Navigating DORA Compliance: Preparing for the EU's New Digital Operational Resilience Regulation

The European Union’s (EU) new Digital Operational Resilience Act (DORA) is set to reshape how financial institutions handle their cybersecurity and operational risks. With enforcement from January 2025, DORA will impose a range of new standards and requirements. While there is an awareness of DORA in the marketplace, some firms do not fully understand its risks and consequences due to its broad scope. Similar to the introduction of the EU GDPR, many businesses might underestimate the effort needed to achieve compliance.

Leveraging NDR for Risk-Based Alerting: A Proactive Approach to Cybersecurity

The traditional methods of detecting and mitigating cyberattacks will no longer be adequate as these attacks become sophisticated and frequent. These days, risk-based alerting and network detection and response (NDR) are regarded as essential tools for safeguarding enterprises. By avoiding false positives or low-priority warnings, risk-based alerting allows security teams to concentrate on the high-risk threats, saving time and resources.

Introducing Passphrase Capabilities on Android

To generate a passphrase for a new or existing record on Android, tap the dice icon, select the dropdown menu next to “Type” and select Passphrase. You can customize your passphrase by setting the length, including capitals and numbers in the passphrase, and choosing from various symbols to separate the words. Passphrases can be up to 20 words long, with a minimum length of 5 words and each word including at least 3 characters. Check the box if you'd like to make your selections the default setting for all passphrases moving forward. Tap Use Passphrase or Copy Passphrase when you are done.

Data Leak Prevention vs Data Loss Prevention: Safeguarding Information in the Digital Age

In this digital age, enterprises in all industries are creating and accumulating an astronomical amount of sensitive data to store and exchange. Given a prevalence of highly sensitive data, preventing it from getting into the wrong hands or avoiding data loss by accident has become a top priority. While on surface data loss vs data leak can look harmless, it can lead to financial losses, reputational damages, and even trigger litigation.

OpenInfra Days North America 2024: A Community Reunion and the Future of OpenStack

At Indiana University, OpenInfra Days North America 2024 was an event that brought together the brilliant minds of the open infrastructure community. For my teammate Kevin Jackson and I, this was not just another tech event; it was a long-overdue reunion with friends in the OpenStack community and an exciting opportunity to forge new relationships. The atmosphere was charged with collaboration and learning, with best practices, user journeys, and insightful panel discussions taking center stage.

Beyond Burnout: Key Takeaways from SOC Analyst Appreciation Day 2024

Feeling overwhelmed by alerts? You’re not alone. At SOC Analyst Appreciation Day (SAAD) 2024, we heard from countless analysts facing the same challenges of burnout, perfectionism, and the need for mentorship. With a fantastic line-up of speakers, including John Hammond, Ron Eddings, Peter Coroneos from Cybermindz, and other security leaders, this year’s event provided valuable insights and sparked engaging discussions.

Prescribing Strong API Security: A Lifeline for Healthcare Data

In 2024, healthcare organizations face heightened security challenges, mainly as they increasingly rely on Application Programming Interfaces (APIs) to support critical functions. APIs have become indispensable in driving digital transformation and improving operational efficiencies across healthcare systems. However, the rising complexity and volume of APIs, alongside insufficient security practices, have created a vulnerable environment ripe for exploitation.

Why SIEM Is Not Right for SaaS Security

When security information and event management (SIEM) tools came to the market over a decade ago, many practitioners considered the combination of information management and event management groundbreaking. Since then, the technology has gone through iterations to improve and enhance its capabilities, including the incorporation of user and entity behavior analytics (UEBA), machine learning and AI capabilities, and “out-of-the-box” configurations for smaller organizations to rely on.