Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Calico policies are a way to enforce network security at the pod level. This blog post will provide a comprehensive overview of Calico policies for Calico OS (Open Source) users. We will cover the basics of Calico policies, including what they are, how they work, and how to use them. We will also provide best practices for using Calico policies and examples of how they can be used in real-world scenarios.

In today’s era of digital transformation, organizations across the globe are under constant threat from a myriad of challenges ranging from cyber threats to human errors and natural disasters. Amazon Web Services (AWS) presents itself as a frontrunner in providing solutions to these challenges, but the true essence of resilience lies not just in adopting AWS, but harnessing its full potential.

Every company has a digital presence nowadays. While this brings numerous benefits for businesses, it also poses a number of risks. Cybercriminals are finding more and more ways to circumvent security measures and access data. If protection is not strong enough, the data of organizations, their customers, and partners could be compromised, with dire consequences for companies.

LevelBlue Labs recently discovered a new highly evasive loader that is being delivered to specific targets through phishing attachments. A loader is a type of malware used to load second-stage payload malware onto a victim’s system. Due to the lack of previous samples observed in the wild, LevelBlue Labs has named this malware “SquidLoader,” given its clear efforts at decoy and evasion.

Today, we work in the cloud, connect through countless devices, and rely on ever-evolving software. While offering immense opportunities, this interconnected technology landscape exposes us to a relentless barrage of cyber threats. Malicious actors constantly seek new ways to breach our defences, exploiting vulnerabilities in systems we often take for granted.

Healthcare organizations find themselves today at the forefront of a disturbing trend: a seemingly unending onslaught of data breaches. These nefarious incidents, far from being isolated occurrences, have emerged as a persistent and pervasive threat, one that demands immediate and comprehensive action to safeguard patient privacy and operational integrity.

The NIS2 Directive is the EU-wide legislation on cybersecurity that came into force in 2023, following rules introduced in 2016 (NIS). NIS2 expanded the scope of sectors and entities who need to (legally) comply with the framework. The increased scope aimed to cover the “most” critical sectors, which are vital for the economy and society, though are heavily reliant on IT.

In a time where digital transactions and online markets predominate, purchase scams have increased frequently as scammers develop ever-more sophisticated strategies to prey on consumers. This guide sheds light on the intricacies of purchase scams, focusing on common types, providing comprehensive strategies to safeguard against them, and offering real-world examples for a better understanding, particularly on popular platforms like Facebook Marketplace and fake online shopping websites.

In February 2022, the Center for Internet Security (CIS) released the CIS Microsoft Windows Server 2022 Benchmark v1.0.0, providing security best practices for establishing a secure configuration and hardening guide for Microsoft Windows. For automation of CIS benchmarks, Get in Touch. Following this release, CIS updated their recommendations for older operating systems, extending back to Windows Server 2008 where applicable. Below we discuss CIS Windows server 2022 hardening script we feel are critical.