Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Think credit card fraud is the biggest threat to eCommerce? Think again. Loyalty fraud cost businesses $4B in 2024, and most companies didn't see it coming. Why? Because the attack vector isn't obvious. It's: Credential stuffing + password spraying Poorly managed APIs connecting loyalty platforms to 3rd parties No real-time detection when the bad guys cash in points for untraceable gift cards.

This week on the podcast, we discuss some recent research into a new zero day vulnerability in the popular WinRAR utility under active exploit. After that, we give a round up on everything we know about the SonicWall SSLVPN attacks from the last few weeks before ending with a review of a new ChatGPT vulnerability. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

Discover how AI is transforming software development with tools like Cursor IDE and Mend.io. In this video, Alex explains how Cursor’s AI First Code Editor simplifies complex tasks, enabling both experienced and new developers to build sophisticated applications faster than ever. Mend.io takes this transformation a step further by seamlessly integrating SAST and SCA directly into the Cursor IDE. This powerful combination ensures that AI-generated code is secure from the moment it’s written, with Mend.io’s Igenic performing rapid scans without slowing down the development process.

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

AI isn’t ready for security ops. Especially not pen testing.#cybersecurity.

Opening an unsafe email attachment can put your personal data at serious risk. Watch this short video to learn how to check if an attachment is safe before clicking and what to do if you accidentally open a malicious file.

Is someone using your Social Security number (SSN)? Watch this video to learn the signs that your SSN is being misused, what someone could be using it for and the steps you should take if you’re a victim.

A keylogger is sneaky malware that records everything you type — passwords, emails and even payment details — without your consent. In this video, we’ll break down the warning signs of a keylogger, show you how to detect one on your device and, most importantly, how to remove it.

Cybercriminals today operate more like startups than stereotypes—complete with org charts, sprint cycles, and pizza parties to celebrate successful breaches. In this episode of Security Matters, host David Puner talks with former CISO and U.S. Air Force veteran Ian Schneller about the evolving sophistication of threat actors and what it takes to stay ahead.

Drowning in a sea of application security alerts? Veracode Risk Manager is your solution. In today's fast-paced development environment, traditional AppSec tools can't keep up, leading to security debt and increased risk. Veracode Risk Manager cuts through the noise, providing a single, unified view of your entire application security posture. Our AI-powered engine aggregates and analyzes data from all your development, cloud, and security tools, providing an industry-leading 60:1 noise reduction. This means your teams can finally focus on the risks that truly matter.