Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

October 2024

Taking the Pain Out Of Compliance for Legal and GRC Teams

The legal department plays a crucial role in enhancing enterprise security profiles. Historically, legal and cybersecurity departments have been siloed from one another in organizations both large and small. With security now a concern at the Board level, legal’s role in enterprise risk management – advising on threats and potential liability – must include the impact of data security threats.

What is Cyber Supply Chain Risk Management?

Cyber supply chain risk management (C-SCRM) is the process of identifying, assessing, and mitigating cybersecurity risks associated with an organization’s supply chain. Supply chains comprise multiple attack vectors, ranging from procurement tools to suppliers, developers, and third-party services. The complexity of this attack surface warrants a risk management strategy focused on supply chain risks as an extension to an existing third-party risk management program.

Risks and Mitigation of Malware: Strengthening Your Cybersecurity Posture

Malware risks and how to avoid them are important things for both people and businesses to think about. Threats to data accuracy, privacy, and financial security come from malware like viruses, ransomware, spyware, and trojans. Reports say that over 560,000 new pieces of malware are found every day around the world, showing that cybercriminals are always changing how they do things.

Beyond UEBA: Elevating Insider Risk Management with Behavioral Intelligence

Insider risk management is more critical than ever as human error and insider threats drive escalating security breaches. While many organizations have adopted User and Entity Behavior Analytics (UEBA) to monitor potential risks, relying solely on UEBA may fall short of the depth needed to stay ahead of these increasingly complex threats.

Why Risk-Based Vulnerability Management (RBVM) Increases Your Security Debt, and How You Can Fix It

In this Nucleus webinar, we take a deep dive into the practical challenges and strategies for managing security debt in the context of Risk-Based Vulnerability Management (RBVM). Scott Kuffer, co-founder of Nucleus Security and veteran in vulnerability management, explains how RBVM has shifted from a holistic risk reduction approach to a prioritization-heavy process that often falls short. He discusses why traditional methods lead to excessive security debt and demonstrates how aligning VM processes with product management principles can create more efficient, business-centric remediation.

Best Practices for Protecting Drone Data in Commercial Applications

Hey there, tech enthusiasts and masters of the skies! With the soaring ascent of drones in commercial applications, it's not just about nailing the perfect aerial shot anymore-it's also about locking down that precious data. Drones are busy bees, collecting loads of info that need protection just as much as any ground-based data trove. We've all heard the horror stories of data breaches resulting in hefty fines and reputational damage. That's why I'm here to guide you through the labyrinth of drone data security, helping your business keep its digital treasures under a virtual lock and key.

Understanding CVE-2024-47176: Mitigating CUPS Vulnerabilities

The Common UNIX Printing System (CUPS) is a widely used printing system on Unix-like operating systems, but recent vulnerabilities have exposed significant risks. The most critical is CVE-2024-47176, which affects the cups-browsed service by binding to the IP address INADDR_ANY:631. This configuration flaw causes it to trust all incoming packets, leading to potential remote code execution when interacting with malicious printers. This vulnerability is part of a chain of exploits, including.

Inside a North Korean Phishing Operation Targeting DevOps Employees

Sophisticated threat actors are increasingly targeting organizations with tailored phishing campaigns. Recently, SecurityScorecard detected a similar attempt against our team—and stopped it in its tracks. We’re sharing our findings to support the InfoSec community and strengthen collective defenses against continually evolving threats.

The Job Offer That Wasn't: How We Stopped an Espionage Plot

In cybersecurity, transparency matters—because none of us are immune. Increasingly, we’re seeing threat actors hone in on specific organizations. When we detected the recent “Contagious Interview” campaign targeting one of our own, our team acted fast to stop it in its tracks. We’re sharing this story so others can see how easily these attacks unfold—and how quickly they need to be stopped to protect the community.

Cost of Ignoring Data Replication: Risks for Modern Businesses

Data replication allows businesses to operate efficiently. The process involves copying data files across multiple systems or locations. At its core, replication prevents downtime and ensures data is synchronized in case of accidental deletion. However, this move could expose your business to risks like data inconsistencies, data loss, limited scalability, and compliance issues. This article will discuss the cost of ignoring data replication for modern businesses.

