Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

70% of IT and security pros say SSO is falling short - Here's how to close the gap

When IT and security teams lack visibility and control over the SaaS apps employees use, the result is wasted spend, unsanctioned access, and compliance failures. Yet 1Password’s research shows that all too often, SaaS usage is evading the tools meant to govern it.

The New Attack Surface: How to Break (and Defend) Large Language Models

Large Language Models now automate customer support, write code, classify emails, generate content, and - disturbingly - execute tasks through plugins and agents. Once an AI can act on your behalf, it becomes part of your operational infrastructure, not a toy. OWASP’s Top-10 for LLM Applications formalized the threat landscape, and quietly confirmed what security researchers have been yelling for two years.

How Physical Asset Security Strategies from Cybersecurity Apply to Gold Bullion Storage

The parallels between protecting digital assets and physical gold bullion reveal a fundamental truth about modern security architecture: threats evolve, but the principles of defense remain constant. Organizations safeguarding high-value physical assets can extract substantial operational advantage by adopting frameworks originally designed for cyber defense. This convergence of physical and digital security thinking represents a strategic shift in how enterprises approach asset protection.

PCI DSS 6.4.3 Is the Canary in the Coal Mine for Client-side Security

Here's the hard truth: 98% of websites load third-party scripts. Few teams know exactly what scripts are loaded. Even fewer know what those scripts do (what elements in the browser they are interacting with), and a miniscule amount of teams have any control over what those scripts do. When I say "teams" I'm referring to different stakeholders - security engineers, risk & fraud analysts, compliance managers, and even the marketing department. That's one of the challenges of client-side security. Almost every internal department touches the website. It might be the most collectively edited environment that exists in a company.
Featured Post

The Shift Left of Boom: Making Cyber Threat Prevention Practical Again

The old saying "prevention is better than cure" has lost currency in today's cybersecurity industry. Instead, security teams are advised to assume that the business has been breached and focus on threat detection, investigation, response, and recovery. Yet, during cyber incident post-mortems, it is not uncommon to find that the business owned the tool that would have protected it against the breach. The problem arose because it wasn't correctly configured before the incident happened, and no one knew this - or if they did, they didn't have the time or resources to fix it.

ManageEngine Recognized in the 2025 Gartner Magic Quadrant for Security Information and Event Management

We’re proud to announce that ManageEngine has once again been recognized in the 2025 Gartner Magic Quadrant for Security Information and Event Management (SIEM). To us, this marks another significant milestone in our journey to deliver a unified, intelligent, and accessible security analytics platform for organizations worldwide.

Purpose-Built for MSPs: Unlock New Market Opportunities with Arctic Wolf

In today’s evolving threat landscape, a stack of security tools isn’t enough. MSPs need a partner that helps them scale, differentiate, and deliver exceptional security outcomes. That’s why Arctic Wolf launched a purpose-built MSP program earlier this year, designed in close collaboration with our MSP partners to empower them to grow faster and more profitably.

Securing the AI Browser Revolution: How Cato Helps Mitigate Risks in OpenAI Atlas

The launch of OpenAI Atlas, an AI-powered browser that merges ChatGPT’s intelligence with a full web experience, marks a major leap in how people interact with the internet. Instead of typing queries or clicking through pages, users can now ask, act, and automate, delegating browsing tasks to AI agents capable of retrieving data, filling in forms, or performing actions on their behalf. For businesses, Atlas represents both opportunity and risk.