Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Fortinet Fortigate Vulnerability CVE-2023-27997: How to Surface Exposed Devices and Mitigate the Threat

Recently, a critical vulnerability tracked as CVE-2023-27997 was identified in Fortinet Fortigate appliances. Fortinet makes some of the most popular firewall and VPN devices on the market, which makes them an attractive target for threat actors. This vulnerability has been exploited by the Chinese APT group Volt Typhoon, among others, targeting governments and organizations worldwide. As a result, Fortinet has released an urgent patch for affected systems.

Take it From a Compliance Officer: Secure Networks Matter

Even before the fiasco at Silicon Valley Bank, financial institutions were under tremendous scrutiny from regulators. How could they not be? Banks are among the oldest known targets for theft, and in a digital age, the best way to extract money is going to be either straight cyber-theft from existing accounts or ransomware. IT systems that house customers’ financial data can be architected with the right security controls in place to protect that data to the highest standard.

Bridging the Gap to Success: Strengthening Business Application Security for Organizations

Get ready to unlock a wealth of knowledge as Jade empowers businesses to proactively fortify their security defenses, navigate risks, and ensure compliance with regulations to protect sensitive data and inspire customer confidence. Join Jade on this enlightening journey to gain a deeper understanding of the evolving threat landscape and discover the best practices that can propel your organization towards triumph through effective application security. Don't miss out on this exceptional opportunity to learn from a true industry expert who genuinely cares about empowering businesses like yours.

Seamless Application Security Unleashed: Transforming Network Security with AlgoSec

Join Asher in this insightful video as he shares his expertise on transforming network security with AlgoSec. Discover how seamless application security can be unlocked anywhere with the power of AlgoSec's innovative solutions. Asher dives into the key aspects of network transformation, security automation, and compliance management, providing valuable insights and practical strategies to enhance your organization's security posture. Gain a deeper understanding of network visibility, application connectivity, and risk mitigation, as Asher guides you through the process of optimizing security policies and improving overall threat detection.

Can WiFi See What You Search on Incognito?

Yes, your WiFi provider – also called an Internet Service Provider (ISP) – can see what you search and what sites you visit, even when you’re in incognito mode. The owner of the router will also be able to see what you search in the router logs. Incognito mode only prevents your site visits from being saved to your browser history. Read on to learn more about how incognito mode works and who can see your search history.

Beyond the Basics: How Can Proxies Be Used?

As people spend more and more time online, the risk rates for cyber-attacks have increased, leaving all internet users vulnerable to potential harm. We have prepared something for you if you want to find tools to shield you from online cruelty and ensure you won't become a victim of cyber-attacks. Proxies are one of the most efficient solutions that will keep you away from the evil eyes of the internet. Below, we will tell you what proxies are and how you can use them to maximize your security and efficiency.

Identifying BOD 23-02 Network Management Interfaces with Splunk

On June 13, 2023, the United States Cybersecurity and Infrastructure Security Agency (CISA) released Binding Operational Directive 23-02 titled Mitigating the Risk from Internet-Exposed Management Interfaces. This BOD is aimed at reducing the risk posed by having the ability to configure or control federal agency’s networks from the public internet. If you are curious about this threat, you should review MITRE ATT&CK’s T1133- External Remote Services.

Extending visibility through our new ICS/OT collection

Increasingly, security teams are tasked with identifying, understanding, and managing risk around devices that may live outside the traditional IT umbrella. Operational Technology (OT) refers to computing systems that are used to manage and process operational functions as opposed to administrative operations, with Industrial Control Systems (ICS) being a major segment of that OT sector.