Demo: Cluster patching with Tanium Endpoint Management
See how you can use Tanium Automate and Endpoint Management to automate cluster patching of your organization's devices.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
To Catch a Thief: China's Rise to Cyber Supremacy
To Catch a Thief explores how nation states have shifted their cyber espionage strategy from trade secret theft to targeting American critical infrastructure. We are also excited to share that Nicole Perlroth, the host of To Catch a Thief, joins Rubrik in a new role as Chief Cyber Raconteur.
When Security Fails: Be READY | Former Federal CIO Warning
"Something's going to happen." Maria Roat, former Deputy Federal CIO, delivers a wake-up call about the inevitable nature of security incidents. In this crucial clip from Data Security Decoded, Maria reveals why response preparation is everything and how to minimize damage when (not if) breaches occur. Don't wait until "all your data went out the door" - learn proactive strategies from a federal tech leader who's seen it all!
CyberArk Secure Cloud Access Free Trial: Platform Interface Guide | CyberArk
New to CyberArk Secure Cloud Access? In this walkthrough, we’ll guide you through the platform interface, helping you navigate key features during your free trial. What you'll learn: Overview of the Secure Cloud Access platform How to manage cloud access securely Essential tools & settings for AWS integration.
Compromised tj-actions/changed-files GitHub Action: A look at publicly leaked secrets
On March 14, 2025, the popular GitHub action tj-actions/changed-files was compromised, exposing secrets in CI logs. GitGuardian's analysis identified leaked secrets like GitHub tokens, AWS keys, and more.
Building a Culture of Secure Coding: Empowering Developers to Build Resilient Software
Speed and innovation rule in software development, which makes it easy to overlook one crucial aspect: security. As a Staff Solutions Engineer at Snyk, I’ve seen firsthand how a single overlooked vulnerability can spiral into a crisis, affecting businesses, customers, and trust. Secure coding isn’t just about writing better code—it’s about protecting what matters, which includes the credibility and reputation of individuals, teams, and the business.
Unburdening Developers From Vulnerability Fatigue with Snyk Delta Findings
Developers are trapped in a loop: constantly chasing dependency upgrades to mitigate security risks or chasing down security reports of vulnerable code or findings in the CI pipeline. Developers often refer to this as “vulnerability fatigue,” a term commonly referenced in npm package install logs that list the newly introduced security vulnerabilities for third-party dependencies.
DNS is the center of the modern attack surface - are you protecting all levels?
If you are a mature organization, you might manage an external IP block of 65,000 IP addresses (equivalent to a /16 network). In contrast, very large organizations like Apple may handle an astonishing 16.7 million IP addresses or more (about a /8 network). However, this isn’t the case for many of us. IP addresses are fixed assets and can be costly, so most modern organizations do not have a large number of directly assigned IP addresses for every service they expose to the internet.
2025 Cato CTRL Threat Report: Top 4 AI Predictions for the Year Ahead
Today, Cato Networks published the 2025 Cato CTRL Threat Report. It is the inaugural annual threat report from Cato CTRL, the Cato Networks threat intelligence team. The key theme for this year’s report is artificial intelligence (AI), which reflects the current cybersecurity landscape where AI usage is skyrocketing among vendors—and threat actors. Within the report, we examine the security risks associated with LLMs and the increased adoption of AI applications within organizations in 2024.
A Step-by-Step Guide to DORA Compliance [XLS download]
The Digital Operational Resilience Act (DORA) is the EU’s answer to ensuring digital operational resilience in financial services. This wide-reaching regulation applies to over 22,000 financial entities and Information and Communication Technology (ICT) service providers operating within the EU. But what does achieving compliance with the EU’s vision for resilience in digital financial operations look like?