Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

In the modern, hybrid workplace, employees have more control than ever over the devices they use for their jobs. In fact, 56% of employees say that they have worked on a personal “bring-your-own” device (BYOD) in the last year. This is despite the fact that 89% of security pros say that their company doesn’t allow BYOD. Clearly, there’s a disconnect between security policies and worker behaviors.

On April 16, 2025, the cybersecurity community faced a potential crisis as U.S. government funding for the Common Vulnerabilities and Exposures (CVE) program, managed by MITRE and sponsored by the Cybersecurity and Infrastructure Security Agency (CISA), was set to expire.

Today, CrowdStrike is releasing automated baseline enforcement and remediation in CrowdStrike Falcon for IT to secure misconfigured devices and consistently address vulnerabilities across endpoints. Operators can now centrally manage and enforce endpoint configurations across platforms to support security and compliance efforts.

More than 80% of Fortune 500 companies rely on ChatGPT Enterprise, not just as a productivity tool, but as a platform for building custom GPTs, leveraging knowledge files, and enabling collaboration through Canvas. As AI Agent adoption accelerates across every corner of the enterprise, business users are innovating faster than ever, often without security oversight.

The digital age has introduced both immense opportunities and unprecedented challenges for businesses. Data is a powerful asset, yet managing its governance, security, and compliance requires intricate strategies and solutions. Leveraging artificial intelligence (AI) in these areas has become a game-changer in transforming how organizations of all sizes approach their data capabilities.

The Software as a Service (SaaS) industry has seen both great expansion and notable downturns in recent years, with key market shifts redefining the landscape.As companies adapt to the shifting SaaS landscape, SOC 2 Compliance for SaaS has emerged as a key priority—not just as a checkbox for security, but as a signal of trustworthiness and a commitment to protecting customer data in an increasingly cautious market.

The recent Bybit hack, in which bad actors swooped in and made off with $1.5 billion worth of Ethereum, has sent shockwaves through the cryptocurrency industry. As one of the largest digital heists in history, it lays bare the vulnerabilities in crypto exchange security and the persistent threats from sophisticated actors. And yes, Bybit has assured its customers that their funds will be covered; the question is how these incidents happen in the first place.

Africa has made huge strides in digital transformation in the past few years. For example, over 160 million Africans gained broadband internet access between 2019 and 2022. As the continent embraces digitalization, cybersecurity is becoming an increasingly pressing concern.

Kubernetes ingress-nginx has disclosed a cluster of critical vulnerabilities—CVE-2025-1974, CVE-2025-1097, CVE-2025-1098, and CVE-2025-24514—impacting all controller releases prior to v1.11.5 / v1.12.1. The flaws stem from insufficient sanitization of Ingress annotations and admission-webhook inputs, allowing attackers to inject arbitrary NGINX directives into the auto-generated nginx.conf.

In today's fast-paced world of digital transformation, APIs serve as the backbone of modern applications, enabling innovation and efficient data sharing. Nevertheless, the rise in API usage has expanded the attack surface, making solid security protocols essential. This post delves into how the partnership between Salt Security and HCL AppScan API Security is transforming API governance, equipping organizations to actively manage API security through thorough discovery and contextual risk assessment.