DeepSeek DDoS: Why AI Needs Machine Identity Security

Imagine a sleek, high-tech sports car racing downhill without brakes. Now, imagine that car is actually the AI driving your business. Powerful yet precariously close to catastrophe. That’s why, as we accelerate AI adoption, including AI agents, we can’t afford to overlook security guardrails. This fact was front and center during the recent “large-scale cyberattack” on DeepSeek, a strategic open-source AI player from China that’s been disrupting the global AI space.

Threat Context monthly: Executive intelligence briefing for January 2025

Welcome to the Threat Context Monthly blog series where we provide a comprehensive roundup of the most relevant cybersecurity news and threat information from KrakenLabs, Outpost24’s cyber threat intelligence team. Here’s what you need to know from January.

Is CVSS Irreparably Flawed? - The 443 Podcast - Episode 318

This week on the podcast, we discuss the Common Vulnerability Scoring System or CVSS and why one popular developer thinks it's completely broken. After that, we cover Lumen's Black Lotus Labs' research into a Juniper backdoor malware. We end with the latest car hacking research and an admin portal with possibly the worst MFA implementation ever. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

Top 5 Strategies to Reduce Dwell Time with XDR: Accelerating Threat Detection and Response

Cyber adversaries operate with one goal in mind—stealth. The longer they go undetected in an environment, the more damage they can cause. Dwell time is the total amount of time that a threat remains unnoticed in a system, from initial compromise to discovery. According to the most recent threat reports, the average dwell time for undetected breaches has reduced but remains at 10-15 days, providing attackers enough time to exfiltrate data, launch ransomware, or establish persistent access.

What is a miniOrange Access Gateway?

What is a miniOrange Access Gateway? Through Access Gateway, you can simplify & secure access to all your Enterprise Apps. Are you struggling with managing multiple logins, securing on-premise applications, and maintaining a seamless user experience? The miniOrange Access Gateway is the all-in-one solution—providing secure, effortless logins across all enterprise applications, including on-premise, legacy, and cloud apps.

Breach and Attack Simulation: A Complete Guide

Today, cybersecurity isn’t just about protecting data but about protecting operations, reputation, and trust. Unfortunately, many organizations continue to operate under the false assumption that their security posture is strong because they’ve checked off compliance boxes—only to be blindsided when a breach occurs.

How the Proposed HISAA Law Could Reshape Cybersecurity Compliance

It’s been a tough year for the healthcare sector. Throughout 2024, cybercriminals have unleashed a barrage of attacks on a vast number of healthcare organizations - with disconcerting levels of success. FBI research revealed that healthcare is now the US’s most targeted industry.

Simply AD group management

Managing AD group membership using native tools can quickly become overwhelming. However, most cybersceurity insurance policies and compliance standards also mandate a regular review and recertification of group memberships to avoid huge penalties. Eric Hibar, One Identity solutions engineer, explains the best path forward to solve your group management headaches.

Magento Two Factor Authentication - Setup 2FA for Magento Store Admins & Customers

This video provides a step-by-step video guide to configuring Two-Factor Authentication (2FA) in Magento for Customers (Frontend) as well as Admins (Backend) Users. Enhance the security of your Magento store by enabling an additional layer of authentication to protect user accounts and sensitive data.