Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Building better workflows with multiple drafts

In today's security and IT landscape, the workflows that power your operations are not merely convenient tools—they're essential infrastructure. When a phishing detection workflow fails or an access control process malfunctions, the consequences can be severe: security incidents remain undetected, response times suffer, and organizational risk escalates significantly. This reality creates a paradox for teams.

Credential Access Campaign Targeting SonicWall SMA Devices Potentially Linked to Exploitation of CVE-2021-20035

On April 15, 2025, SonicWall published a product notice regarding CVE-2021-20035, a vulnerability impacting SonicWall SMA 100 series appliances. In an updated security advisory for the vulnerability, SonicWall indicated on April 15, 2025 that the vulnerability was being exploited in the wild. The vulnerability was added to CISA’s known exploited vulnerabilities (KEV) catalog the following day.

Essential Features to Look for in a Shovel for Metal Detecting Success

Unearthing treasures with a metal detector requires precision, patience, and the right equipment. A dependable shovel for metal detecting is more than a digging tool-it's a partner in preserving artifacts and maximizing efficiency. The perfect shovel enhances your ability to extract coins, relics, or jewelry without damage, whether you're sweeping beaches or old homesteads. With countless designs available, focusing on key features like blade strength, handle comfort, and portability ensures success.

ThreatQuotient Celebrates Record Year Marked by Major Customer and Partner Growth, Product Innovation, and Industry Recognition

ThreatQuotient delivers exceptional growth and innovation over the past year. This growth has been fueled by increasing market demand for simplified security automation technologies to address the challenges around threat intelligence management and security operations. ThreatQuotient's annual Evolution of Cybersecurity Automation Adoption research underlined this momentum.

SquareX to Uncover Data Splicing Attacks at BSides San Francisco, A Major DLP Flaw that Compromises Data Security of Millions

SquareX researchers Jeswin Mathai and Audrey Adeline will be disclosing a new class of data exfiltration techniques at BSides San Francisco 2025. Titled "Data Splicing Attacks: Breaking Enterprise DLP from the Inside Out", the talk will demonstrate multiple data splicing techniques that will allow attackers to exfiltrate any sensitive file or clipboard data, completely bypassing major Data Loss Protection (DLP) vendors listed by Gartner by exploiting architectural vulnerabilities in the browser.

DevOps Pillars - Top 11 DevOps Principles for 2025

DevOps has become an important practice for companies looking to efficiently meet customers’ expectations, accelerate software delivery, and optimize resources. Companies that embrace the DevOps culture can smoothly merge their development and operations teams, resulting in faster releases and better development.

From Chaos to Clarity: Building Full Network Visibility in Hybrid Cloud

As per Gartner’s report, cloud infrastructure spending surged past $88 billion by 2022, with organizations rapidly expanding their hybrid cloud presence. But as hybrid deployments grow, achieving full network visibility in hybrid cloud becomes one of the most pressing challenges. Hybrid networks—blending on-premises and cloud-based systems—introduce complex infrastructures and performance blind spots.

12 WAF Myths Debunked - What You Really Need to Know

Web Application Firewalls (WAFs) play an important role in protecting websites and applications from common threats. But despite their growing adoption, WAFs are often surrounded by myths and misunderstandings that can lead to ineffective implementation or underutilization. In this blog, we debunk the most common myths about WAFs and reveal the truth behind what they can and cannot do.