Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Rise In Vulnerability Disclosure, Exploitation and Threat Intelligence

Patrick Garrity, Security Researcher at Nucleus Security, discusses the rise of vulnerabilities exploitation and threat intelligence in the field of vulnerability management. He highlights the history of vulnerability management, the increase in vulnerabilities and exploitation, the limitations of the common vulnerability scoring system (CVSS), and the emergence of vulnerability threat intelligence. Patrick also emphasizes the importance of open-source intelligence, such as CISA's Known Exploited Vulnerabilities (KEV) List and the Exploit Prediction Scoring System (EPSS), as well as the value of commercial threat intelligence.

Embracing the AI Revolution: Navigating Concerns, Regulations, and the Road to Singularity #podcast

Dive into the complex world of AI as we confront the negative comments and fears surrounding its advancement. Join the conversation on the need for increased regulation in the tech sphere and the potential consequences when technology falls into the wrong hands. Are we headed toward a Terminator-like future, or can we find a balance between innovation and ethical use?

STEP Program with Bright Security: DAST Solutions and API Testing

We’re all in this together, which is why awareness about APIs and connecting with one another is crucial to cyber security. Salt Security has recently announced our Salt Technical Ecosystem Partner Program which can help demonstrate the role of application security testing when it comes to API security and where it fits in a good API security program.

The 443 Podcast - Episode 270 - Grading our 2023 Security Predictions

This week on the podcast, we look back to our 2023 security predictions and grade ourselves on how well we were able to see the future. We'll go through each of our 6 predictions, explain the trends that fueled them, and then provide either evidence that they came true or discuss reasons why they may not have yet. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

Unveiling the Paradox: Why Banks Still Get Robbed Despite Centuries of Security Measures

Dive into the intriguing world of bank security in my latest video, where we unravel the paradox that despite centuries of stringent security measures, banks are still vulnerable to robberies. From high-tech vaults and surveillance cameras to dye packs and a myriad of controls, the list seems endless. Yet, the reality is that banks continue to face security breaches.

Friday Flows Episode 14: Analyze phishing email senders, URLs, and attachments

It took us 14 episodes but we're finally highlighting the #1 most popularly used story in the Tines Library. Investigating phishing email senders, URLs, and attachments can eat up hours of an analyst’s time - this Tines story demoed by Michael Tolan does everything for you. Connecting services like VirusTotal, urlscan.io, and EmailRep from Sublime Security across multiple story forks, it includes several options for submitting suspicious emails and displaying the results.