From Theory to Practice: How Portugal's Cybersecurity Centre Is Tackling NIS2 Compliance

In their capacity as a regulator, the Portuguese National Cybersecurity Centre (CNCS) is at the forefront of adapting to NIS2 requirements and ensuring that entities under their purview are compliant. They provide strategic oversight and support for organisations navigating the complexities of the new directive, which introduces stricter standards for risk management, incident response, and supply chain security.

Safeguarding your future: enhancing cybersecurity while defending your budget

As budget cycles increasingly force teams to tighten their belts, proving the value of vital technology is key. It’s not enough to showcase how the security operations center (SOC) is improving security posture and defending against threats, you also need to highlight how this boosts ROI. As highlighted in an IDC webinar and white paper, organizations using Sumo Logic have experienced an exceptional return on investment and a rapid payback period.

Navigating Access Challenges in Kubernetes-Based Infrastructure

Organizations often find that as they deploy their K8S infrastructure into production and across their company, what worked well for managing access during development does not scale efficiently. Research shows that this often leads to serious security risks including breaches. So, new access challenges emerge, particularly as teams scale. Join us for a 30-minute deep dive into how to secure access to Kubernetes-based environments including clusters, databases, and applications in a scalable way.

Directory Traversal Cheat Sheet for 2024 [PDF Download]

If you give attackers an inch, they will take a mile. That’s essentially what happens when there are minor flaws in your web applications – these flaws leave one inch of your system’s doors open. Before you know it, sophisticated threats like directory traversal come crawling. Currently, there are 55 different directory traversal vulnerabilities in CISA’s Known Exploited Vulnerabilities (KEV) catalog.

Securing Enterprise Copilots: A Fresh (and Agent-less) Application Security Approach

Today, we are excited to announce a significant milestone in our journey to secure enterprise copilots and low-code development platforms by launching our new product; the Zenity AI Trust Layer. This new offering provides full security and governance control for enterprise copilots, and in the first step is focused on Microsoft 365 Copilot. The use of enterprise copilots is undeniably a story in low-code application development.

Is Character AI Safe? Artificial Intelligence and Privacy - Issues and Challenges

Since the technological “birth” of Artificial Intelligence and ChatGPT, many people are wondering what on earth they would do without AI in their lives. Since July 2024 ChatGPT has had 200 million weekly active users worldwide and attracted nearly 2.5 billion site visitors. However, ChatGPT is not the only AI out there.

Fortifying Networks Against Inbound Threats and Outbound Data Loss Should be an Organizational Priority

Interactive, hands-on keyboard attack campaigns are employed by today’s most proficient threat actors to penetrate organizational defenses. The network perimeter is typically the initial line of defense against unauthorized access to an organization’s network and the sensitive data it contains. After infiltration, attackers establish command-and-control (C&C) and data exfiltration channels to receive malicious payloads and export stolen data.

Infostealers: An Early Indicator of Ransomware Attacks

Cybersecurity experts are beginning to notice a recurring pattern: many companies that fall victim to ransomware attacks first experience infections from infostealers. These malicious tools are designed to siphon sensitive information from systems, but they might also serve as an early warning for defenders, providing the opportunity to act before a full-scale ransomware attack occurs.

Detect and Prevent Insider Threats with Lookout

Discover how to safeguard your organization from one of the most significant threats: malicious insiders. Learn to differentiate between legitimate user behavior and nefarious activities. By leveraging user and entity behavior analytics (UEBA), real-time alerts, adaptive security policies and dynamic decryption, the Lookout Cloud Security Platform ensures comprehensive protection against insider threats.