Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Ongoing Risks of Hardcoded JWT Keys

In early May 2025, Cisco released software fixes to address a flaw in its IOS XE Software for Wireless LAN Controllers (WLCs). The vulnerability, tracked as CVE-2025-20188, has a CVSS score of 10.0 and could enable an unauthenticated, remote attacker to upload arbitrary files to a susceptible system – but the real story is that this vulnerability drives home the persistent risks associated with hardcoded credentials, particularly JSON Web Tokens (JWTs), in network infrastructure components.

Continuous Threat Exposure Management (CTEM)

Continuous threat exposure management (CTEM) is a structured framework for continuously assessing, prioritizing, validating, and remediating vulnerabilities across an organization’s attack surface, enabling you to respond effectively to the most pressing threats over an ever-expanding attack surface. Reactive security is a temporary fix, not a sustainable solution.

DDoS Attacks Up 358%: Early 2025 Breakdown with Omer Yoachimik

In this week’s episode, we talk about DDoS attacks and their sharp rise in recent months. We also start with a quick look at some Internet trends tied to the announcement of the new pope. To guide us through the world of distributed denial-of-service (DDoS) attacks, host João Tomé is joined by our DDoS expert, Omer Yoachimik.

AI Chatbot Security: Understanding Key Risks and Testing Best Practices

Organizations are increasing their reliance on AI chatbots powered by Large Language Models (LLMs) to improve efficiency and reduce costs, creating new challenges for security and development teams. Without well-planned security for integrating AI chatbots into your business operations, you’re leaving the door wide open for bad actors.

From agentic AI to race cars: RSAC 2025 with 1Password

RSAC 2025 delivered an unforgettable week of cybersecurity insights and innovations. As the industry gathered to tackle the latest threats, one challenge loomed: the security risks posed by unfederated identities, unmanaged devices, applications, and AI-powered tools accessing company data without proper governance controls.

Switching to eSIM on iPhone and Android: A Quick Setup Guide

Traveling to Europe and want to stay connected without the hassle of a physical SIM card? Switching to an eSIM is the way to go. It's fast, convenient, and perfect for keeping your phone online while you explore Paris, Rome, or Berlin. This guide shows you how to swap a physical SIM for an eSIM on iPhone and Android devices. We'll cover step-by-step setup, carrier-specific tips, and how to buy esim online Europe. Whether you're a tech newbie or a seasoned traveler, you'll be connected in no time. Let's get started!

RSAC 2025: The Turning Point for AI in Enterprise Security?

RSA Conference 2025 in San Francisco was a breath of fresh air, literally and figuratively. The city felt more vibrant and welcoming, and the conference buzzed with genuine excitement. Unlike previous years, which were dominated by hype and theoretical discussions, this year’s focus was on tangible (not yet game-changing!) AI applications in cybersecurity. AI extended throughout the conference, from the keynotes through the track sessions and into the exhibition hall.