Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Blogs

The Real Cost of Cryptomining: Adversarial Analysis of TeamTNT

TeamTNT is a notorious cloud-targeting threat actor, who generates the majority of their criminal profits through cryptojacking. Sysdig TRT attributed more than $8,100 worth of cryptocurrency to TeamTNT, which was mined on stolen cloud infrastructure, costing the victims more than $430,000. The full impact of TeamTNT and similar entities is unknowable, but at $1 of profit for every $53 the victim is billed, the damage to cloud users is extensive.

Introducing Tines Labs

Tines empowers anyone to automate their manual work, regardless of complexity, without writing a single line of code. Many teams starting on their SOAR journey often don't know what processes can be automated and find it challenging to translate their manual work into software-based solutions. In cybersecurity, automating repetitive processes at scale is a relatively new idea with little public research to support it.

Traditional vs Digital Onboarding- Benefits of Online Customer Onboarding

According to a survey, due to the impact of the rupee depreciation and lower overall expenditure, financial institutions are attempting to optimise their finances as much as possible, and 83% of banks globally are focused their efforts on cost optimization.

Inside the Mind of a 'Rat' - Agent Tesla Detection and Analysis

Agent Tesla is a remote access trojan (RAT) written for the.NET framework that has knowingly been in operation since 2014. Threat actors behind this malware have leveraged many different methods to deliver their payload over time including macro enabled Word documents, Microsoft Office vulnerabilities, OLE objects and most recently, compiled HTML help files.

How Do You Know Which Data Room Is Right for Your Needs?

There are hundreds of data room vendors operating in the billion-dollar virtual data room market. It isn't difficult to understand that all the virtual data room providers may not be offering up-to-the-mark services. Some may lack in the data security department, while others may not be good in document management. In fact, the changing dynamics of different business sectors also demand customized solutions. That's why even high-end online data room software may not be what you need for your business or personal use.

Password attacks: How to combat them

“Treat your password like your toothbrush. Don’t let anybody else use it, and get a new one every six months.” – Clifford Stoll, Astronomer and engineer This identity security week, it’s important to understand the importance of passwords in cybersecurity, how easily they can be compromised if you are not careful, and how ManageEngine ADSelfService Plus helps fortify your passwords and enhance your organizational security.

How to Create An Incident Management Playbook

When everything is going well, it's pretty easy to plan and manage routine activities in any business process. But stress kicks in when we encounter an unexpected incident that risks radically damaging the functioning of the organization. It is quite difficult to decide what step to take under intense stress. An unexpected incident that breaks through the barriers of the cybersecurity posture can cause all digital functions of the organization to stop.

Turns out 78% of reported CVEs on top DockerHub images are not really exploitable

Similarly to our previous research on “Secrets Detection,” during the development and testing of JFrog Xray’s new “Contextual Analysis” feature, we wanted to test our detection in a large-scale real-world use case, both for eliminating bugs and testing the real-world viability of our current solution.