Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

July 2023

5 Things Everyone Needs to Know About GRC

Over the following years, the costs associated with cybercrime, projected at $10.5 trillion annually by 2025, will exceed the estimated worldwide cybersecurity spending—$267.3 billion annually by 2026. Leadership needs to change its perspective on managing cyber risks instead of just spending more money to match the losses incurred.

Ransomware Trends 2023, Q2 Report

The ransomware industry has been a prominent player this quarter, causing significant impact and affecting numerous organizations globally. With its widespread threat, the industry has successfully claimed 1386 victims. The industry is feeling increasingly impacted by ransomware as many critical vulnerabilities were discovered this quarter. Additionally, the emergence of new groups, both from the end of 2022 and during this quarter, has contributed to the industry’s growth.

New RAT: The Discovery of RevolutionRAT

The InfoStealer and remote-access-tools (RATs) markets constantly provide us with new products. The Cyberint Research Team discovered a new RAT that is claiming to be the next popular threat against organizations and individuals worldwide. With fairly interesting PR and marketing methods, RevolutionRAT seems to be gaining attention with a growing Telegram community after only a few days of operation.

Guide to User Access Review: What Is It, Best Practices, and Checklist

Every company has workers that have been there from the beginning and worked in every department. Knowledge of the company’s processes makes them valuable employees, but they can also access and put at risk lots of sensitive data. Regular user access reviews can help you mitigate this risk and safeguard your critical assets. Regularly reviewing user access is an essential part of access management.

Bugged by vulnerabilities? This is what you need

Twenty-five percent: Any idea what this percentage is referring to? Let’s take some wild guesses: A five-year CAGR of your investments? Your yearly salary hike? If any of your guesses were remotely close to these happy responses, we’re sorry to break your heart! This percentage depicts the rise in the number of identified vulnerabilities in 2022 over the previous year. 2022 saw an alarming spike of 25% in identified vulnerabilities, the count rising to 25,227 from 20,171 previously.

Is PAM dead or just evolved?

Privileged Access Management (PAM) plays a critical role in ensuring the security and integrity of organizational systems and data. The traditional approach to access management, known as Role-Based Access Control (RBAC), has faced challenges in keeping up with the dynamic nature of modern organizations. As businesses evolve and employees require timely access to resources, it becomes crucial to rethink access management strategies.

The 443 Podcast - Episode 249 - Q1 2023 Internet Security Report

This week on the podcast, we cover WatchGuard Threat Lab's Internet Security Report for Q1 2023. Throughout the episode, we'll discuss the key trends for cyber threats impacting small and midsize organizations globally including the top malware and network attach detections as well as a look specifically at the endpoint. We round out the episode with key defensive takeaways you can take back to your organization to defend against these threats.

GitGuardian Protects Teams From Closing Incidents With Valid Secrets

GitGuardian puts safeguards in place in order to help busy cybersecurity teams work smarter and safer, such as preventing incidents with detected valid secrets from being accidentally resolved. It is one more way GitGuardian can help you improve your secrets management posture.

How to Use a Maturity Model in Risk Management

A crucial part of building a robust and effective enterprise risk management (ERM) program is to perform a periodic review of your organization’s risk management activities. This assessment process is best accomplished using an established risk maturity model, an essential tool to plan and mitigate enterprise risk. A risk maturity model (RMM) is an assessment tool focused on your organization’s risk culture and risk management program.

What is a DevOps Toolchain and 7 Reasons to Implement it Now

DevOps teams are one of the most essential links in the software development chain. It seems like they have a hand in everything that takes place in your CI/CD pipeline, from designing and building new environments to managing and testing existing configurations. It’s no wonder that 40% of DevOps engineers report work related stress, many of them feeling their skills are insufficient. But are they missing the required skills, or do they need the right tools to make DevOps work more manageable?

How Long Would it Take a Cybercriminal to Crack My Password?

Depending on how you create your passwords, such as the length or including letters, numbers and symbols, the time it would take a cybercriminal to crack it varies. Understanding what makes it easy for cybercriminals to crack your passwords is critical to keeping yourself safe from becoming a victim of this type of attack. Read on to learn how long it would take to crack your password and what you can do to strengthen your passwords so they’re not easily cracked by a cybercriminal.

Astra Review - How Rebrandly Uses Astra for Continuous Pentests

Established in 2015 by David De Guz, Rebrandly provides a holistic link management platform to create substantial touchpoints between brands and their customers. Embracing the assets links to every company, Rebrandly’s link management services help brand, track, and share short, catchy URLs with customized domain names.