New in Vanta | August 2023
The month of August was a busy month at Vanta — we shipped Access Reviews schedules, 35 new integrations and new integration capabilities, Improvements to Vendor Risk Management, and more.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Millions of Users on Freecycle are Compromised in Data Breach
Freecycle is an online platform dedicated to helping its users exchange free goods with one another. Freecycle is designed to help reduce waste by helping people give away their unwanted items instead of throwing them away. The platform has more than 7 million users and helps divert huge amounts of waste from landfills each year.
Why a Layered Security Strategy Matters
In the world of cybersecurity, one thing is certain: no system is immune to vulnerabilities and bugs. Even security software, designed to protect your organization, can have its flaws. But before you start to panic, consider this: the presence of these bugs is not unique to any single security provider. In fact, if you were to investigate the history of major security vendors, you would discover that they too have encountered similar problems.
Rubrik Incremental Merge: A New Approach to Oracle Backups
When the well-renowned Oracle database started penetrating the enterprise, database administrators typically backed up to tape and disk, with the former being the preferred target. To support the various tape and disk vendors in the marketplace, Oracle came up with the concept of a media management layer that allowed vendors to provide front-ends to their tape or disk devices.
Qakbot Banking Trojan
Qakbot, also known as Pinkslipbot, Qbot and Quakbot, is a notorious Banking Trojan designed to steal account credentials and online banking session information leading to account takeover fraud. Commonly distributed via malicious unsolicited email (malspam), Qakbot campaigns reportedly deployed ‘Cobalt Strike’ beacons likely in an attempt to move laterally as well as gaining persistency and establishing a robust communication channel back to the threat actor.
Tackling the Surge: The Expanded Financial Attack Surface
The Attack Surface is Growing, and fast. What once was considered the attack surface is no longer. Instead organizations are faced with a sprawling attack surface, including not just domains, IPs and sub-domains, but also third parties, brand risks and more. Businesses in the finance sector face two additional challenges: This blog focuses on banks, FinTech companies and insurance providers, as they are among the largest types of entities in the financial sector.
Cybersecurity Threats in Remote Learning
The pandemic brought with it many changes that affected how we interacted with each other; one of the biggest was remote learning. Traditionally, students had to be in classrooms physically to attend lectures. However, as this became unsafe and government regulations were put into effect, schools in many parts of the world had to adopt an online learning model.
Cybersecurity Careers: Navigating the Education Path
In a world where data breaches and cyberattacks are as frequent as morning coffee, the demand for cybersecurity specialists has never been higher. Whether you're a budding hacker hunter or just fascinated by the murky side of the digital world, a career in cybersecurity offers exciting challenges and opportunities. But how do you go about getting an education to work in this constantly evolving field? Do not be alarmed, my cyber-curious friend; we are about to embark on a journey through the fascinating labyrinth of cybersecurity careers.
Building a cloud-based financial app with regulatory compliance
Financial institutions recognize the advantages of migrating apps to the cloud or adopting a multicloud approach. While modern technologies offer tremendous opportunities, they also present challenges related to safeguarding customer data, cybersecurity, and complying with the law in the strictly regulated finance sector. How can you create a cloud-based FinTech app and ensure its compliance with industry regulations?
2023 OWASP Top-10 Series: API7:2023 Server Side Request Forgery
Welcome to the 8th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API7:2023 Server Side Request Forgery (SSRF). In this series we are taking an in-depth look at each category – the details, the impact and what you can do about it.