Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

EP 51 - Balancing Innovation and Security in FinTech

In this episode of Trust Issues, host David Puner interviews Eric Hussey, SVP, Chief Information Security Officer (CISO) at Finastra, a leading provider of financial software solutions and services. Hussey shares his insights on the evolving role of the CISO, the challenges of keeping up with new and evolving cybersecurity regulations, and the importance of balancing innovation with security in the FinTech space.

Freeing the UK Public Sector from Legacy IT debt

As the UK cybersecurity sector prepares to meet at CyberUK next month, I have been reflecting on the conference’s theme–Securing an open and resilient digital future–and what might be the barriers to such a vision. One of the biggest challenges is doubtless the hefty legacy IT in the UK’s public sector.

What is Fraud Monitoring, and 5 Ways to Tell if You Need It

Best-selling writer Maria Konnikova once wrote, “Fraud thrives in moments of great social change and transition.” These words ring truer than ever as additional aspects of business and everyday life move swiftly online. Whether you think about eCommerce, remote work, online banking, or digital government services, the opportunities for fraudsters continue to multiply. The online world currently creates such a fertile ground for fraudulent activity that U.S.

Privacy vs. Mobile Security: Why You Don't Have to Choose

When it comes to how employees get work done, personal devices are an ever-growing part of the equation. The 2023 Lookout State of Remote Work Security Report found that 92% of remote workers have performed work tasks on their personal mobile devices. While putting security controls on employer-owned devices is a no-brainer, the increasing overlap of personal with professional means that organizations need to think about how to secure employee-owned devices that are being used for work.

Security Best Practices in the Web Development Life Cycle

From the backend developer's perspective, we have learned that addressing security at every phase of the web development life cycle can significantly mitigate risks and protect both data and infrastructure. Here follows a detailed walkthrough of security best practices across the stages of web development, from planning to deployment and maintenance. It is important to work with cybersecurity-minded web developers who take security seriously throughout the web development life cycle.

Outpost24 Introduces Application Security Expert Service to Eliminate False Positives

Outpost24 is pleased to announce the launch of our bespoke application security service, DAST Expert. With this innovative offering, organizations gain access to in-depth analysis of application security scanning results, eliminating false positives and enabling you to prioritize remediation efforts more effectively.

Enabling More Precise Evaluation of Email Security with DMARC

Email is a well-known and widely used attack vector for malware distribution, phishing, and many other types of threats. For this reason, we evaluate certain email security practices as part of the Diligence category of risk vectors used to calculate Bitsight Security Ratings. On April 30, 2024, we added a new email security evaluation focused on the use of Domain-based Message Authentication, Reporting, and Conformance (DMARC) records.