Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Publications

The business value of API security

Securing your APIs is no longer a luxury, but it shouldn't be viewed as just a necessary burden either. Protecting your APIs opens the door to real business value including: Download this eBook to explore the business results customers are uncovering as they embark on their API security journey and how to quantify the value of API security in your organization.

Mapping the MITRE ATT&CK Framework to API Security

API attacks include many of the tactics, techniques, and procedures (TTPs) identified in the MITRE ATT&CK framework. This white paper analyzes and maps three common API attack scenarios to the TTPs found in the MITRE Enterprise Matrix. By understanding how the MITRE ATT&CK TTPs relate to API security threats, security leaders can: Download now to learn how to defend against API attacks by leveraging this well-known security framework.

Comprehensive Anti-Phishing Guide

Spear phishing emails remain a top attack vector for cybercriminals, yet most companies still don't have an effective strategy to stop them. This enormous security gap leaves you open to business email compromise, session hijacking, ransomware and more. Don't get caught in a phishing net! Learn how to avoid having your end users take the bait. Roger Grimes, KnowBe4's Data-Driven Defense Evangelist, will cover techniques you can implement now to minimize cybersecurity risk due to phishing and social engineering attacks.

Top 10 Cyber Security Best Practices for SMBs

This white paper provides valuable information for small and medium-sized businesses (SMBs) as it relates to implementing security best practices as well as achieving compliance requirements. SMBs can use the information provided in the white paper to develop a roadmap to a mature information security program.

The Top 10 Critical Pentest Findings in 2022

We live in a world where nearly everything can connect to the internet. While this is one of the greatest times in technology, it also brings an overwhelming amount of cybersecurity threats and challenges. CISOs and IT teams are pushed to the limits of being able to adequately and quickly protect their customers from emerging cyber threats. Cybercrime continues to increase by 15% year over year; costing the U.S. 6.9 billion just in 2021. By 2025 cybercrime will cost the entire world 10.5 trillion annually.

2022 seems to be on target for the lowest year of reported breaches by large US corporations

The number of data breaches reported in the first 6 months of 2022 has put this year on track to be the lowest year of reports in the last 5 years for large US corporations. By looking at the rate at which data breach events have been reported so far this year, we predict that the number of events reported is expected to be 15-20% of the number of breaches reported in 2021

Importance of Insurance-Validated Risk Models to Quantify Cyber Risk

By its nature, cyber risk is dynamic. New events happen and evolve all the time, making it difficult for enterprises to financially quantify their financial exposure to cyber attacks. Around two years ago, for example, distributed denial-of-service (DDoS) attacks were making headlines, and now ransomware has come into heightened focus. It's reasonable to believe that other types of attacks will emerge in another two years and continue to change thereafter.