Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Imagine a world where managing thousands of connected devices is as easy as managing one. Welcome to the era of IoT device management! With the rapid growth of connected devices across various industries, IoT device management has become an essential aspect of maintaining security, efficiency, and scalability.

The 11th annual Global InfoSec Awards, held at the RSA Conference 2023 in San Francisco, brought together over 4,300 companies vying for recognition in various categories. Among the standout performers, ManageEngine’s AD360 won prestigious accolades in four categories. Cyber Defense Magazine (CDM) hosted the Global InfoSec Awards, recognizing the most innovative and effective cybersecurity companies and products in the industry.

In the digital age, Aadhaar Plus has emerged as a powerful tool, revolutionizing identity verification and secure digital user onboarding processes. With its conveniently designed workflows, and efficiently integrated technology, Aadhaar Plus is reshaping the way we process digital identities and carry out Know-Your-Customer (KYC) processes in India. In this blog, we will explore the potential of Aadhaar Plus and how it is transforming various sectors.

A zero-day vulnerability, denoted by the CVE identifier CVE-2023-30777, exposes a dangerous reflected cross-site scripting (XSS) flaw. This high-severity vulnerability has been discovered within the WordPress plugin (Advanced Custom Fields (ACF) and Advanced Custom Fields Pro). The CVE-2023-30777 exposes over 2 million installations to security risks, triggering widespread concern and anxiety among website owners and administrators.

ISO 27001 is commonly used for assessing supply chain and data breach risks during due diligence. This post provides a free ISO 27001 vendor questionnaire template for a high-level evaluation of vendor information security standards. Though this security assessment template only broadly covers Supply Chain Risk Management aspects of ISO 27001, it should still be sufficient for identifying potential deficiencies in a vendor’s security control strategy requiring further investigation.

With digital transformation rapidly multiplying attack vectors across the cloud, remote work environments, and Shadow IT endpoints, mapping your digital footprint, let alone implementing an effective attack surface management strategy, is not as easy as it once was. As a result, communicating the value and progress of Attack Surface Management (ASM) to the board is becoming a considerable challenge that must be addressed before threat landscapes evolve beyond the reach of mitigation capabilities.

Though very helpful in representing the efficacy of a service provider’s third-party risk management program, SOC reports aren’t always available. Some service providers either don’t have the budget for a SOC report or are unwilling to undergo the laborious process of an SSAE-18 audit. While a lack of a SOC report should raise alarm bells during the due diligence process, it shouldn’t necessarily result in the disqualification of a prospective vendor.

The Smashing Security podcast recently invited our Director of Product Management, John Stock, on to discuss our Vulnerability Prediction Technology (VPT) tool, the security challenges brought by remote work, and the importance of balancing risk management with business goals.

A cloud-native application is specifically created to operate seamlessly within a cloud environment, taking advantage of cloud infrastructure and services to achieve top-notch performance, adaptability, and reliability. They use microservices instead of monolithic structures, allowing independent development and deployment. Microservices are hosted in containers, providing a lightweight and portable runtime environment.