Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Unified Identity - look for the meaning behind the hype!

If you've listened to software vendors in the identity space lately, you will have noticed that "unified" has quickly become the buzzword that everyone is adopting to describe their portfolio. And this is great! Unified identity has some amazing benefits! However (there is always a however, right?) not every "unified" "identity" "security" "platform" is made equal.

The Complete Guide to Data Detection and Response (DDR)

In the 21st century, the lifeblood of several multi-billion dollar corporations is the data of their users they possess and how they go upon it, whether it be including new policies benefitting the users of their platform, or finding more aspects of data they can take to their advantage to increase their profit margins ever so slightly? All of the above requires data in the baseline.

HIPAA Compliance in the Age of AI - A Comprehensive Guide

The healthcare landscape is undergoing a transformative journey as it intersects with the mighty realm of artificial intelligence (AI). This comprehensive guide navigates the intricate dance between compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the increasing integration of AI in healthcare. In the evolving tapestry of medical practices, AI emerges as a pivotal player, influencing patient care and administrative processes.

Securing Your Cloud Infrastructure with Azure & Tines

In the third instalment of "Tines, securing your cloud infrastructure" we look at two stories designed to save money and resources and close potential security gaps in your Azure environment. Firstly, we'll address the task of 'Updating groups assigned to a user in Azure Active Directory' which allows admins to update a user's group membership in Azure Active Directory. This is essential for adding extra security to accounts flagged for suspicious activity and protecting the team & company as a whole.

Applying Vulnerability Intelligence to CVSS and SSVC Frameworks

In this presentation, we explore the intersection of vulnerability intelligence and prioritization frameworks such as CVSS and SSVC as a means for strategically and rapidly prioritizing vulnerabilities to stay ahead of exploitation risks. We delve into the process of applying real-time threat intelligence tailored to the vulnerability landscape to enhance decision-making, optimize resource allocation, and ensure a precise and proactive defense against cyber threats.

4 Key Ways IT Leaders Can Build a Strong Tech Team

IT leaders play a significant role in the success of a tech company. IT leaders are key persons for driving digital transformation, aligning IT with business strategy, fostering innovation, managing IT talent and imperative change agents within an organisation. Life has taken a different course post-COVID-19 pandemic and has resulted in a myriad of changes in almost every aspect of life, even in the lives of IT leaders.

Top 8 Cybersecurity Trends for 2024

In 2023, cyberthreats increased and diversified, resulting in increased security challenges for organizations around the globe. Meanwhile, AI greatly increased its presence in the realm of cybersecurity. It’s time to look ahead and focus on the anticipated cybersecurity threats and trends in 2024. What can we expect from threat actors and security specialists in the upcoming year? Read on and find out!

What is XML External Entity, How to Find XXE Vulnerabilities and Patch Them

An XXE vulnerability is a security vulnerability that allows attackers to access sensitive data or execute malicious code in a web application. This happens when the application accepts XML input from an untrusted source and doesn’t properly validate it. An attacker can exploit this vulnerability by crafting a special XML input that includes a reference to an external resource (like a file or URL) that they control.