Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

FedRAMP 20x Phase One: What is The New Pilot Program?

By now, you likely know the basics of FedRAMP, especially if you’ve read our robust coverage of the program. But, like all good cybersecurity frameworks, it evolves and changes over time, and our knowledge needs to be updated. One recent development is the 20x pilot program, which entered phase one in March of 2025. What is this pilot program, what does it do, and who is it for? Read on to learn more about 20xP1 and what it means for you.

Managed WAF Done Right: Turning Security into CFO-Grade ROI

When CISOs and security teams evaluate a Web Application and API Protection (WAAP) platform, the conversation often starts and ends with technical capabilities. That focus is natural, but it does not reflect the full decision-making process in most enterprises. Security leaders may drive the evaluation, yet true adoption requires building consensus with finance and procurement teams who view the investment through a different lens.

8 Fraud and Risk Gaps Private Lenders Miss

Would it surprise you to learn that fraud is common in private lending? Probably not if you're in this business. But if you're not, here's what a recent LexisNexis report has revealed: not only is fraud common, but U.S. financial services firms lose $4.41 in costs for every $1 of fraud. This, by the way, is a 28% increase compared to 2022.

Top tips: What happens to your data after you delete an app?

Top tips is a weekly column where we highlight what’s trending in the tech world and share ways to stay ahead. This week, we’re uncovering the truth about app deletion, why removing an app from your phone doesn’t always mean your data is gone, and how to make sure your personal information doesn’t keep following you long after you’ve tapped uninstall. I recently found myself staring at my phone’s home screen. It felt cluttered.

Introducing Cato's API Assistant: Your New Copilot for GraphQL

Imagine you just got a new car with a feature that automatically adjusts the air conditioning based on live weather forecasts. To activate it, you need to connect the car to an external weather service. You could take it to the garage, pay someone to configure it, and wait for the job to be done. Or, you could use a built-in assistant that asks you two simple questions and shows you how to set everything up in minutes. That’s the idea behind Cato’s new API Assistant.

Can My Hacked Account Be Recovered?

Few things are as alarming as discovering that one of your accounts has been hacked. Unfortunately, the reality is that recovering a hacked account is often very difficult – sometimes impossible. Here’s why getting your account back can be unlikely, what risks are involved, and how you can protect yourself from attacks.

What C-Levels Should Know About Enterprise Cloud Backup

Enterprise cloud backup keeps your business running when disaster strikes. Organizations lose an average of $5,600 per minute during downtime, making reliable data protection non-negotiable for companies running applications across multiple clouds, containers, and virtual environments. Traditional backup methods fail with modern distributed infrastructure; you need enterprise backup strategies that scale with your actual environment, not outdated approaches that worked a decade ago.

Is iCloud Keychain Secure?

Apple users have a variety of tools and services integrated into its ecosystem, such as Notes, Pages, Keynote, Reminders, Calendar, Mail, and more. One of these services is iCloud Keychain, an integrated password manager within the Apple product suite to autofill your passwords when logging in to your account, share passwords with family, and sync your details across your Apple devices.

How the RevOps team at Tines uses Tines: Automating lead routing, enrichment, and assignment

At Tines, we use our workflow orchestration and AI platform to power our mission-critical processes, and the Revenue Operations team is no exception. In this post, we’ll share how we use Tines to automate a key part of our go-to-market motion: lead management. The workflow we’re sharing powers every inbound lead we receive, whether it comes from a demo request, a webinar sign-up, or a bulk CSV upload from the marketing team.