Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Futurize, Unite, and Simplify Application Security: A Black Hat Discussion

In this video from Black Hat 2025, A10 Networks security expert Jamiso Utter explains the critical need to "futurize our defenses." He argues that many current cybersecurity solutions, such as firewalls and Regex, are built on decades-old technology, making them ill-equipped to handle today's emerging threats. Jamison highlights the problem with buying from companies whose "bottom line is more important than your bottom line," leading to a fragmented "best-of-breed" approach that ultimately adds complexity to a network.

When Time-to-Exploit Goes Negative: Rethinking Defense for Irish Critical Infrastructure

When we analyzed Ireland's critical national infrastructure (CNI) through an intelligence lens, the findings were sobering. Of 222 CNI organizations examined, 98—nearly 44%—have exposed known vulnerabilities. We then analyzed whether these open doors were being actively exploited by threat actors. Ireland is home to 15,776 attack origins, and 85% of them are the very same IPs and networks in CNI organizations with those exposed known vulnerabilities.

CMMC 2.0 Certification: Your Survival Guide

Most defense contractors focus on winning contracts, delivering on time, and maintaining quality. However, the reality is that without CMMC certification, you won’t even qualify to bid. The Cybersecurity Maturity Model Certification exists for one primary reason: to protect the defense industrial base from >$600 billion annual cost of intellectual property theft (per Forbes) targeting defense information.

Cybersecurity Awareness Month: What You Can do to Go the Extra Mile

Like Halloween, October is also Cybersecurity Awareness Month, a time for organizations and individuals to sharpen their focus on data protection. With cybercrime rates soaring since 2020, this annual reminder has never been more critical. The conversation is shifting from viewing cybersecurity as just an IT problem to recognizing it as a shared business responsibility. According to the World Economic Forum, human error is a factor in a staggering 95% of all cybersecurity incidents.

The AppSec Bottleneck: Why Fixing Can't Wait

Vulnerability detection isn’t the main problem - remediation is. In today’s fast-paced development world, security teams are overwhelmed with alerts, while developers struggle to keep up with security tasks that feel disconnected from their workflow. The real risk? Vulnerabilities that sit unaddressed in a growing backlog. Join Daniel Wyrzykowski, Product Manager at Mend.io and Saoirse Hinksmon, Senior Product Marketing Manager at Mend.io as they explore.

What's Going On at Salesforce? - The 443 Podcast - Episode 347

This week on the podcast, we discuss the wave of extortion attacks targeting companies that use Salesforce. After that, we discuss Discord's breach involving their customer support application. Finally, we dive deep into the recent Oracle E-Business Suite zero-day vulnerability and how attackers chained together multiple low-severity findings into a critical issue.

How we built the Questionnaire Automation Browser Extension

Many of our customers ran into an issue where they’d receive questionnaires via third-party vendor portals and would need to import them into the Vanta app. Since these portals lacked spreadsheet export, their only option was to manually copy and paste questions into a spreadsheet before uploading it to Vanta.

CVE-2025-61884: Oracle Releases Emergency Patch for Information Disclosure Flaw

On October 11, 2025, Oracle released an emergency fix for a high-severity information disclosure vulnerability in Oracle E-Business Suite (EBS), tracked as CVE-2025-61884. The flaw exists in the Runtime UI component of Oracle Configurator and allows remote unauthenticated threat actors to access sensitive resources. Oracle has not confirmed a link between this vulnerability and the extortion emails received by some Oracle EBS customers from the Cl0p ransomware group in recent weeks.