Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Amy Bogac, CISO at Elevate Textiles, shares her candid approach to cybersecurity program management. She emphasizes the importance of distinguishing between immediate fixes and long-term improvements after security incidents. Key insights: Set clear boundaries between incident resolution and continuous improvement Use security incidents as leverage for necessary program investments Learn from every crisis to strengthen your security posture Distinguish between short-term fixes and long-term strategic improvements.

ANOTHER new AI coding tool has been released! This is Claude 3.7 Sonnet by Anthropic. In this video, I will be putting this new AI model to the test by asking it to write me secure code. But there's a twist... if the AI can't generate secure code, I will be FIRED...

A passphrase is a more secure way to create a password that uses a string of random words instead of a string of random characters. They’re easier to remember and longer and more secure than most user-generated passwords. Learn the tips for creating strong passphrases.

Are uncontrolled privileged accounts affecting your organization’s security?

Introducing “Spark” Code Intelligence’s AI Test Agent Fuzz testing is a proven powerhouse for uncovering critical bugs, yet its full potential often goes untapped due to the heavy manual workload it demands. But what if that effort could be a thing of the past? Enter “Spark” Code Intelligence’s AI Test Agent—a revolutionary solution that automates the discovery of vulnerabilities, bringing the power of advanced security testing, like fuzzing, into reach for all.

Demo: AI Test Agent in Action Discover the benefits of CI Fuzz 2.0, our powerful tool that simplifies fuzzing to a single command. The demo will also highlight root cause analysis capabilities, showcasing how vulnerabilities can be identified and addressed efficiently, this demo will uncover several real-world severe vulnerabilities uncovered by AI Test Agent in widely used open-source libraries during the past few months.

This week’s briefing covers: KTA080 (CL0P) Update KTA080 has released the names of the previously redacted victim organizations ranging from E-H. Additionally, KTA080 has identified 183 victims’ organization names broadly covering H-W. KTA374 (Salt Typhoon) Telecoms Targeting Update Cisco Talos has released further information on the targeting of telecoms organizations identified in late 2024. This information includes the high level of living-off-the-land techniques used by the threat actor.

Now available: cybersecurity’s most trusted source for threat insights from the pioneers of adversary intelligence.

The industry’s most anticipated threat intelligence report is here.

Welcome to Tines—The smart, secure workflow builder for mission critical security-minded teams. Getting started with Tines is simple, and from there, the possibilities are endless. This video walks through the three key parts to building in Tines.