Introducing the Risk Management Dashboard

The Keeper Risk Management Dashboard is a powerful feature of the Keeper Admin Console that provides comprehensive security posture information covering end-user deployment, utilization, cloud configuration, and event monitoring. This critical data helps administrators ensure that risks are remediated and compliance is enforced effectively.

Unlocking the Potential of GRC Tools: A Path to Strategic Risk Management

By James Rees, MD, Razorthorn Security In today’s complex cybersecurity landscape, Governance, Risk and Compliance (GRC) tools have become essential for organisations managing intricate security ecosystems. These tools are designed to centralise information, streamline processes and offer crucial insights into an organisation’s risk posture. However, as cybersecurity expert Jack Jones revealed when he joined me on a recent podcast, the reality often falls short of these ambitious claims.
Featured Post

What Security Teams Need to Know About the EU's NIS 2 Directive

The deadline to get compliant with the EU's NIS 2 Directive is here. And this isn't just a minor update from its NIS 1 predecessor-it's a major expansion that carries with it new challenges and obligations. The directive now covers a whopping 300,000 organizations, up from just 20,000 under NIS 1. Sectors like aerospace, public administration, digital services, postal and courier services, and food production are now included. Organizations are classified into "essential" or "important" entities based on size and criticality to the economy.

How to Overcome the Security Questionnaire Burden

If you’re on the frontlines of your organization’s cybersecurity department, you’ve likely found yourself burdened by security questionnaires. Whether you’re in charge of evaluating vendor responses or completing questionnaires yourself, it’s no secret these requests can be time-consuming for everyone involved. Well, what if this didn’t have to be the case?

New from Nucleus: Automating POA&M Management for Federal Compliance

Managing compliance in federal IT is a critical and complex task, especially when it comes to addressing findings from security assessments. One of the key tools to bridge the gap between requirements and the current state is the Plan of Action and Milestones (POA&M). Required by federal security frameworks like the Federal Information Security Modernization Act (FISMA) and NIST 800-53, POA&Ms are used to document security weaknesses, outline mitigation plans, and track their resolution.

LLM Prompt Injection 101

Prompt injection attacks exploit vulnerabilities in natural language processing (NLP) models by manipulating the input to influence the model’s behavior. Common prompt injection attack patterns include: 1. Direct Command Injection: Crafting inputs that directly give the model a command, attempting to hijack the intended instruction. 2. Instruction Reversal: Adding instructions that tell the model to ignore or reverse previous commands. 3.

Four Ways to Streamline Your Security Review Process

Security reviews of third-party vendors are now an essential element of an effective governance, risk, and compliance (GRC) function. After all, there have been numerous examples in recent years of organizations with an otherwise strong security posture falling victim to threats that originated with supply chain partners. But whether you are on the sending or receiving end of a security review, completing the process can be time-consuming and inefficient.

How Accurate Asset Records Benefit Financial Decision-Making

Are you confident that your financial decisions are based on reliable data? If not, you are missing out on valuable insights that accurate asset records provide. Accurate asset records are not just numbers on a spreadsheet-they're the backbone of informed decision-making. Whether you're managing corporate assets or overseeing financial operations, the precision of your asset records can make or break your strategies. Let's explore how maintaining precise asset records can significantly boost your financial decision-making process.

Contract Risk Management Software: Your Secret Weapon for Safer Deals

Have you ever signed a contract that later turned out to be riskier than you thought? Maybe there were hidden clauses, or unforeseen penalties that took a toll on your business. If you've experienced this, you're not alone. Managing contract risks can be overwhelming, especially when you're juggling multiple agreements. But what if there was a way to minimize those risks-easily and efficiently? In this blog, we'll explore why it's essential, and how it can become your secret weapon for making safer, more profitable deals.

What is UPnP? And Why is it Still a Security Risk?

In this video, learn what UPnP is, what it does, use cases, why it's a security risk, and security measures you can take. Learn more about: Resources and social media: Transcript: Universal Plug and Play, or UPnP, is a way for all devices on a local network to discover and connect with each other automatically, rather than having to connect each device by manually entering protocols like TCP/IP, HTTP, or DHCP.

A trainer's take: "Training alone won't change behaviours"

I've spent over 35 years as a trainer in various capacities, so it might surprise you to hear me say that training alone isn't enough to change behaviours—particularly when it comes to security. This isn't just my opinion; it's a conclusion from our State of Human Risk Management in 2024 Report. To understand why training isn't the full solution, we need to delve into the field of human error. Mistakes—errors caused by wrongly applied knowledge—can often be corrected with training.

