Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Technology

What is Mobile Application Penetration Testing: Benefits & Tools

Mobile applications are ubiquitous, but their security can be a concern. Unlike web applications, in a mobile landscape, both the device and the mobile application have a crucial role in security due to increasing cyber threats. Mobile application penetration testing (mobile app pen testing) is a proactive security measure to identify and address vulnerabilities before malicious actors exploit them.

Snowflake Breach: Stop Blaming, Start Protecting with Protecto Vault

Hackers recently claimed on a known cybercrime forum that they had stolen hundreds of millions of customer records from Santander Bank and Ticketmaster. It appears that hackers used credentials obtained through malware to target Snowflake accounts without MFA enabled. While it's easy to blame Snowflake for not enforcing MFA, Snowflake has a solid track record and features to protect customer data. However, errors and oversight can happen in any organization.

CVE-2024-29849: Veeam discloses Critical Vulnerability that allows attackers to bypass user authentication on its Backup Enterprise Manager web interface

On May 21, 2024, Veeam revealed a severe flaw across its Veeam Backup Enterprise Manager (VBEM) web interface that enables an unauthenticated attacker to log into the web interface as any user. Officially designated as CVE-2024-29849, the vulnerability presents a major threat with a CVSS V3 rating of 9.8 (critical). VBEM is a web-based platform that allows administrators to oversee Veeam Backup and Replication installations through a web interface console.

The IT Hour | Password Manager Updates 06.07.24

Himanshu Sharma, Product Manager, joins us to give us all the latest on the JumpCloud Password Manager. Join us at 11:30 am ET. The #IT Hour hosted by #JumpCloud is a #communityprogram focused on the life of #ITAdministrators. With the ever changing #ITlandscape, having community and professional networking opportunities is very valuable. You can expect from our weekly conversations.

How Can a 7-Component Surveillance System Upgrade Your Security in 2024

A comprehensive surveillance system is vital for enhancing security in today's fast-paced and technology-driven world. With crime rates on the rise and privacy concerns growing, it has become more important than ever to invest in advanced security solutions. In this article, we will delve into the significance of a 7-component surveillance system and how it can upgrade security in Singapore in 2024. Buckle up and join us on this journey as we explore the cutting-edge advancements in surveillance technology.

A Salt Security Perspective on the 2024 Gartner Market Guide for API Protection

APIs are crucial for modern digital businesses because they allow different software systems to communicate and exchange data seamlessly and they are foundational to how modern applications are built. However, they are also vulnerable to cyberattacks because they are widely used. To address this growing threat, organizations are increasingly turning to API protection solutions to protect their valuable data and ensure uninterrupted business operations.

Alissa Starzak on Internet regulation, elections, and Project Galileo's decade

In this week’s episode, we feature a segment all about policy, Internet regulation, and the 10th anniversary of our Project Galileo. Host João Tomé is joined by Alissa Starzak, Global Head of Policy at Cloudflare, to discuss policy and regulation in 2024. This conversation was recorded in early May 2024 in our San Francisco office. We begin with Alissa’s impressive background, from the private sector to the CIA, the US Army, and then Cloudflare.

Securing open source infrastructure - Log all the things

The last time we wrote about open source software (OSS) for security, we explored how community-driven innovation addresses security problems stemming from the rapid pace of business-driven technological advancements. We posed the question: Can open source security solutions adequately secure and protect the OSS that modern businesses depend on?