Hellcat Ransomware: A Growing Threat to Businesses and Organizations

Hellcat ransomware emerged in early November 2024 and quickly became a notable threat in the cybersecurity landscape. The group first gained attention on November 6, 2024, when it claimed responsibility for a cyberattack against Schneider Electric. Known for its aggressive tactics and unique ransom demands, Hellcat is already making its mark in the world of ransomware.

The Future of Access Management

In this episode of Into the Breach, host James Purvis welcomes Kanika Thapar, Senior Director of Product Management, to discuss the evolving challenges in access management. Kanika dives into the explosion of identities, permissions, and overexposed sensitive data that leave organizations vulnerable. Learn how threat actors exploit access vulnerabilities and why traditional manual processes struggle to keep up.

API Security: 200 is Not Always Okay, and How to Cope with This

While a 200 OK status often signals success, its appearance can be deceiving, especially when it cloaks significant threats within API interactions. This session expands on the critical role of APIs as part of the broader attack surface essential for robust Threat Detection, Identification, and Response (TDIR) programs. We’ll explore intricate case studies where seemingly successful responses harbored risks that bypass traditional monitoring. Learn how to enhance your SIEM capabilities by effectively detecting anomalies in API traffic, ensuring that every layer of interaction is scrutinized—not just the surface.

Rubrik Expands Key Security Features to Azure Cloud and AWS

Organizations of all sizes are grappling with the escalating threat of cyberattacks. According to the Rubrik Zero Labs 2024 The State of Data Security Report, 94% of IT and security leaders reported their organization experienced a significant cyberattack last year, with an average of 30 attacks per organization. Alarmingly, 66% of these attacks targeted cloud environments, highlighting the urgent need for robust cloud security measures.

How to Find and Remediate PAN-OS Vulnerabilities in Seconds with Forward Enterprise

With Forward Enterprise, you can go from "I think my network is vulnerable" to "I know the exact details of my network's vulnerabilities and I have a clear path to prioritizing remediation". In this video, Mike shows how users can quickly find critical vulnerabilities like Palo Alto Networks' CVE-2024-0012 and CVE-2024-9474. ).

Web Shell Upload Via Extension Blacklist Bypass - Part 2

Web shell attacks are a critical and growing threat, often evading traditional defenses. In this Part 2 of our exploration into web shell attacks, we uncover how attackers leverage extension blacklist bypasses to upload malicious web shells and compromise systems. Stay informed! Like, comment, and subscribe for more expert insights into cyber threats and effective defense strategies. For Collaboration and Business enquiries, please use the contact information below.

Barak Engel Lightning Interview

Welcome to the third installment of Riscosity’s Lightning Interview Series In this episode, we sit down with Barak Engel, founder and CEO at EAmmune, and CISO at MuleSoft, Amplitude, StubHub, BetterUp, and Faire among others. Barak is also the author of Why CISOs Fail, The Security Hippie, and The Crack in the Crystal. Ever wonder how you pentest a novel? Tune in to find out.

NDR in the Era of Cloud and Hybrid Environments: Why It's Essential

With cloud infrastructures expanding across private, public, hybrid, and multi-cloud models, effective security monitoring is essential. Gartner’s 2024 Hype Cycle for Workload and Network Security suggests that NDR solutions are becoming critical in these diverse environments and could reach widespread adoption within the next two to five years. This trend underscores the importance of NDR for visibility and rapid threat detection in today’s complex cloud landscapes (see Figure 1).