Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Software Supply Chain Security: The Basics and Four Critical Best Practices

Modern enterprise software is typically composed of some custom code and an increasing amount of third-party components, both closed and open source. These third-party components themselves very often get some of their functionality from other third-party components. The totality of all of the vendors and repositories from which these components (and their dependencies) come make up a large part of the software supply chain.

Cybersecurity Sessions Season 2, Episode 5: Skiplagging, CAPTCHA vs Bots, Scraper Bots

This month’s episode takes off with a journey into the controversial world of skiplagging, also known as hidden city flying. Airlines and holiday businesses are taking legal action against passengers and websites like Skiplagged that exploit pricing loopholes, leaving empty seats on the second leg of multi-stop itineraries. But with scraper bots at the root of the issue, is there a technical solution to limit the practice?

Top 5 features to look for in an advanced network port scanner

Network security has become paramount in safeguarding sensitive data and ensuring maximum efficiency in organizations today. As port scanning attacks increase, it’s important to stay vigilant to protect your enterprise systems from such threats. One essential tool that every network admin should have is the advanced network port scanner, which can help to identify and assess network port and switch port vulnerabilities.

How to Build an Insider Threat Program [10-step Checklist]

An effective insider threat program is a core part of any modern cybersecurity strategy. Having controls in place to detect, deter, and respond to insider attacks is necessary for your organization to protect its sensitive data. It’s also required by many IT regulations, standards, and laws: NISPOM, NIST SP 800-53, HIPAA, PCI DSS, and others. In this article, we’ll shed light on the main insider threat program requirements and share the best tips on how to build an insider risk program.

8 Steps to Achieve Cybersecurity Compliance

Cybersecurity compliance is complicated. As the cybersecurity industry changes, so do compliance requirements and, depending on your organization’s operations, compliance could mean adhering to multiple frameworks and reporting to multiple governing bodies. In fact, 67% of organizations surveyed by Arctic Wolf follow between one to three sets of guidelines.

3 Tangible Benefits of an A Rating

Security ratings are a standard in cybersecurity. Many organizations rely on them to manage their security programs and they create ROI for the organization. Despite the potential benefits, it can be challenging for organizations who are evaluating different security ratings options to determine the value they will get from them. When making investment decisions, it’s essential to know where the investment will take you and quantify that benefit.