Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

HIPAA-Compliant Slack Alternative: Secure, Efficient, and Built for Healthcare Teams

If you're in the healthcare industry, you already know the drill-data security isn't just important, it's non-negotiable. HIPAA compliance isn't a nice-to-have; it's the law. And when it comes to team communication, you need a Slack alternative that doesn't just promise security but actually delivers. Because let's face it-Slack? No bueno for HIPAA.

PCI DSS 4: Compliance Guide for SAQ A-EP Merchants to comply with Requirements 6.4.3 and 11.6.1

As an SAQ A-EP merchant, you face unique compliance challenges because you control elements of your payment page, even though you don’t directly process card data. This makes you a prime target for attacks like Magecart, which specifically target payment page scripts.

3 Workflows to Accelerate Crypto Treasury Operations

Last month we officially rolled out the Fireblocks Network, the first and only digital asset transfer network for institutions. The Network adds a new layer of security and efficiency to digital asset movement, enabling members to find, connect, and settle with the largest financial institutions instantly and securely – all while remaining on-chain.

Are Cross Border Crypto Payments the Future of International Transfers?

If you’ve ever had to pay someone who lives overseas, you’re probably aware of the wide variety of problems that can come with international payments. The traditional correspondent banking model results in high fees for both FX and transaction costs, along with settlement times that can range from 1-5 days.

What Is Vulnerability Scanning?

Vulnerability scanning refers to the process of evaluating applications, APIs they consume, systems, networks, and cloud environments to identify and pinpoint vulnerabilities within your organization’s digital infrastructure. It involves using automated tools trained to scan for known CVEs, misconfigurations, and potential attack vectors. That said, vulnerability scanning today is more than just ticking checkboxes.

Security Bulletin: Fake Reddit Sites and Lumma Stealer

A new campaign distributing the notorious Lumma Stealer malware has been discovered by security analyst Crep1x at Sekoia. Threat actors are utilizing over 80 second-level domains to generate over 1,000 fully qualified domain names impersonating Reddit and WeTransfer. Websites impersonating Reddit feature a fake thread designed to deceive victims into downloading the malware.

Microsoft GCCH vs. Google Public Sector for CMMC

When it comes to overall productivity platforms, collaboration tools, and office suites, the two biggest options dominating the market are the Google G Suite and Microsoft’s Office ecosystem. Whether it’s word processing, team collaboration, IT frameworks, device management, or the entire infrastructure of a business, there’s a pretty good chance one of these two options is going to power the way you operate.

Best Practices For Responding to Privileged Access Requests

Organizations are prioritizing a Privileged Access Management (PAM) strategy to prevent cybercriminals from accessing privileged accounts and conducting malicious activities. A key component of this strategy is securely managing privileged access requests and ensuring that access is granted only when necessary, properly authenticated and monitored in real time.