Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

At this point, it’s almost cliché to say “AI is here, and it is changing everything.” Whether it’s accelerating productivity or reshaping employee workflows, AI is ushering in a new era of operational possibilities. But as we all know, beneath this transformation lies a complex and evolving security challenge.

Today, Tines has been recognized by Wiz as a winner in the inaugural WIN awards, earning the WINspiration Award for its outstanding partnership. This recognition highlights Tines’ track record of delivering real outcomes for joint customers through the WIN program. Launched in 2023, WIN is Wiz’s open, bidirectional integration ecosystem that now includes over 200 partners — setting a new standard for integrated cloud security.

Healthcare organizations operate under an extension of regulations, HIPAA being amongst the top, leaving little room to prioritize voluntary frameworks like SOC 2. ‍ However, overlooking SOC 2 is a missed strategic opportunity as it offers structured, actionable security guidance that not only strengthens security and privacy posture but also facilitates HIPAA compliance. ‍ In this guide, you’ll learn why that’s the case and discover: ‍

As someone that’s been in the industry for over 20 years, I’ve seen my fair share of online scams. But this is the kind of story you hear and can’t quite believe. At the last RSA cybersecurity conference, a colleague of mine–someone who lives and breathes digital security, a CISO–admitted he’d been taken in by an online romance scam. My first thought was, how?

A single leaked password can lead to devastating breaches. Thus, it’s important to understand that managing your organization’s secrets is not just an IT concern — it’s a business-critical security practice. From your customers’ data to the organization’s financial information, your secrets hold the keys to the most vital areas within your infrastructure. If they are not protected, neither is your sensitive data.

One of the most pressing cyber threats businesses face today is the rampant rise in leaked credentials. Data from Cyberint, a Check Point company, reveals a staggering 160% increase in leaked credentials so far in 2025 compared to 2024. This isn’t just a statistic; it’s a direct threat to your organization’s security.

Cloud complexity is growing. So are the risks—and the opportunities. As organizations scale their infrastructure across hybrid environments to innovate quickly, security strategies must evolve just as fast. The rapid adoption of multi-cloud environments and the proliferation of human and machine identities have intensified the challenge.

If you think AI-generated code is saving time and boosting productivity, you’re right. But here’s the problem: it’s also introducing security vulnerabilities… a lot of them. In our new 2025 GenAI Code Security Report, we tested over 100 large language models across Java, Python, C#, and JavaScript. The goal? To see if today’s most advanced AI systems can write secure code. Unfortunately, the state of AI-generated code security in 2025 is worse than you think.

It seems everyone loves phishing attacks. Trustwave's Ed Williams, Vice President of SpiderLabs, during a recent Trustwave webinar, discussed the ongoing threat posed by the increasingly sophisticated phishing incidents that remain the primary vector for initial access in cyberattacks. What Williams interestingly noted was that threat actors are not the only group using phishing to gain access to organizations.

Every pipeline shift introduces a new blind spot. SAST catches coding flaws, and SCA catches dependency risks; however, as delivery moves to CI/CD, new risks have emerged, not in the code itself, but in how it is executed. From broken access controls and authentication drift to logic flaws behind feature flags, these threats show up in production. Continuous DAST in CI/CD pipelines isn’t just “another layer” but a runtime check that’s most likely to catch what gets exploited.