EP 13 - Pizza parties and profit margins: The business of cybercrime

Cybercriminals today operate more like startups than stereotypes—complete with org charts, sprint cycles, and pizza parties to celebrate successful breaches. In this episode of Security Matters, host David Puner talks with former CISO and U.S. Air Force veteran Ian Schneller about the evolving sophistication of threat actors and what it takes to stay ahead.

Seemplicity x SANS: The Future of Vulnerability Management is RemOps

Despite ongoing investment in detection tools, vulnerability management continues to underdeliver. Security teams don’t lack data. They lack the systems to act on it. According to our latest research, 91% of organizations report delays in remediation, and 41% say they struggle to make findings actionable. The result is a persistent backlog of exploitable vulnerabilities, compounded by manual workflows and poor coordination between teams.

Who Said It Challenge - Cybersecurity Edition with Cato's Chief Security Strategist

Think you can tell cybersecurity heavyweights from sci-fi legends? @Etay Maor, Chief Security Strategist at Cato, thought so too, until a quote left him speechless (and slightly heartbroken). Watch on and test your own cyber + pop culture instincts.

Unlock seamless HIPAA compliance in multi-cloud environments with TrustCloud

In this article Organizations that treat HIPAA compliance as a living, breathing part of their operations, not just an annual checkbox, are the ones best positioned to protect patient data, mitigate risk, and build enduring trust with patients and partners.

What Is an Insider Threat?

In 2024, the average cost of an insider threat incident reached $17.4 million. When you consider that these types of incidents happen daily, it becomes clear that we’re facing a frequent and expensive danger. So, what is an insider threat? Today, it means much more than a data leak; it’s a strategic vulnerability that can disrupt business continuity.

How a Real Crypto API Exploit Let Users Change Asset Types #CryptoSecurity #CryptoExchange #crypto

A real-world API vulnerability let a user change the asset type in a major crypto exchange—bypassing expected controls. Watch how a simple tweak to API parameters enabled unauthorized trades and exposed critical flaws. Learn why detailed schema validation and input checks are essential for protecting sensitive financial APIs.

The Key to Building Security Programs That Truly Scale #developer #appsec

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Mend & Cursor: Revolutionizing AI-Generated Code Security | Mend.io

Discover how AI is transforming software development with tools like Cursor IDE and Mend.io. In this video, Alex explains how Cursor’s AI First Code Editor simplifies complex tasks, enabling both experienced and new developers to build sophisticated applications faster than ever. Mend.io takes this transformation a step further by seamlessly integrating SAST and SCA directly into the Cursor IDE. This powerful combination ensures that AI-generated code is secure from the moment it’s written, with Mend.io’s Igenic performing rapid scans without slowing down the development process.

What is a Code Repository? Types, Best Practices and Tools for Repository Security

You and your team have spent months building a game-changing product. You’ve written thousands of lines of code, pushed feature after feature, and deployed updates like clockwork. Everything’s on track until one day, your entire codebase shows up on a public forum. Someone leaked your source code because your repository wasn’t secure. You must be aware that most breaches occur not because of a lack of tools, but due to poor practices.