Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Maximizing Security Investment: Mastering WAAP/WAF ROI Analysis

As the importance of compliance and safeguarding critical websites and APIs grows, Web Application and API Protection (WAAP) solutions play an integral role. However, navigating the array of deployment options and pricing structures can be daunting, making it challenging to accurately calculate ROI. In this webinar, Vivek Gopalan (VP of Product Management at Indusface) unravels the intricacies of estimating ROI for WAAP.

New in Veracode Fix: Additional Language Support and Batch Fix

We’re excited to bring you two significant updates to Veracode Fix: our AI-powered security flaw remediation tool. Since we launched Fix nearly a year ago, two requests have dominated our customer feedback: We recently launched a new version of Veracode Scan for VS Code that included Fix (with more IDE’s to follow), which answered some of those requests, and now we’re updating Fix to cover more languages and a new mode that will automatically apply the top-ranked fix.

Quick Guide to the OWASP OSS Risk Top 10

CVEs, or known and cataloged software vulnerabilities, dominate the discussion about open source software (OSS) risk. In 2016, 6,457 CVEs were reported. That number has grown every year since, reaching 28,961 CVEs reported in 2023—an increase of nearly 4.5 times in just seven years. 2024 is already on track to beat 2023, and we will likely see even faster growth once AI is earnestly set to the task of finding vulnerabilities (not to mention creating them).

Manage Exchange Online with Exchange Admin Center

Managing email services efficiently is essential for any organization’s productivity and security in the modern digital workspace. This blog will discuss Exchange Online administrative tasks and how to streamline their management process. Before we discuss how to manage Exchange Online, we’ll explore its history.

Nightfall AI: AI-Powered Data Leak Prevention (DLP) for the Enterprise

Data leak prevention (DLP) has become a critical tool for securing the modern enterprise. Think of popular workplace apps like Slack, Salesforce, Google Drive, M365, ChatGPT, and more; these apps have revolutionized workplace productivity, but they’ve also provided new pathways to spread sensitive data and risk compliance. This is where DLP solutions come in. However, legacy DLP relies on rules and heuristics, which overload security teams with false positive alerts and slow the remediation process to a grinding halt.

Identify, Respond, & Protect - Defending yourself from the newly disclosed Palo Alto PAN-OS CVE

On April 12th, Palo Alto disclosed a vulnerability with a maximum severity rating for the PAN-OS Global Protect Gateway. There was clear evidence that the vulnerability was being actively exploited as early as March 26th. When exploited, this vulnerability enables an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Palo Alto expected patches to be released for tested mitigations to block known attacks on April 14th.

AI-driven cyber attacks to be the norm within a year, say security leaders

New research from Netacea reveals 93% of security leaders expect to face daily AI-driven attacks by the end of this year. Ransomware and phishing attacks are expected to be enhanced by offensive AI, but bots remain an underestimated threat. All respondents are benefiting from AI in their security stack, but adoption of bot management is lagging behind.
Featured Post

Human risk management automation can help beat burnout

Cyber criminals are relentlessly exploiting new technologies to improve their chances of success. As such, security professionals are feeling the pressure of keeping watch against these threats and trying to stay a step ahead of these criminals.