Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Online Scams Are Shortening Their Cycles and Making More Money

New analysis of blockchain activity shows scammers are needing less time to obtain crypto payments and are seeing higher payoffs per scam. I continue to repeatedly cover breakdowns of cybercrime activity from the folks at Chainalysis because it represents an unbiased view that some security vendors may inherently have (because their data is based on what their solutions do and don’t discover).

GitLab Patches Critical SAML Authentication Flaw: Protect Your Systems from Exploitation

In today's fast-paced digital landscape, security vulnerabilities are constant concerns for organizations that rely on cloud-based services and distributed systems. Recently, GitLab addressed a critical security flaw that affected both its Community Edition (CE) and Enterprise Edition (EE). This flaw, tracked as CVE-2024-45409, has been categorized as a critical vulnerability with a CVSS score of 10.0, the highest possible score, signifying its severity.

The Rising Cost of Insecure APIs and Bot Attacks: Global Firms Face $186 Billion in Losses

In the evolving landscape of digital threats, two growing concerns are proving costly for organizations worldwide: insecure APIs and bot attacks. A recent report highlights that these vulnerabilities have escalated dramatically, with global firms suffering financial losses between $94 billion to $186 billion annually. The exponential rise in API adoption, combined with AI-powered bot attacks, has created a perfect storm for cybercriminals to exploit.

Chicago API Security Summit 2024

Earlier this week we had the pleasure of hosting a regional API Security Summit in Chicago (well, actually in Lombard). These summits bring together the local cybersecurity community for half-day of API Security-focused content, including expert speakers and panelists. While this isn’t the first time we’ve organized an event like this, it was memorable for the quality of content and participants.

What is an Information Security Management System (ISMS)?

If you’ve spent any length of time reading about the internationally accepted security framework laid out in ISO 27001, you’ve likely come across the term ISMS or Information Security Management System. You may wonder, though; what is the ISMS specifically, how do you set one up, and what does it do for your business? Let’s talk about it.

How to Prevent Data Exfiltration

When someone steals important information, usually with the intent of misusing it, the process is called Data Exfiltration. The information can be anything from your customers’ data and financial records to intellectual property. Data Exfiltration otherwise known as Data theft or data exportation refers to the unauthorized transfer of data from a computer or network.

Common Telegram Scams To Be Aware Of

Telegram is a messaging platform people use to communicate in large groups or broadcast messages in channels. Some common scams on Telegram include fake channels, tech support scams, phishing scams and cryptocurrency scams. The consequences of falling for these scams could include losing money, having your device infected with malware or even having your identity stolen. Continue reading to learn the seven most common types of scams on Telegram so you can avoid falling victim to these scams.

Can You Get Scammed on Cash App?

Yes, you can get scammed on Cash App in a variety of ways, including cash flipping, accidental payments and phishing messages. Cash App scams are harmful because they can swindle you out of money, steal your personal information and even gain access to your Cash App account. Continue reading to learn more about Cash App, several of the most common Cash App scams and how you can avoid becoming a victim of them.