Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Many organizations have made the decision to use Microsoft products. Their users appreciate the integrated applications provided by M365 and have grown comfortable with them over years of use. However, many administrators find Microsoft products unnecessarily complex to configure and maintain. In addition, some security and governance capabilities are either difficult to configure or simply don’t exist with Microsoft.

Identity Threat Detection and Response (ITDR) is one of many aspects of an effective identity security program. Yet despite what some detection and response-focused vendors may argue, ITDR is not a silver-bullet solution to prevent identity-centric attacks. Such a thing doesn’t exist. In fact, modern data breaches, industry analyst perspectives and compliance requirements make it crystal clear that organizations need more than ITDR to build an identity security program.

Each year, the National Cybersecurity Alliance celebrates Data Privacy Week to emphasize the importance of safeguarding personal data. As companies continue to focus on their organization’s digital transformation, it enables them to collect more personal information about individuals that use their services. Let’s face it, your online activity including apps on your phone are collecting an endless amount of data about you.

Today’s modern supply chains can be large and complex, involving many suppliers doing many different things. As digital transformation initiatives have accelerated, the ecosystem of suppliers has exploded. Effectively securing the supply chain is hard because vulnerabilities can be inherent, or introduced and exploited, at any point in the supply chain. Unfortunately, a compromised software supply chain can cause significant damage and disruption.

Medusa ransomware pivots to extortion, Infostealers evade macOS anti-malware, and the FBI and CISA issue a joint advisory for Androxgh0st malware.

CI/CD pipelines can be exploited in a number of ways and we're going to share a few with you.

The average cost of invoice fraud to middle-market businesses is almost $280,000 per year. Invoice fraud affects businesses of all sizes, and the levels of fraud have increased in part because it’s not possible to authenticate all invoices that come in manually, with many businesses paying out invoices without authentication if they’re under a certain amount. Today’s information security rules and regulations can’t keep up.

The financial landscape has undergone a monumental transformation, ushering in an era of digital lending that departs from traditional methodologies to embrace more streamlined and tech-driven processes. This paradigm shift has not only modernized the lending landscape but has also redefined how individuals access credit and financial services.

Artificial intelligence (AI) has been a hot topic of discussion this year among tech and cybersecurity professionals and the wider public. With the recent advent and rapid advancement of a number of publicly available generative AI tools—ChatGPT, Dall-E, and others—the subject of AI is at the top of many minds. Organizations and individuals alike have adopted these tools for a wide range of business and personal functions.

2023 saw two concerning attacks on public water systems, highlighting the fragility and risk to utility systems. In Pennsylvania, malicious hackers breached the Municipal Water Authority of Aliquippa system the night after Thanksgiving. The criminals were making a political statement: the technology used to manage water pressure was developed by Israel, and the criminals used this opportunity to choose a side in the ongoing conflict.