Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Jared Atkinson, CTO at SpecterOps, joined Defender Fridays to discuss detection prioritization via the BloodHound attack graph.

Discover the chilling details of the Nx “s1ngularity” supply chain attack. On August 26, 2025, the massively popular Nx npm package, with millions of weekly downloads, was compromised with credential‑harvesting malware.

A data breach doesn’t just cost money — it costs customers. Trust is hard to win and easy to lose, and cyberattacks often push loyal customers to walk away. In this short video, we explore how cyber incidents lead to customer churn, the hidden cost of lost trust, and why protecting sensitive data is critical to retaining your customer base. Watch now to learn: How cyberattacks impact customer trust and loyalty.

HTML injection is a type of attack where malicious HTML code is inserted into a website. In this video, we'll explain what HTML injection is in detail, how it can impact your website's security & how to stay secured. Stay informed and protect your online presence!

This demo video showcases Xworm attacks and Splunk detections finding the different ways it executes on an OS.

Are your passwords strong enough to keep hackers out? Cybercriminals use attacks like brute force, credential stuffing and keyloggers to steal your sensitive information, but a password manager can stop them in their tracks. In this video, we’ll show you how a password manager protects your account.

Explore the latest ransomware statistics and emerging cyber threats in Forescout Research – Vedere Labs’ 2025 H1 Threat Review. This video breaks down key findings from January to June 2025, highlighting persistent trends, evolving attack patterns, and the vulnerabilities organizations must address.

Watering hole attacks can compromise your entire organization by targeting frequently visited websites. Watch this video to learn how watering hole attacks work, the warning signs and best ways to prevent them.

Retailers have become prime targets for account takeover. Loyalty balances, stored cards, and digital wallets represent liquid assets, often guarded by weaker controls than financial accounts. Attackers exploit credential reuse, phishing infrastructure, and automation to scale these intrusions. Reported retail ATO cases in the UK rose 96% year over year (Action Fraud, 2023). The following five breaches illustrate how large brands across loyalty, e-commerce, and digital wallets were compromised, and how real-time, in-session defenses could have altered the trajectory.

Defending Against WAF, API, and DDoS Attacks In this video from SourceForge, Carlo Alpuerto of A10 Networks explains the "outside-in" protection philosophy behind ThreatX. He uses the metaphor of a castle wall, stating that the defense focuses on who and what is attacking it, rather than what is behind it. Alpuerto details the flexibility of the A10's ThreatX solution, which can be deployed in various hybrid scenarios, including on-premise physical or virtual environments, as well as different cloud environments like AWS, Azure, and GCP.

Inside the SonicWall SSLVPN Attacks In this week’s episode of The 443, Marc Laliberte and Corey Nachreiner break down: The recent SonicWall SSLVPN exploits What we know so far and how attackers are getting in The risks for organizations relying on vulnerable VPN gateways Plus: a WinRAR zero-day and a new ChatGPT vulnerability you should know about.

Defending Against WAF, API, and DDoS Attacks In this SourceForge video, Carlo Alpuerto of A10 Networks shares insights on how ThreatX protects WAF, API, DDoS, and bot attacks, processing all the information within a single database. Alpuerto highlights the platform's ability to apply these protections and actionability, showcasing how users can create and manage specific rules. He also notes that the ThreatX security operations center (SOC) team curates these rules daily, utilizing threat intelligence, CVE notifications, and zero-day news to provide comprehensive, up-to-date protection.

This video explores the current and future state of zero day vulnerabilities and cyber attacks which have been on the rise in 2024 and 2025.

Bank account takeover fraud is a growing global threat, costing financial institutions and customers billions each year. Attackers are refining their tactics, blending phishing, credential stuffing, and mobile malware to bypass traditional defenses. For banks, the stakes are high: a single breach can erode customer trust and regulatory standing overnight. We break down five of the most impactful account takeover attacks in recent years, examining what happened, how it happened, and how Memcyco’s real-time, browser-level, and mobile-layer protections could have mitigated the damage.

An injection attack is a type of cyberattack where an attacker sends malicious input into a vulnerable application to manipulate its behavior. Common examples include SQL injection, Command injection, and HTML injection. Learn how attackers exploit input fields, the risks involved, and basic prevention methods to keep your systems secure.

This week on the podcast, we discuss some recent research into a new zero day vulnerability in the popular WinRAR utility under active exploit. After that, we give a round up on everything we know about the SonicWall SSLVPN attacks from the last few weeks before ending with a review of a new ChatGPT vulnerability. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.