Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Ransomware Inc: Decoding the RaaS Business Model

When you hear the word “ransomware,” many people think of a lone hacker launching a complex cyberattack. However, ransomware attacks that paralyze businesses worldwide have evolved into the product of a highly organized, industrialized criminal ecosystem. Their secret weapon? Ransomware-as-a-Service, or RaaS.

Introducing The Human Threat Map: A Tool for Mapping and Defending the Human Perimeter

The cyber security perimeter has evolved many times over the years, and we’re now at a point in time where it is shifted once again. We have reached an era where defence is no longer just about protecting our networks, endpoints, cloud systems or SaaS applications, but about protecting our people. Attackers now target employees directly, relying on their ability to exploit human behaviour to gain access, rather than technical vulnerabilities.

Bridging the Cyber Gap: Why Collective Resilience Starts with Empowering SMEs

Raising the bar for cybersecurity can’t happen in silos. Resilience comes from shared knowledge, mutual support, and proactive partnerships — between public and private sectors, large enterprises and small businesses, academia and industry. In this respect, joining the SOC4SME program to offer free services is not just a gesture — we’re doing it because we believe cybersecurity is a shared responsibility.

5 Ways Cyber Threat Intelligence Boosts Cyber Risk Prioritization

As cyber risk leaders are called to balance the responsibility of managing risk in the face of both broader attack surfaces and increased regulatory and budgetary scrutiny, prioritization of work is everything. Cybersecurity resources are finite, while the vulnerabilities and threats just keep growing. The best way for modern security programs to keep up is by directing resources to the risks that matter most to their specific organizations.

Kovrr Launches Industry's First CRQ-Powered Cyber Risk Register

Today, Kovrr, the leading global provider of on-demand cyber risk quantification (CRQ) solutions, announced the launch of its CRQ-powered cyber risk register, a first-of-its-kind SaaS-based tool designed to provide security and risk managers (SRMs) with quantified insights that enhance cyber governance, risk, and compliance (GRC) initiatives.

What's new in Riscosity: April 2025

Here at Riscosity, our team is keenly aware of the ongoing rise of AI adoption that is taking the world by the storm. As a company whose mission is to help organizations gain control over their 3rd party data flows, it is only logical that our capabilities support AI as well. What better time than RSA to announce the latest AI-related innovation that Riscosity has released!

Modernizing Cyber Risk Registers: From Spreadsheets to SaaS Solutions

‍In the early days of cyber risk management, during which the responsibilities of a security and risk manager (SRM) were relatively siloed and limited in scope, leveraging a spreadsheet to maintain a cybersecurity risk register was a practical and widely accepted solution. At that time, the volume and complexity of cyber risks were much more manageable than they are today, making spreadsheets a convenient way to catalog them, prioritize mitigation activities, and track progress.

Setting the Standard for AI Compliance: Vanta introduces AI Security Assessment

New offering helps organizations easily evaluate vendor AI's risk. Vanta becomes first trust management platform to achieve ISO 42001. Debuting new AI achievements and resources at booth #2127 at RSA Conference April 28 - May 1.

The Shadow AI Data Leak Problem No One's Talking About

Is your team's favorite new productivity tool also your biggest data leak waiting to happen? Generative AI (GenAI) assistants like ChatGPT, Microsoft Copilot, and Google Gemini have quickly moved from novelty to necessity in many workplaces. These tools use machine learning and advanced algorithms to help employees draft content, analyze data, and even write code faster than ever before.