Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Blogs

Meet the Research behind our Threat Research Team

The Sysdig Threat Research Team (TRT) is on a mission to help secure innovation at cloud speeds. A group of some of the industry’s most elite threat researchers, the Sysdig TRT discovers and educates on the latest cloud-native security threats, vulnerabilities, and attack patterns. We are fiercely passionate about security and committed to the cause. Stay up to date here on the latest insights, trends to monitor, and crucial best practices for securing your cloud-native environments.

Healthcare cyber security insights revealed in new Kroll report

While the top concern for healthcare cybersecurity professionals is credential access, the Kroll Threat Intelligence team finds that the healthcare industry is consistently targeted by ransomware groups using a combination of valid credential theft and the exploitation of vulnerabilities. These and other insights are discussed in the new Kroll report, The State of Cyber Defense: Diagnosing Cyber Threats in Healthcare.

Online Tutoring - A Key Tool for Building Your Future in IT Asset Management

In the swiftly evolving realm of information technology, IT Asset Management (ITAM) stands out as a critical discipline, ensuring that an organization's assets are accounted for, deployed, maintained, upgraded, and disposed of responsibly. As businesses increasingly rely on technology, the demand for skilled IT asset managers skyrockets. However, acquiring the specialized skills necessary for ITAM can be challenging through traditional education paths. This is where online tutoring bridges the gap, offering targeted, flexible, and comprehensive learning opportunities not readily available elsewhere.

Two-Factor Authentication and Password Managers: Layering Your Defenses

In a world where data breaches are no longer the exception but the norm, the adage "the best offense is a good defense" has never rung truer for digital security. Individual users and organizations alike are grappling with how to protect sensitive data from an ever-growing tide of sophisticated cyber threats. Layering your defenses through the combined power of two-factor authentication (2FA) and password managers is not just a recommendation; it's quickly becoming a critical necessity.

Fortifying Your Systems: 8 Construction Management Software Security Tips

You can't afford to build on shaky ground in the digital world. Your construction management and accounting software is at risk if it isn't secure. Protecting your business data is also about safeguarding your reputation. So, examine these eight essential security tips to help you fortify your defense, keep your software up-to-date, and ensure you're always ahead of cyber threats.

Trustwave SpiderLabs Reveals the Ransomware Threats Targeting Latin American Financial and Government Sectors

Ransomware-as-a-service (RaaS) threat groups are placing severe and continuous pressure on the financial and government services sectors in Latin America, according to data compiled by the elite Trustwave SpiderLabs team. RaaS is where developers working for threat actors manage and update the malware while affiliates carry out the actual ransomware attacks.

Enhancing Kubernetes network security with microsegmentation: A strategic approach

Microsegmentation represents a transformative approach to enhancing network security within Kubernetes environments. This technique divides networks into smaller, isolated segments, allowing for granular control over traffic flow and significantly bolstering security posture. At its core, microsegmentation leverages Kubernetes network policies to isolate workloads, applications, namespaces, and entire clusters, tailoring security measures to specific organizational needs and compliance requirements.

Palo Alto Global Protect Command Injection Vulnerability

On April 12, 2024, Palo Alto disclosed a critical vulnerability identified as CVE-2024-3400 in its PAN OS operating system, which carries the highest severity rating of 10.0 on the CVSS scale. This vulnerability, present in certain versions of Palo Alto Networks’ PAN-OS within the GlobalProtect feature, allows unauthenticated attackers to execute any code with root privileges on the firewall through command injection.

How to Migrate from FedRAMP Rev 4 to FedRAMP Rev 5

The stereotype of the government as a slow-moving behemoth is not ill-fitting, but when it makes adjustments and changes, it does so with deliberation and intent. An excellent example is the ongoing development and evolution of things like security standards. Technology moves much, much faster than the government can respond to or that even most businesses could adjust to without a significant investment or a time delay.

How Organizations Can Prevent Credential Theft

Credential theft is one of the most common methods used by cybercriminals to gain unauthorized access to an organization, according to Verizon’s 2023 Data Breach Investigations Report. Credential theft places organizations at a greater risk of data breaches, so steps must be taken to prevent it.