

NIST CSF 2.0: What you need to know by Jason Taylor

Join Jeson Taylor, Senior Cybersecurity Program Analyst, as he breaks down the key updates in NIST CSF 2.0 in this informative webinar. Gain valuable insights into what’s changed from NIST CSF 1.1 to 2.0, and what organizations need to know to stay aligned with the latest cybersecurity framework. This is the recording of our live webinar—perfect for anyone looking to understand the evolution of NIST CSF and how it impacts security programs moving forward.

NIST's Responsibilities Under the January 2025 Executive Order

While NIST frameworks are typically not mandatory for most organizations, they are still being called on to do some heavy lifting to bolster the nation’s cybersecurity defenses. Under the January 2025 Executive Order (EO) on Strengthening and Promoting Innovation in the Nation’s Cybersecurity, the National Institute of Standards and Technology (NIST) was charged, along with several other agencies, with the following tasks.

Addressing API Security with NIST SP 800-228

APIs are quickly becoming the primary attack surface targeted by cyber criminals. The rise of generative AI systems, which run on APIs, has driven a dramatic increase in the number of APIs in use. How can you ensure your existing APIs and growing AI deployments remain secure, compliant, and resilient? NIST has now released an initial public draft of SP 800-228: Guidelines for API Protection for Cloud-Native Systems.

Who Must Comply with NIST? A Compliance Guide

National Institute of Standards and Technology (NIST)—is a U.S. federal agency that develops and promotes measurement standards, including some of the most widely used cybersecurity frameworks in the world. While originally designed to strengthen the security posture of federal systems, NIST guidelines are now used across industries as a benchmark for best practices in information security, risk management, and compliance.

"Toward Automating IoT Security": Why It Matters and How KeyScaler Is Leading the Way

The global Internet of Things (IoT) ecosystem is growing at an unprecedented rate. It’s estimated that by 2030, there will be over 75 billion connected devices worldwide, up from approximately 12 billion in 2020. This massive growth presents significant opportunities, but it also exposes critical vulnerabilities, particularly when it comes to securing these devices.

Step-by-step Guide To Meeting NIST Compliance Requirements In 2025

Organizations across the board need to establish comprehensive data protection standards. The cybersecurity hurdles become more intense because threats in the realm continue to evolve. Organizations now place NIST compliance at the top of their operational priorities for 2025. Businesses encounter different threats, including vulnerable supply chains, AI-powered security breaches, and more.