Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Companies now need EDR to protect their remote workforce because old security measures just don’t cut it anymore. Remote devices face 59% more malware attacks than office computers. VPNs and firewalls aren’t enough to protect our remote teams anymore. Home networks lack security, people use their personal devices, and security practices vary widely. These issues create weak spots that basic endpoint protection tools don’t deal very well with.

In today’s networks, more than 90% of traffic is encrypted, obscuring both legitimate business data and increasingly sophisticated threats. Forcing every TLS/SSL stream through decryption tools introduces latency, privacy risks, and compliance headaches—so many teams simply turn off inspection and leave dangerous blind spots. Security teams urgently need an encrypted traffic inspection that delivers full encrypted traffic visibility without ever breaking end-to-end encryption.

ISO 27001 is one of the most complex security frameworks commonly in use around the world. That complexity comes from the way it is designed: not as a checklist to follow, but rather as a series of guidelines to achieve. The difference between those two things is stark, even if it doesn’t sound like it. The way ISO 27001 works is that you develop an ISMS, or Information Security Management System.

AI-powered triage, faster insights, and the headspace your analysts need If you’re a security leader or analyst within the defence space, you likely brace yourself for a daily battle with alert overload — and you’re not alone. Analysts face a relentless flood of notifications with the majority turning out to be false positives. Studies show that 71% of SOC personnel1 experience burnout and report feeling overwhelmed by alert volume.

Phishing protection refers to the tools, strategies, and technologies used to detect and prevent cybercriminals from impersonating your brand, stealing credentials, and defrauding your customers. As attackers move faster and impersonate more convincingly, brands need more than just domain scans or email authentication to stay protected. Many security and digital teams rely on email filters, takedown services, or brand education to manage phishing risks.

A recent investigation by Modat has revealed a critical healthcare IoT security breach. More than one million healthcare IoT devices and connected medical systems worldwide are currently exposed online, leaking everything from MRI scans and X-rays to eye exams and blood test results. In many cases, these files are stored alongside patients’ names and other identifying details, creating a significant medical device data breach with far-reaching consequences.

On August 6, 2025, Microsoft disclosed a high-severity post-authentication vulnerability affecting on-premises Microsoft Exchange servers configured for hybrid-joined environments, tracked as CVE-2025-53786. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive 25-02, requiring federal agencies to patch the vulnerability by Monday, August 11.

Cybercriminals are shifting tactics. Rather than relying solely on ransomware’s tried-and-true method of using encryption to lock files and demand payment to decrypt, many are now instead embracing exfiltration and extortion, with encryption as a secondary tactic. This marks a significant evolution in ransom-based attack methods, one where encryption is optional, but leverage is mandatory.

The Trustwave SpiderLabs CTI team began correlating telemetry from multiple enterprise environments in response to a rapidly developing threat landscape involving the widespread exploitation of Microsoft SharePoint on-premises infrastructure. In this blog, we share key findings from several observed intrusions across our monitored environments.

Organizations regulated by the New York Department of Financial Services (NYDFS) must adhere to 23 NYCRR Part 500, a cybersecurity regulation designed to protect sensitive consumer data and financial systems. Among its core requirements, Section 500.7 specifically focuses on access privileges, requiring financial services companies to implement controls that limit access to nonpublic information based on the principle of least privilege.