Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Don't Let Your AI Be the Next Log4j

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Ransomware Strikes : Actionable steps Minute 20-60 (Part 3)

In Part 3 of our Ransomware Strikes series, We are going to cover the important steps that one should take within the first 20 minutes to the interval of 60 minutes of a ransomware attack to preserve vital evidence and ensure an effective response. Global ransomware damage costs are projected to reach $20 billion annually by 2025, up from $5 billion in 2021. Organizations of all sizes are vulnerable; in 2023 alone, over 60% of organizations reported experiencing a ransomware incident.

Securing Public Institutions with Cloudflare One

Florida’s colleges, universities, and public agencies are under pressure to manage growing cyber threats while supporting hybrid access and stretched resources. Join Tom Coffey, Senior SASE Specialist at Cloudflare, to learn how organizations like yours are adopting Zero Trust and SASE with Cloudflare One to simplify security, reduce costs, and improve performance.

How to Build a Security Team That Actually Enables the Business with Olivier Busolini

In this episode of The Connectivity Cloud Podcast with Cloudflare, host Mark Dembo is joined by Olivier Busolini, Group Head of Information Security at Mashreq, to explore how cybersecurity leadership has transformed from a purely technical function to a strategic business partnership.

The future of the digital estate: Automomous Endpoint Management | Tanium & endpointX

In this TechMonitor vodcast, brought to you in partnership with Tanium and endpointX, we dive into the evolving world of autonomous endpoint management (AEM). Join Dan Jones (Senior Security Advisor, EMEA at Tanium) and Dan Stead (Director at endpointX) as they explore: Whether you're in the public or private sector, this conversation offers valuable insights into how to secure and streamline your enterprise with modern tools.

Developers: Build Trust, Foster Security Culture, Stay Updated! #developers #appsec

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Why Identity Threats Are Harder to Detect

When a single identity is linked to multiple accounts across your environment, visibility gaps can occur, opening opportunities for attackers to exploit. This risk is especially high for executives and privileged users with access to your most sensitive data. In this clip, our expert Tyler Reese explains why identity correlation is essential for proactive threat detection and ITDR. Learn how identity mapping and account cataloging enhance SOC visibility and help prevent cross-account attacks.

July 7, 2025 Cyber Threat Intelligence Briefing

This week’s briefing covers: Critical Sudo Vulnerability Allows Priv Esc to Root The flaw arises from unsafe handling of the --chroot (-R) option, where sudo processes user-provided configurations (including nsswitch.conf) from within the chroot environment before validating user privileges. This allows a local attacker to construct a malicious chroot with crafted NSS configuration that forces sudo to load attacker-controlled shared libraries as root, effectively bypassing authentication.