Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Rising Threat of Cyber Warfare: Protecting Nations and Private Companies

Join us as we delve into the alarming reality of the Cyber Wolf, an ongoing phenomenon that extends far beyond the conflict in Ukraine. From nation-state actors to various global players, we are witnessing a significant increase in cyber warfare-related attacks and tests worldwide. In this gripping discussion, we explore the pressing question: it's not a matter of if, but when will this happen to us?

Octiga's New M365 Conditional Access Policy Baselines and Migration Process| Latest Release!

Hey there! In this video, I wanted to update you on the latest release from Octiga. We have introduced new conditional access policy baselines that offer more control over user inclusions, group and role inclusions/exclusions, and the ability to set a generalized template for conditional access policies.

Code Intelligence Finds New Vulnerability in protobufjs: CVE-2023-36665

As part of Code Intelligence's ongoing efforts to improve the security of open-source software it continuously tests open-source projects with its JavaScript fuzzing engine, Jazzer.js, in Google's OSS-Fuzz. Recently Code Intelligence uncovered a new Prototype Pollution vulnerability in protobufjs (CVE-2023-36665) using its newly integrated Prototype Pollution bug detector. The vulnerability puts affected applications at risks of remote code execution and denial of service attacks.

Top Tips: How hackers use emojis to infect your devices

Emojis are now the widely understood language of our digital world.These tiny icons that add color and life to our messages are designed to enhance online interactions by letting us express emotions and thoughts in an easy way. But hackers are seeing them as an opportunity to infect devices and exploit our personal data.

Understanding Amazon Security Lake: Enhancing Data Security in the Cloud

This year, Amazon Web Services (AWS), a leading cloud services provider, announced a comprehensive security solution called Amazon Security Lake. In this blog post, we will explore what Amazon Security Lake is, how it works, the benefits for organizations, and partners you can leverage alongside it to enhance security analytics and quickly respond to security events. Image source: Amazon.

SIEM Integration on the Indusface WAS

Indusface WAS integrates with all major Security Information & Event Management (SIEM) providers that integrate with Amazon S3. With this integration, you can push logs from Indusface WAS into leading SIEM providers like SumoLogic, RSA, Splunk, and McAfee. Given the complexity of modern architectures encompassing multiple security devices and environments, organizations increasingly rely on SIEM solutions.

What is Code Signing SDLC?

Today, an intricate web of tools, programs, and individuals collaborates to bring applications to life. This interconnected network, the software supply chain, encompasses the various entities and processes that shape the software development lifecycle (SDLC), including developers, dependencies, network interfaces, and DevOps practices. Given the diverse nature of these components, ensuring the security of each element becomes paramount.

Most Common Cybersecurity Challenges of Software Developers

The rapid advancement of technology in over 10-15 years has significantly impacted cybersecurity. With the ever-expanding cyber world, cybercriminals constantly adjust their tactics to exploit new vulnerabilities. As a result, software developers are now facing numerous cybersecurity issues that must be addressed to create a safe and secure cyberspace. In this guide, we are some of the most common cybersecurity challenges that software developers are currently facing.

Trustwave SpiderLabs Research: Cybersecurity in the Healthcare Industry

The Trustwave SpiderLabs team conducted a months-long investigation into the cyber threats facing the healthcare industry and has provided a roadmap displaying how threat actors conduct an attack, methodologies used, and what organizations can do to protect themselves from specific types of attacks.