Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Security Bulletin: PAN-OS Authentication Bypass Vulnerability

CVE-2025-0108 is a high-severity authentication bypass vulnerability affecting Palo Alto’s PAN-OS, the operating system for their next-generation firewalls. This flaw allows an unauthenticated attacker with network access to the PAN-OS management web interface to bypass authentication controls and execute restricted PHP scripts.

Trustwave Becomes First Pure-Play MDR Provider to Achieve FedRAMP Authorization

Trustwave has attained authorized status by the Federal Risk and Authorization Management Program (FedRAMP) for its Government Fusion platform. This announcement follows Trustwave being named last year as an official StateRAMP-authorized vendor. These achievements cap a multi-year journey through the FedRAMP process and make Trustwave the only pure-play Managed Detection and Response (MDR) provider recognized by FedRAMP.

How to Implement Zero Trust: A Step-by-Step Guide

Some traditional security methods are no match for evolving cyber threats, which is why zero trust is an essential addition to every organization’s arsenal. Unlike perimeter defenses, zero trust secures access at every level, verifying every device and user continuously to create a security posture that is far harder to penetrate. Gartner reports that 63% of organizations now use a zero trust strategy, a shift driven by the rising costs and frequency of successful breaches.

Compliant until breached: The case for Digital Identity

If organizations are complying with their regulatory obligations, why are they still being breached? This obvious question exposes a paradox at the heart of everything we do in cybersecurity. It seems that the more we regulate, the more compliance requirements and frameworks we produce, and the more we nurture cybersecurity awareness, the more cyber incidents we face. What’s going on? Where’s the cause and where’s the effect?

Understanding the business benefits of PAM: Beyond IT security

In today's fast-paced digital environment, organizations face a growing need to protect sensitive systems and data while maintaining operational efficiency and driving productivity. One Identity Safeguard, a comprehensive Privileged Access Management (PAM) solution, not only addresses security concerns, but also offers significant business advantages that go beyond basic compliance and risk mitigation.

The technical limitations of MDM vs device trust

This blog has been adapted from a section of 1Password’s ebook: “Why MDM isn’t enough for device security”. To read the complete ebook, click here. For years, mobile device management solutions (MDMs) have been all but ubiquitous in corporate cybersecurity. Devices enrolled in MDM are commonly referred to as “managed,” which reflects the tendency of companies to consider a device functionally secure as long as it has MDM installed.

Top Cyber Resilience Best Practices CISO's Need to Know

Want to strengthen your organisation’s ability to withstand and recover from a cyber attack? Given the inevitability of such threats in the digital business landscape, understanding the key elements to cyber resilience is crucial. In this article, we’ll discuss the practical steps to prepare, respond, and ensure continuous operations and ensure resilience to cyber threats.

Top 5 Benefits of Security Awareness Training for Businesses: Protecting Your Workforce and Data

In today's digital age, cybersecurity is a critical concern for businesses of all sizes. With cyber threats on the rise, organizations must invest in robust security measures to protect their data and workforce. One of the most effective strategies is implementing security awareness training for employees. This essential initiative can significantly reduce the risk of data breaches and enhance overall business security. In this article, we will explore the top five benefits of security awareness training and how it can safeguard your organization.