Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Data Security including privacy, protection, and encryption.

The Role of Data Architecture in Managing Data Effectively

As businesses manage their data, an effective and well-implemented data architecture is the blueprint companies need to utilize, structure, and store data to ensure it is handled safely and securely without interrupting business operations. Furthermore, businesses must consider how they can manage data while also complying with numerous regulations and auditing processes to prevent the risk of data breaches and cyber or network attacks.

Loose AWS API keys: what's your real risk?

97% of enterprise leaders consider a well-executed API strategy critical in driving their organization's growth and protecting revenue streams, yet according to a recent study, 84% of security professionals reported API security incidents over the past year. In March, a GitHub breach exposed nearly 13 million API secrets that users had left in the repository over time, severely impacting customer trust and causing reputational damage.

Why Healthcare Must Urgently Enhance Data Security

In this episode of CISO Conversations: EU Data Regulations, Nicolas Groh, Field CTO at Rubrik, is joined by Anastasiya Kiseleva, a PhD Researcher in Law, Health, and Technologist at the Vrije Universiteit Brussel, John Noble, Former Non-Executive Director at NHS England, and Dr. Stefan Buttigieg, Resident Specialist in Public Health Medicine at the Ministry for Health and Active Aging in Malta.

How to Master Data Security Online for Businesses and Employees

Data security is becoming a monumental challenge for businesses and individuals as we all try to manage and protect our data online. We maintain a balance of security, privacy, and backups to protect our information and that of others. Businesses must navigate complex regulations alongside data breach protection to mitigate the risks of cyberattacks and financial loss with complex cloud infrastructures and disaster recovery methods.

DSPM vs DLP: Unraveling the Differences

In this episode of Into the Breach, James Purvis and Drew Russell discuss the key differences between Data Loss Prevention (DLP) and Data Security Posture Management (DSPM). Drew explains that while DLP focuses on perimeter security, DSPM secures data at rest, offering a more proactive approach. Using a clever analogy, Drew illustrates how DSPM prevents issues before they occur, unlike DLP's reactive measures. They conclude by highlighting how both can work together to enhance data security.

Top Data Tokenization Tools of 2024: A Comprehensive Guide for Data Security

Data tokenization is a critical technique for securing sensitive information by substituting it with non-sensitive tokens. This process plays a crucial role in data protection, especially in industries handling large volumes of personal or financial information. Here, we explore the top data tokenization tools of 2024 to help organizations find the right solutions for protecting their data.

An elephant in Kairos: data-leak site emerges for new extortion group

It is nearing 2025, and data-leak sites (DLSs) for extortion groups continue to emerge. November 2024 continues this trend, with Cyjax observing the thirteenth most recent materialisation of a DLS for an extortion group calling itself “Kairos”. At the time of writing, Kairos has claimed attacks against six victims, two of which have acknowledged significant data breaches in 2024. However, it is unclear whether these are related.

Lessons from a Honeypot with US Citizens' Data

Prior to last week’s US Presidential Election, the Trustwave SpiderLabs team was hard at work investigating potential risks and threats to the election system, from disinformation campaigns to nation-state actors looking to exploit vulnerabilities. No information that may have potentially affected the election process was discovered at any time during the research. If it had, Trustwave SpiderLabs would have immediately disclosed its findings to the proper authorities.

How Fidelis Network DLP Outsmarts Cyber Attackers

Data breaches and network security threats are becoming a major problem for companies. The goal is not only to detect attacks but to stop them from happening in the first place. Fidelis Network DLP gives businesses a strong and integrated system to protect sensitive data. By preventing data leaks across all network traffic, Fidelis Network DLP helps businesses protect themselves from both external cyber-attacks and insider threats.