Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

When choosing to take up government contracts, most businesses face one of the common compliance frameworks for security. They need to climb the mountain to achieve compliance with a framework like CMMC, FedRAMP, or maybe something like HIPAA if they’re in the healthcare space. Relatively few need to comply with a more esoteric – and higher-intensity – framework known as ITAR. What is ITAR, and what do you need to know if you’re a business that needs to use it? Let’s dig in.

So many logs. So little space. If you’re like most people running an Amazon Web Services (AWS) environment, then you probably have a vast collection of log files that include things like VPC flow logs and CloudWatch data. As if that’s not enough, you’re also collecting information about everything and everyone else connected to your cloud, like users, devices, network devices, applications, and APIs.

As the digital attack surface expands, organizations and individuals worldwide face the nonstop threat of cyberattacks, phishing scams, and other cyber vulnerabilities. And with Valentine’s Day here, romance scams — especially ones originating online — are intensifying. With that in mind, SecurityScorecard’s researchers took a close look at the world of dating app security and romance scams to protect people—and their hearts—during Valentine’s Day.

U.S. Renal Care (Renal) is a 32-state, 400-location, 26k-patient healthcare provider primarily concerned with kidney disease and longevity; Renal offers in-facility and at-home dialysis solutions. Renal’s significant treatment network is made possible by various third-party vendors, from equipment solutions to transcription services.

In a significant stride towards enhancing the capabilities of LangChain, the team introduces LangGraph, a module designed to facilitate the creation of cyclical graphs within the LangChain ecosystem. This novel addition, completely interoperable with LangChain, aims to empower developers in building agent runtimes with greater flexibility and efficiency.

The AI revolution that kicked into overdrive last year has taken the world by storm, and as the development and productization of Large Language Models and other AI technologies continue – the revolution shows no signs of slowing down.

It was almost exactly 10 years ago in December 2013 that we wrote our first blog post about detecting CryptoLocker, which was the first sophisticated Ransomware attack of its kind back then. BTW, 2013 was the year of the Boston Marathon bombing, Edward Snowden leaking secret NSA information, Syrians fleeing their home country and Nelson Mandela passing away.

The US Federal Trade Commission (FTC) has disclosed that people in the United States lost a record $10 billion to fraud in 2023, a 14% increase from 2022. Nearly half of the losses were due to investment scams. “Consumers reported losing more money to investment scams—more than $4.6 billion—than any other category in 2023. That amount represents a 21% increase over 2022,” the FTC says.

New data sheds light on what kinds of cyber attacks are targeting your cybersecurity team, what it’s costing them, why it’s taking so much time to fix, and where you should focus resources. Barracuda’s Cybernomics 101 report provides a lot of insight into the current economics of cyber attacks. According to the report: The average largest ransom any organization paid is $1.38 million, with an average cost of $5.34 million to respond to compromises!