New at Nightfall: August '23 Product Updates
From our groundbreaking GenAI product launch to our enhanced console experience, we’re excited to share the most recent Nightfall product updates.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Technology
API Security Fundamentals
API attacks have risen 400% in the last six months, as per Security Boulevard. This has caused 59% of organizations to delay the release of new applications due to concerns about API security. As industries look to integrate with third-party software more often to improve their business operations, the security of OpenAPIs has become critical.
Understanding API Attacks: Why they are different and how to stop them
API attacks aren’t like traditional application attacks. Understanding those differences is crucial to protecting the valuable data and services your APIs enable. Nick Rago, Salt Security Field CTO, discusses in this webinar: We hope you enjoy the webinar on the changing nature of API attacks and learn the best practices to keep your organization safe.
Act Now to Prepare for New NCUA Cyber Incident Reporting Requirements
We recently discussed the new SEC rule requiring all registered companies to report material cyber incidents within four (4) days.
5 Best Tools For AWS Penetration Testing This 2023
AWS Penetration Testing is an evaluation of the security posture of a system or application to identify and mitigate potential vulnerabilities that can be exploited. It helps organisations defend against malicious attacks by identifying misconfigurations, weaknesses, and other threats in their cloud environment.
Protecting And Recovering Cloud Load Balancers
Unlike other cloud providers that offer their own closed source backup services, AWS EKS simply recommends using open source tool, Velero. However, as one of the first companies to fully integrate with AWS EKS, CloudCasa saw a gap in the market, enabling users to still leverage the power of open source with Velero while offering a SaaS management solution for enterprises that aimed to simplify the backup process.
Mobile threat defense or bust
Unified endpoint management (UEM) has played a significant role over the years in enabling companies to improve the productivity and security of their corporate mobile devices and applications. In the early days of endpoint management there were separate workflows and products as it pertains to traditional endpoints, such as desktops and laptops, versus mobile devices.
In the Alleys of Black Hat and DEF CON 2023: The Quiet API Security Crisis
The neon lights of Black Hat and DEF CON, with their flashing demos and groundbreaking presentations, often dazzle attendees and cyber enthusiasts alike. From AI-driven hacking tools to quantum encryption, the subjects covered span a vast spectrum. However, as with any vibrant city, these include areas of risk and concern. For Black Hat 2023 events, APIs are core to these areas.
Cloud Penetration Testing Service: Safeguarding Your Digital Fortresses
In this informative video, join us as we delve into the realm of cloud penetration testing services, presented by experts at Cyphere. Discover the vulnerabilities that can threaten your cloud infrastructure and learn how our cutting-edge approach addresses these challenges head-on. Gain insights into common issues faced in the digital landscape and explore how Cyphere's unique strategies ensure the security and resilience of your digital assets. Safeguard your cloud environment with knowledge and solutions that empower you to stay one step ahead of potential threats.
How we use Datadog CSM to improve security posture in our cloud infrastructure
In complex cloud environments where the speed of development is accelerated, managing infrastructure and resource configurations can be an overwhelming task—particularly when certifications and compliance frameworks like PCI, HIPAA, and SOC 2 present a lengthy list of requirements. DevOps and engineering teams need to ship code updates at a rapid pace, making it easy for them to accidentally overlook misconfigurations.