Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

5 ways to prevent phishing from ruining your summer vacation

During the summer months, when employees and customers are away on vacation, things usually slow down for businesses. But for cybercriminals, the opposite is true because they are busy taking advantage of minimal staffing levels in companies during the vacation period to launch complex attacks. The U.S. Federal Cybersecurity and Infrastructure Security Agency (CISA), warns that the risk of being hit by a cyberattacks rises over the holidays and summer vacation-themed phishing attacks gain momentum.

4 tips on how to prevent MFA fatigue in your company

Implementing multi-factor authentication (MFA) is undoubtedly the best way to protect your company and its data. However, when it comes to identity management, both users and administrators tend to demand a balance between efficiency, convenience, and security, all at the same time. It is a difficult challenge, but one that can be met. This is mainly because users may see MFA as a barrier that creates friction during use that can slow down productivity.

The 443 Podcast - Episode 252 - Qakbot Qacktivity

This week on the podcast, we cover the latest evolutions of the decade-old Qakbot malware including changes in how attackers deliver it. After that, we give an update on the SEC's new rules around mandatory security disclosure. We then end by reviewing CISA's analysis of Risk and Vulnerability Assessments they completed for their constituents in 2022.

Virtual Patching: the solution to Windows 10 EOL

Windows 10, which is still the most widely deployed operating system on desktops, has announced end of support for October 14, 2025. The current version, 22H2, will be the last version of Windows 10, which means that Microsoft will stop providing support and security updates for that particular version and any vulnerabilities discovered after the EOL (End of Life) date will not be fixed by Microsoft, leaving your operating system, and that of your customers, exposed to security risks.

Five Critical Security Platform Gaps to Avoid

The debate surrounding the integration of best-of-breed versus a single-vendor security platform has been discussed for some years. On one side, we have niche solutions that offer a specialized approach to addressing cybersecurity challenges. On the other side, there are the potential benefits of a consolidated platform that promises seamless interoperability for an exponential improvement of security posture.

The 443 Podcast - Episode 251 - Red Teaming AI Systems

This week on the podcast, we give an update on last week's discussion around a China-based APT targeting government organizations. After that, we cover the latest uses of generative AI like ChatGPT by malicious hackers. Finally, we end with a report from Google on their efforts around Red Teaming Artificial Intelligence systems.

Webinar: Top Security Threats Worldwide Q1 2023

Join WatchGuard CSO Corey Nachreiner and Director of Security Operations Marc Laliberte as they discuss key findings from the WatchGuard Threat Lab’s Q1 2023 Internet Security Report. They’ll cover the latest malware and network attack trends targeting small and midsized enterprises and defensive tips you can take back to your organization to stay ahead of modern threat actor tactics.

6 cybersecurity challenges for state and local governments

Today’s state and local governments are facing a deluge of increasingly sophisticated cybersecurity threats. As custodians of vast amounts of sensitive information on their citizens, these institutions are high-value targets for threat actors. The ongoing digitization of government functions combined with the growing prevalence of advanced cyberattacks has significantly escalated the level of risk these organizations must manage.