Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

With the recent increase in use and popularity of Large Language Models (LLMs), many organizations are still trying to approach the use of this technology. In this blog, we approach the different log sources that can be potentially used to monitor a local LLM.

A unified endpoint protection platform (EPP) is the essential foundation to a strong cybersecurity strategy. The industry standard for delivering AI-powered cybersecurity is the CrowdStrike Falcon platform, which has become the choice for organizations large and small to automate and consolidate their security across endpoint, identity, cloud, and data.

CyCognito is always seeking additional methods to discover customer external-facing assets. One such resource is an integration with content delivery network (CDN) management systems. Many organizations manage most or all their DNS records with CDNs, as they provide IT and security teams with centralized management visibility.

Securing your applications is vital in today’s fast-moving world of software development. With threats constantly getting smarter, developers need strong tools to identify and fix weaknesses right from the start. Just ask Alex, a developer who once spent a sleepless night fixing a last-minute security flaw. That’s where Veracode SAST comes in. This powerful tool not only scans your source code and binary files but also integrates seamlessly with your IDEs, repositories, and CI/CD pipelines.

The FBI is warning that threat actors are impersonating senior US officials in phishing attacks designed to compromise users’ accounts. Notably, the attackers are using AI-generated audio to convincingly spoof the voices of real people.

Human risk management involves more than security awareness training, but training is a huge part of the mix. How else are you going to best fight a cyberthreat that is responsible for 70% to 90% of all successful data breaches after already bypassing every technical cybersecurity defense you threw in its way? At some point, a harmful scam message will make it to a user, and that user will be called upon to evaluate its importance and treatment.

I was once enrolled in a programming module back at university. We had been given a task, to code something, so we all sat banging out whatever code we could on our keyboards. Our professor looked around at our screens and did something that seemed bizarre at the time – he asked everyone to stop typing. "You're all being incredibly inefficient," he said, "Some of the best programmers I know never start at the keyboard.

You’ve probably spent years securing human identities, employees, contractors, and admins. But there’s a growing blind spot: Non-human identities (NHIs). Every application, microservice, API, and automated process running in your environment has an identity. They run your CI/CD pipelines, access sensitive data, and connect systems behind the scenes. These identities often hold powerful privileges that are difficult to manage without visibility and the right tools.

Organizations investing in Microsoft 365 E5 licensing expect enterprise-grade email protection. Yet despite premium security features, customer feedback reveals persistent challenges with Microsoft Purview DLP across Exchange Online environments. Microsoft deployment specialists report seeing clients deploy Purview on their own, discover a wealth of false positives, and turn off the policies or set them to audit mode. Policies never become useful.

As previously noted, we achieved PCI DSS v4.0.1 compliance certification, becoming the first SASE platform provider to do so. This milestone reflects our commitment to the highest security standards, ensuring enhanced protection for sensitive data. Throughout the assessment, we collaborated with an external Qualified Security Assessor (QSA) from USD AG to ensure all requirements were thoroughly evaluated.