Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why Most Businesses Fail at GDPR & How you can win

60% of companies think they’re GDPR-compliant… but they’re not. And when the audits or complaints hit, it’s already too late. The average GDPR fine so far has exceeded €1.5 million for large corporations, with smaller businesses also facing substantial penalties. Nearly 70% of companies lack a comprehensive data inventory, leaving them vulnerable. Only 50% of organizations have a formal breach response plan in place.

Still Trusting Automated Patches Blindly? Think Again

JounQin’s npm account, the maintainer of popular packages such as eslint-config-prettier, was compromised in a phishing attack. The attackers used the breached credentials to publish six malicious versions of eslint-config-prettier, along with three additional infected packages tied to the same account. In total, the compromised packages see roughly 78 million weekly downloads. Notably, the account had publishing rights for packages with a combined weekly download count of 180 million!

From Frameworks to Defence: Using Australia's ISM and Essential Eight Strategically

Aligning with the Australian Government’s Information Security Manual (ISM) and the Essential Eight (E8) remains a foundational step for organizations working with or alongside government agencies. Trustwave’s Essential Eight Control Effectiveness Assessment is a great first step, but relying solely on compliance as a goal can leave security programs stagnant.

Building Resilience Against Modern Cyber Threats

That was the message from major UK retailers like Marks & Spencer and the Co-op during recent Parliamentary hearings on cyber resilience. Their stories weren’t hypothetical, they were recovering from real-world incidents involving identity compromise, supply chain breaches, and operational disruption that cost hundreds of millions of pounds. The lesson is clear. Prevention is necessary, but it is no longer enough.

5 proven ways to secure your hybrid network environment during team convergence

Watch the experts edition panel discussion featuring ESG Principal Analyst John Grady and AlgoSec leaders as they explore: How security responsibility is converging across cloud and datacenter environments—and what that means for your team The top causes of cloud breaches—and how to stop them before they spread 5 proven ways to unify visibility, policy enforcement, and zero trust across hybrid multi-cloud networks How to automate security workflows without slowing down innovation Real-world insights on AI risks, agent sprawl, and tool fragmentation in a converged security world.