Web Application Security for DevOps: Site and Origin Dynamics and Cross-Site Request Forgery

This is a continuation of the series on web application security. If you haven't already read through part 1, this is a good time to go back. If not, let's move on and answer the question left hanging during our last installment: how do browsers know which site set the cookies in the first place? And what constitutes the same site?

Separating Hype from Reality in HRM

Human risk management (HRM) has become a more established category in recent years. This development signals a crucial shift towards enabling security teams to accurately quantify and manage workplace risks. With the rise of HRM, a variety of new technologies have also emerged on the market. However, how do you navigate the sea of buzzwords and shiny promises to pick the solution that's right for you?

Elevating Views of Risk: Holistic Application Risk Management with Snyk

As apps become more complex and development speeds up with DevOps, cloud-native tech, and AI, having a comprehensive approach to managing application risk is more important than ever. Traditional methods just aren’t cutting it anymore. Security teams are overwhelmed by vulnerabilities, and developers aren’t getting the guidance they need on what to focus on first. This gap between security and development is leaving apps more vulnerable.

What a 3-Year Plan to Cut Software Risks by 75% Looks Like

Organizations face an increasing number of software security threats that can compromise their sensitive data and disrupt business operations. To effectively manage these risks and enhance their security posture, it’s crucial for organizations to adopt modern application risk reduction strategies that not only mitigate potential vulnerabilities but also provide clear, actionable next steps and insights for reporting purposes.

How to Safely Integrate LLMs Into Enterprise Applications and Achieve ISO 42001 Compliance

Enterprise applications, whether on-premise or in the cloud, access LLMs via APIs hosted in public clouds. These applications might be used for content generation, summarization, data analysis, or a plethora of other tasks. Riscosity’s data flow posture management platform protects sensitive data that would otherwise be accessible to LLM integrations.

Addressing Cyber Risk and the Rise of AI

In this episode of CISO Conversations: EU Data Regulations, Pierre-François Guglielmi, EMEA Field CISO at Rubrik, is joined by Trish McGill, an Executive Subject Matter Expert for Cyber Security IT/OT at De Heus Voeders and Nobian, Brian Wagner, Chief Technology Officer at Revenir, and Tim Clements, Owner of Purpose and Means. Together, they explore the impact of cyber-attacks and data regulations on business resilience, particularly concerning critical infrastructure, and how these factors ultimately affect profits.

Healthcare IT Security and Compliance in 2024 and Beyond: A Comprehensive Guide

The healthcare industry remains a prime target for cyberattacks, with the growing adoption of digital health technologies escalating the risk. Hospitals and clinics, custodians of vast amounts of sensitive patient data, are particularly vulnerable. As the industry navigates the digital landscape, ensuring cybersecurity compliance is paramount to protecting patient privacy and maintaining operational integrity.

Security Awareness Isn't Enough - It's Time to Adapt

October 1st marks the start of Security Awareness Month. A global campaign launched two decades ago to improve cyber security awareness and equip people with the knowledge and resources they need to be secure online. But what impact has this campaign truly had in the workplace? Yes, it spotlights the issue and boosts high-level awareness of threats like phishing.

How to Optimise Your GRC Tools: Improving Value, Efficiency & True Risk Management

In this episode of Razorwire, we're joined by Jack Jones, creator of the FAIR risk model, to explore the complexities of Governance, Risk and Compliance (GRC) tools. We cut through the noise to deliver actionable insights on how to truly manage risk and improve the value and efficiency of your GRC solutions.

Complete Third-Party Risk Management Guide for 2025

Third-party risk management (TPRM) is the structured process of identifying, assessing, and mitigating risks posed by external vendors, suppliers, and service providers. These risks can include cyber threats, data breaches, regulatory violations, and financial instability, all of which can severely impact your organization’s security and compliance posture.

Exfiltration over Telegram Bots: Skidding Infostealer Logs

In recent years, Telegram has emerged as a popular messaging platform among cybercriminals, driven by its combination of simplicity, security, and efficiency. Telegram's encrypted messaging capabilities, real-time communication, and the ability to send large data files make it an ideal platform for cybercriminal activities, making it an attractive alternative to traditional underground forums.

