Identity, Endpoints, and the Cloud Drive the Microsoft Security Product E5 Decision

For companies with the Microsoft 365 E3 license, the decision on whether to upgrade to 365 E5 is likely taken into consideration, and security should certainly be included. With E5, companies will likely find security upgrades in three key areas: identity management, endpoints, and cloud. So says David Broggy, Trustwave's Senior Solutions Architect, Implementation Services, and a 2024 recipient of the Microsoft MVP Award, in a recent webinar on transitioning from Microsoft E3 to E5.

Attackers Using HTTP Response Headers to Redirect Victims to Phishing Pages

Researchers at Palo Alto Networks’ Unit 42 warn that attackers are using refresh entries in HTTP response headers to automatically redirect users to phishing pages without user interaction. “Unit 42 researchers observed many large-scale phishing campaigns in 2024 that used a refresh entry in the HTTP response header,” the researchers write. “From May-July we detected around 2,000 malicious URLs daily that were associated with campaigns of this type.

GitGuardian's FP Remover Dramatically Reduces False Positive In Scans

Do you hate false positives in your secrets scan results? We do too. GitGuardian has introduced a whole new approach to eliminating false positives, eliminating them by around 50% so far. And we are just getting started! GitGuardian's Machine Learning experts and Secret Detection team have created "FP Remover", a new in-house machine learning model that significantly reduces false positives by understanding code context and semantics while enforcing security and privacy best practices.

How To Use USB Blocking To Prevent Data Leaks

As digital threats evolve, safeguarding sensitive data has become more important than ever, especially for businesses using removable storage devices like USB drives. While these external devices boost productivity, they also increase the risk of data breaches if not properly managed. Unprotected peripheral ports serve as unguarded entry points for data thieves and malicious software, highlighting the critical need to secure these access interfaces.

LLMs Gone Wild: AI Without Guardrails

From the moment ChatGPT was released to the public, offensive actors started looking to use this new wealth of knowledge to further nefarious activities. Many of the controls we have become familiar with didn’t exist in its early stages. The ability to request malicious code or the process to execute an advanced attack was there for the asking from an open prompt. This proved that the models could provide adversarial recommendations and new attacks never before seen.

Understanding the Differences Between DORA and NIS 2

Two significant pieces of European legislation stand out as cybersecurity regulations evolve: the Digital Operational Resilience Act (DORA) and the NIS 2 Directive. Both aim to enhance cybersecurity but target different sectors and have distinct objectives and requirements.

4 Simple Steps to Implement Risk-Based Vulnerability Management

Imagine if your fire alarm sensor went off every time you burned your toast or lit candles on a birthday cake. After a few false alarms, you’d probably start ignoring them or even turn your sensor off just to get some peace. This is what many information security teams are experiencing with vulnerability alerts.

Protecting Sensitive Data with Office 365 Data Loss Prevention

Managing and Safeguarding data is becoming more complex with more cyber threats piloting daily. Organizations are facing constant risk of accidental errors or intentional hacking of sensitive information. Cyber enthusiasts have come up with a one-stop solution to prevent any such damage to data, known as Data Loss Prevention solutions or DLP. It is a crucial tool in the battle of keeping data safe and mitigating any risk.

Understanding Risks and Mitigation of Data Leakage: Protect Your Assets

Data is the new gold, and it needs to be kept safe just like gold. In this digital age, where data is easily shared and technology is always getting better, the risk of data leakage is very important for both businesses and people. Data leakage, which is when private information is shared without permission, can have serious effects, including losing money, hurting your image, and being sued.