Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Decade-old critical vulnerability in Jetpack patched on millions of WordPress websites

Jetpack, an extremely popular WordPress plugin that provides a variety of functions including security features for around five million websites, has received a critical security update following the discovery of a bug that has lurked unnoticed since 2012. Jetpack's maintainers, Automattic, announced on Tuesday that it had worked closely with the WordPress security team to push out an automatic patch for every version of Jetpack since 2.0.

The Science of Behavioral Biometrics in UEBA Solutions

As the world becomes increasingly digital, cyber-attacks are becoming more sophisticated, and traditional security measures like firewalls and passwords are no longer enough to protect sensitive data. Fortunately, advancements in technology have given rise to User and Entity Behavior Analytics (UEBA), a behavioral biometrics-based approach that can effectively detect and prevent cyber threats. In this blog post, we will explore the role of behavioral biometrics in UEBA.

Maximizing Your Security With UEBA Integration | Logsign

Have you ever wondered how to detect and prevent cyberattacks that can evade traditional security solutions? Have you ever wished for a holistic and coordinated security strategy that covers all aspects of your network? If so, consider user and entity behavior analytics (UEBA) integration. In this blog post, we will explain the benefits of UEBA integration and how to manage and optimize UEBA integration.

A quick primer on LDAP injection

Lightweight Directory Access Protocol (LDAP) is an authentication mechanism for securing web applications. LDAP is popular because it's lightweight and scales easily — features that appeal to developers, but mean that LDAP databases often store large amounts of valuable information. This makes them an attractive target for attackers. Applications construct LDAP queries derived from user inputs to access and manipulate the information stored in LDAP databases.

How does phishing lead to ransomware attacks?

Cybercrime continues to rise — the 2022 Internet Crime Report produced by the FBI's Internet Crime Complaint Center (IC3) revealed that the number of complaints it receives annually has more than doubled since 2018. The potential loss from cybercrime has also grown significantly – between 2021 and 2022, it rose from $6.9bn to $10.2bn.

CrowdStrike Invests in and Partners with Prelude Security to Drive Continuous Security Testing and Validation for Our Customers

Managing security posture at scale is a significant challenge for global organizations of all sizes. With a rapidly expanding security estate and a global worker gap of 3.4 million, according to (ICS)2, it is imperative that the efficacy of defensive controls is maximized to combat sophisticated adversaries. In order to do so effectively, organizations must test their security controls on a continuous basis to uncover configuration gaps and areas of missing visibility.

Protecting Patient Data: The Importance of Cybersecurity in Healthcare

As digital transformation continues to shape the healthcare industry, it is crucial for healthcare organizations to prioritize cybersecurity. These organizations are entrusted with sensitive personal information from patients, making them a prime target for cybercriminals who steal, exploit or sell the data they acquire. As evidenced by a recent breach at MCNA dental which impacted 8.9 million patients.

Streamlining Digital Document Verification through OCR and Form Autofill

Document verification is a crucial process in various industries, ranging from finance and healthcare to government agencies and e-commerce. It ensures the authenticity of physical documents by cross-referencing them with reliable data sources. With advancements in technology, specifically Optical Character Recognition (OCR), and automation, document verification has become more efficient, accurate, and secure.

Celebrating CrowdStrike's New Network Detection Service "Powered by Corelight"

Several months ago, we announced that our strategic alliance partner CrowdStrike decided to use our Open NDR technology across its professional services portfolio. This wasn’t just a meaningful validation for us—it was also a testament to the importance CrowdStrike places in arming its world-class Services teams with the technology that can best ensure the protection of its customers.