Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why You Should Stick With Answering Service Instead of AI Answering

Communication is essential in today's fast-paced corporate environment. To keep customers satisfied and loyal, businesses of all sizes need to respond to their queries in a quick and correct manner. Businesses are becoming more and more inclined to replace human operators with automated systems as AI-powered response services become more popular. As found in a Fortune Business Insights study, the global call center AI market size was around $1.60 billion in 2023. It is further estimated to grow from $1.95 billion in 2024 to $10.07 billion by 2032.

Navigating Quebec's Law 25: Essential Compliance Tips and FAQs

Quebec’s Law 25, also known as Bill 64, imposes strict rules on how organizations handle personal information. With the final phase of implementation now in effect (September 2023), businesses need to ensure Law 25 compliance to avoid hefty fines and maintain customer trust. Here’s what you need to know, along with answers to frequently asked questions.

Optimizing Asset Management and Incident Response: CyCognito's New Integration with ServiceNow CMDB

Effective asset management and rapid incident response are crucial for maintaining cybersecurity defenses. To address these needs, and building on its previous Vulnerability Response module integration, CyCognito has announced a new certified integration with ServiceNow’s Configuration Management Database (CMDB).

CVE-2024-6800: Critical Authentication Bypass Vulnerability Affecting GitHub Enterprise Server

On August 20, 2024, GitHub released security fixes for a critical authentication bypass vulnerability in GitHub Enterprise Server, identified as CVE-2024-6800. GitHub Enterprise Server is a self-hosted version of GitHub, designed for organizations to manage and collaborate on code securely within their own infrastructure. This vulnerability affects instances using SAML single sign-on (SSO) with certain identity providers (IdPs) that publicly expose signed federation metadata XML.

PCI 4.0.1. has arrived. Here's what you need to know about Requirement 6.4.3

As the Payment Card Industry Data Security Standard (PCI DSS) compliance standards continue to evolve, our team has been fielding a number of questions about the changes to 4.0, how to interpret them and ultimately how to get or remain compliant. We decided to create a blog series covering some of these recent changes with practical, actionable tips for getting started. Many organizations subject to PCI-DSS may not be aware that the latest version, PCI 4.0.1 has been released.

Five Key Findings from the Inaugural EPSS Report

Last month, Cyentia and First.org published the inaugural Exploit Prediction Scoring System (EPSS) performance report. The report goes beyond just assessing the EPSS predictive scoring model. It looks at historical vulnerability data and published CVEs, as well as provides comparisons to the other popular scoring models: CVSS and CISA-KEV.