SEBI's CSCRF Regulation

India's Securities and Exchange Board (SEBI) has introduced a new regulatory framework called the Cyber Security and Cyber Resilience Framework (CSCRF). The regulation aims to tighten cybersecurity and data governance for capital market participants. As cyber threats increase globally, the CSCRF is poised to create a stronger defense line for organizations operating in India’s capital markets.

How to Conduct a Cybersecurity Risk Assessment for In-Depth Insights

‍A cybersecurity risk assessment, or cyber risk assessment, is a standardized process that organizations have established along with their implementation of cloud-based technologies to discover the accompanying vulnerabilities and threats. These assessments leverage the available, relevant data to identify the likelihood of various cybersecurity events occurring along with the potential impact should they come to fruition.

AfterDarkMode Malware: What It Is and How to Mitigate the Risk

Now that AfterDarkMode malware is out there, internet threats are even more complicated and dangerous. That person who is sneaky and hard to catch has shown that they are motivated to get into systems and use weaknesses to their advantage. For businesses to be safe from the AfterDarkMode threat, they need to understand its plans, methods, and procedures and take steps to lower the risk. AfterDarkMode malware is a very advanced and sneaky threat that can take over computers without anyone noticing.

Meet SmartRisk Agent: Unlock Your New Human Risk Management

Depending on who you ask, between 70 and 90 percent of cyber risk has human error as the root cause. That's why Human Risk Management (HRM) is so important. And here is the next major advance in HRM. We're thrilled to announce the second version of our risk score architecture. It is so far advanced we have renamed—promoted really—our initial "Virtual Risk Officer" to SmartRisk Agent.

Frontline of Defense: Intelligent Robotics Transforming Threat Detection and Risk Management in High-Security Industries

In high-security environments in sectors like defense, aerospace, or critical infrastructure, safety, and operations are intertwined with advanced technology. Intelligent robotics are at the forefront of this revolution, boosting the capability of these sectors to detect threats and mitigate risks with unprecedented accuracy and speed. In this article, we'll discuss a future where the protection of high-value assets is bolstered by human expertise and robotic systems that offer a new dimension of vigilance.

Nucleus Security Positioned as a Growth Leader in Frost Radar: Application Security Posture Management, 2024

In September 2024, Frost & Sullivan released its Frost Radar: Application Security Posture Management (ASPM), 2024, highlighting the leaders in this rapidly growing market. We’re proud to be recognized as a top player, reflecting our strong growth and impact in the ASPM space. Our customers use Nucleus to achieve a comprehensive and unified application security posture.

Introducing The Riscosity AI Governance Suite

Clients can empower their employees to securely leverage any browser-based AI tool. The Riscosity browser extension will scan and block prompts with sensitive information in real time. Admins can use the intuitive Riscosity dashboard to set RBAC rules and keep a pulse on any AI tools being used – including any attempts to share sensitive information. The bottom line… we’re providing an AI firewall for your company, without the headaches of difficult deployment.

Enhancing Enterprise Risk Management With Cyber Risk Quantification

‍Managing risk is a part of life, whether it's in the personal, private, public, or professional spheres, but often, these various areas of vulnerability are addressed in isolation. In the corporate world, too, the various components of business risk were once tackled as mutually exclusive, with each departmental leader focusing on their sole area of expertise.

How employee training helps reduce cyber attack risk

In today's digital world, cybersecurity is no longer just a concern for IT professionals-it's essential for everyone in an organisation, from top executives to entry-level employees. The main reason for this is that humans are often the weakest link in security, but they can also become the strongest defence if properly trained. That's why businesses need to prioritise cybersecurity education for all staff members.

Securing Our World in 2024 With Cyber Risk Quantification

‍Security is no longer solely confined to the physical, dependent on bodily actions. With the advent of the internet, the mechanisms necessary for safeguarding assets and even lives have expanded into the cyber realm, where the risks can be even more complex. Indeed, a single cyber event has the power to render hospitals nonfunctional, halt mass transportation, block financial transactions, and cause billions of dollars worth of damages.

Why you need risk-aligned cyber security to build resilience

Despite significant investments in cybersecurity technologies and services, many organizations remain vulnerable. One of the myriad reasons is the lack of alignment between cybersecurity strategies and specific risks each organization faces. This is where risk-aligned cybersecurity comes into play, ensuring that defenses are tailored to the unique challenges and threats an organization faces, ultimately building greater resilience.

