Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

What is Fraud Monitoring, and 5 Ways to Tell if You Need It

Best-selling writer Maria Konnikova once wrote, “Fraud thrives in moments of great social change and transition.” These words ring truer than ever as additional aspects of business and everyday life move swiftly online. Whether you think about eCommerce, remote work, online banking, or digital government services, the opportunities for fraudsters continue to multiply. The online world currently creates such a fertile ground for fraudulent activity that U.S.

Privacy vs. Mobile Security: Why You Don't Have to Choose

When it comes to how employees get work done, personal devices are an ever-growing part of the equation. The 2023 Lookout State of Remote Work Security Report found that 92% of remote workers have performed work tasks on their personal mobile devices. While putting security controls on employer-owned devices is a no-brainer, the increasing overlap of personal with professional means that organizations need to think about how to secure employee-owned devices that are being used for work.

Security Best Practices in the Web Development Life Cycle

From the backend developer's perspective, we have learned that addressing security at every phase of the web development life cycle can significantly mitigate risks and protect both data and infrastructure. Here follows a detailed walkthrough of security best practices across the stages of web development, from planning to deployment and maintenance. It is important to work with cybersecurity-minded web developers who take security seriously throughout the web development life cycle.

Outpost24 Introduces Application Security Expert Service to Eliminate False Positives

Outpost24 is pleased to announce the launch of our bespoke application security service, DAST Expert. With this innovative offering, organizations gain access to in-depth analysis of application security scanning results, eliminating false positives and enabling you to prioritize remediation efforts more effectively.

Identity risk management: What is it and how can you achieve it?

Risk. It’s more than just an infuriating board game from your childhood. And when identity risk is involved in your cybersecurity landscape – and it will be involved, since identity is one of the most easily accessible and most frequently attacked facets of your IT environment – the potential consequences of its compromise extend well beyond losing control of a fantasy continent on a game board.

Enabling More Precise Evaluation of Email Security with DMARC

Email is a well-known and widely used attack vector for malware distribution, phishing, and many other types of threats. For this reason, we evaluate certain email security practices as part of the Diligence category of risk vectors used to calculate Bitsight Security Ratings. On April 30, 2024, we added a new email security evaluation focused on the use of Domain-based Message Authentication, Reporting, and Conformance (DMARC) records.

Introducing ISO 42001 and NIST RMF Frameworks

While AI has created exciting new opportunities for business, it has created urgent questions around ethics, responsible use, development, and management. AI also introduces a new, and often nebulous, element of organizational risk. With the introduction of two frameworks, ISO 42001 and NIST AI RMF, companies can now implement, demonstrate, track, and build their responsibility and trust around AI. TrustCloud is very pleased to announce that we support both ISO 42001 and NIST AI RMF.

TrustCloud Product Updates: April 2024

You know us: Every month we’re cooking up something new! Here are the updates that hit TrustCloud this month. TrustShare GraphAI will answer questionnaires for you with accurate, high-quality responses. TrustShare is getting a huge AI glow up. GraphAI’s generative AI capabilities will now fill in answers that are more context aware, more natural, and more accurate than ever before.