Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

NVD Update: More Problems, More Letters, Some Questions Answered

The past week has been a wild ride for those following all the hot goss’ on the National Vulnerability Database. Previously on The Code and the Vulnerable, we reported on the NVD slowdown that began in mid February. Since then, the NVD has been adding new CVEs, but has only enriched (with important information like CVSS and CPE) a very small fraction of them. If you need a breakdown of all these acronyms, definitely check out that first blog on this topic.

Navigating BYOD Security: Proven Strategies and Best Practices for Success

The era of working from a single device, at a single desk, in a single office is over. Thanks to portable electronics and wireless internet connections, employees can work from just about anywhere. If they don’t have an authorized work machine handy, they’ll use their personal devices instead. Bring-your-own-device (BYOD) is now a common practice, which makes BYOD security more important than ever.

Network Access Control: Safeguarding Against Unauthorized Devices and Users

The proliferation of mobile devices and the increasing sophistication of cyber threats underscore the importance of implementing robust access control measures to protect sensitive data and critical systems from potential breaches. In this blog, we will explore the dangers posed by unauthorized devices accessing an organization's network and discuss effective strategies and solutions to control network access, ensuring the integrity, confidentiality, and availability of network resources.

The Ultimate Guide to Employee Monitoring Software

Did you know that 80% of employees feel more productive when they know their activities are being monitored? Employee monitoring tools offer benefits beyond oversight, fostering accountability and boosting efficiency. In this post, we delve into the world of employee monitoring, exploring its advantages for both employers and employees. From enhancing productivity to ensuring data security, these tools play a crucial role in today's digital work landscape. Stay tuned to discover how employee monitoring can revolutionize your workplace dynamics.

Enhancing AWS Security: Comprehensive Strategies for Robust Cyber Protection

With the rapid expansion of cloud computing, Amazon Web Services (AWS) has become a cornerstone for businesses seeking scalable and flexible IT solutions. However, this increased reliance on AWS has made it a prime target for cyber threats. Ensuring robust security measures within AWS environments is paramount to safeguarding sensitive data and maintaining business continuity.

Exploring Secure FTP: A Comprehensive Guide to SFTP for Beginners

In the world of data transfer, security is paramount, especially as cyber threats become more sophisticated. For beginners looking to understand how to transfer files safely over the internet, Secure FTP (SFTP) offers a robust solution. This guide provides a comprehensive introduction to SFTP, explaining its importance, functionality, and how it stands out as a secure method of transferring files.

New Research: Number of Successful Ransomware Attacks Rise 29% in a Just One Year

New analysis of Q1’s ransomware attacks uncovers a single group responsible for the majority and discusses what makes them so successful. This sort of analysis helps to establish threat landscape trends and keeps our collective focus on the places where cyber attacks are working.

Attackers Leveraging XSS To Make Phishing Emails Increasingly Evasive

Attackers are exploiting Reflected Cross-Site Scripting (XSS) flaws to bypass security filters, according to a new report from Vipre. This technique allows attackers to send benign links in phishing emails that will redirect users to malicious sites. Vipre also found that attackers are increasingly using links instead of malicious attachments in their phishing emails. “Three years ago, it was a 50/50 split between phishing emails utilizing links versus attachments,” the researchers write.

"Unknown" Initial Attack Vectors Continue to Grow and Plague Ransomware Attacks

Trend analysis of ransomware attacks in the first quarter of this year reveals a continual increase in the number of "unknown" initial attack vectors, and I think I might understand why. There are two reports that you should be keeping an eye on—the updated Verizon Data Breach Report and ransomware response vendor Coveware’s Quarterly Ransomware Reports. In their latest report covering Q1 of this year, we see a continuing upward trend in “unknown” as the top initial attack vector.