Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

SecurityScorecard Identifies Infrastructure Linked to Widespread MOVEit Vulnerability Exploitation

New disclosures regarding the widespread exploitation of CVE-2023-34362, a new vulnerability affecting the MOVEit file transfer software, and the Cl0p ransomware group’s claim of responsibility for its widespread exploitation and the resulting data theft, have continued in the weeks since the vulnerability’s original publication.

Cloud security study reveals: over 50% of system failures are caused by human error and mismanagement

The past few years have witnessed a rapid surge in the use of SaaS applications across various industries. But with this growth comes a significant challenge: managing security and assessing risk in application connectivity.

A Warning for Startups and Zombie Companies

In this video, we delve into the struggles faced by businesses when overwhelmed with requests for help. The pressure to meet immediate demands becomes a burden when upskilling the staff proves to be a challenge. Despite our best efforts, the looming threat of a "Sticky Wicket" becomes apparent, especially as major players in the market start to fail and lay off their employees due to overextension. Join us as we discuss the concept of zombie companies and how low margins and excessive debt can hinder innovation and expansion.

CISOs and cybersecurity in an economic downturn: do more with less

The financial outlook for the rest of 2023 and 2024 is far from cheery, and economic uncertainty is affecting everyone and everything, including the cybersecurity sector. Security budget cuts or freezes are the course many organizations are tempted to take in this financially precarious situation. Conservative spending is a natural response to the present economic downturn and a possible recession knocking on our doors, implying fewer clients, lower profits, and higher costs.

Reddit and Extorted It: OpenAI Leaks and Paying for Ransomware?

Join Bill Carter and Robin Johns as they talk about the latest and greatest Cybersecurity topics and incidents happening across our digital landscape. In this episode we take a look at how Reddit has dealt with a recent data breach leading to personal information theft, and a hefty $4.5m demand to not leak the information, as well as how the OpenAI foundation has 100,000 ChatGPT user credentials available for sale on the dark web.

How to Boost Confidence in Your Open Source Security with Mend Smart Merge Control

Modern applications are hugely dependent on open-source software. 80 percent of most organizations’ apps and code base is now open source, in some cases more. While this is great for swift development and innovation, it increases the possibility of vulnerabilities arising that bad actors can exploit, and it expands the potential attack surface.

Sponsored Post

Why Compliance Monitoring Is Critical for Your Business: Benefits and Best Practices

As regulatory requirements continue to evolve and data breaches become more common, businesses are under increasing pressure to maintain compliance with industry standards. Compliance monitoring is a crucial aspect of this process, enabling organizations to identify and address potential risks before they lead to costly violations or incidents.

The Role of Compliance in Mitigating Identity Theft Risks

In the digital age, identity theft poses a pervasive threat that organizations, regardless of their size or sector, must relentlessly combat. This insidious form of cybercrime involves the malicious exploitation of sensitive and confidential data, carrying grave implications for any organization. The consequences of a single breach can encompass financial losses, irreparable damage to reputation, and the imposition of regulatory penalties.

Debunking the Misconception That CRQ Requires a Lot of Data Collection

Cyber risk quantification (CRQ) can be an invaluable tool. The ability to put a number to cyber risk aids in communicating with board members, planning strategic investments, calculating the return on investment of cybersecurity spending, and right-sizing cybersecurity insurance coverage. However, many organizations avoid taking advantage of CRQ due to some common misconceptions.