What is Cloud Security? Best Practices, Challenges

Cloud security refers to the comprehensive set of measures and technologies designed to protect data, applications, and infrastructure within cloud environments. As more businesses migrate to cloud platforms, safeguarding these environments becomes critical. The shift to cloud brings efficiency, scalability, and cost-effectiveness, but given the rising trends of cyber-attacks, it also introduces new security challenges that must be addressed to ensure sensitive data remains protected.

GigaOm Radar Report 2024: Insights on Continuous Vulnerability Management

As organizations face increasingly sophisticated cyber threats, the importance of Continuous Vulnerability Management (CVM) continues to grow. GigaOm’s latest Radar Report for Continuous Vulnerability Management provides an in-depth analysis of the current landscape, offering a comprehensive look at the solutions and vendors leading the charge in this critical space. The report assesses a variety of platforms based on key criteria such as feature set, ease of use, performance, and innovation.

The Role of JWT Tokens in M&A Risks: What You Need to Know! #DocumentationMatters #apisecurity

Mergers and acquisitions often expose hidden risks, including unsecured JWT tokens and poor documentation practices. Learn why proper documentation and risk management are crucial to avoiding security issues during M&A.

Risks and Mitigation of Unpatched Softwares | SafeAeon Inc

In today's digital world, where everything is connected, software vulnerabilities are a constant threat to businesses of all kinds. Malicious people who want to steal private data, mess up operations, or cause financial harm can easily get into software that hasn't been updated and is full of security holes. If you don't update your software, terrible things can happen, like data breaches, ransomware attacks, system failures, and damage to your image.

What is Supply Chain Detection and Response?

Supply chain detection and response (SCDR) is a solution for supply chain incident responders that drives critical issue identification, vendor responsiveness, and time to incident resolution. SCDR solutions provide risk intelligence, AI-driven workflows, and collaboration capabilities to improve the security posture of your organization and your suppliers.

It's Here! The New Nucleus Security User Interface

At Nucleus Security, our goal has always been to deliver an intuitive and scalable vulnerability management platform. A critical part of this mission is ensuring that its user interface (UI) evolves to meet our customers’ needs. I’m pleased to announce that we recently rolled out an updated UI—an important first step in a series of planned improvements aimed at enhancing our users’ experience with the Nucleus platform.

Vulnerability Assessment VS Penetration Testing: What's the difference?

In cybersecurity, vulnerability assessment and penetration testing are often discussed together, but they serve distinct purposes in securing a network. Organizations looking to strengthen their cybersecurity defenses must understand the differences between the two, as well as when and how to use each. This blog explores the difference between vulnerability assessment and penetration testing, and why a combined approach can be essential in achieving the most robust security strategy.

Deduplicate Vulnerabilities with the Nucleus Platform's New CVEs Page

Vulnerability management is often a complex task, particularly when using multiple scanning tools or dealing with the constant flow of new CVEs. Different scanners can uncover the same vulnerability but provide different insights or look at different metadata, making it look like one vulnerability is several without the proper context. We are excited to introduce the Nucleus CVEs Page, designed to enhance how your organization manages vulnerabilities across projects.

Saudi Arabia's PDPL

Saudi Arabia's Personal Data Protection Law (PDPL), enacted in 2021, marks a significant step in regulating the processing of personal data in the Kingdom. The PDPL aims to protect individuals' privacy by setting out clear rules on how personal data can be collected, processed, stored, and shared. As more businesses undergo digital transformations, the PDPL holds companies accountable for safeguarding data and ensuring transparency in their handling of personal information.

Board Responsibilities for Data Security and Privacy

Corporate boards are tasked with ensuring that sensitive information—ranging from intellectual property (IP) and end-user information to sales statistics—is handled securely. As data becomes an ever-more valuable asset, so too do the risks associated with mismanagement.

How to Set Up and Run a Workable AI Council to Govern Trustworthy AI

As in many companies around the world, Bitsight leadership believes that adoption and innovation through the use of artificial intelligence (AI) capabilities is crucial to the future of our company. From the top down, our employees are continually on the hunt for ways to leverage AI to improve business outcomes and customer productivity.