The Future of Legal Cybersecurity: Proactive, Intelligence-Driven, and Unmatched

As a crucial member of your law firm’s IT team, you hold the responsibility of safeguarding highly sensitive client information – financial records, personal data, and privileged communications. While you might not be managing cases, you’re protecting the very foundation of client trust. However, this trust faces significant risk. Last year alone, 29% of law firms experienced a security breach, with the average cost per breach soaring to $4.47 million.

Mastering modern access control with RBAC and ABAC

Managing access to resources efficiently and securely within today’s complex IT environments is paramount. Two prominent access control models, Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC), play crucial roles in this endeavor. Understanding their relationship and how they can be integrated is essential for optimizing security and operational efficiency.

Actionable Threat Intelligence - Boosting Attack Surface Management

Modern cybersecurity challenges require a comprehensive approach to attack surface management. As technology evolves, organizations find themselves facing a multitude of cyber threats from various directions. These threats are not limited to internal systems but extend across external attack surfaces and the digital supply chain. To navigate this complex threat landscape, organizations need more than just raw data; they need actionable threat intelligence that provides context and guides targeted action.

The Importance of OSINT in Application Security

In our interconnected online world, the security of applications and the data they process is essential. Open-Source Intelligence (OSINT) plays a critical role in enhancing application security by offering valuable insights into potential threats, vulnerabilities, and the overall security posture of an organization.

Working From Home - and Homing From Work - Poses Unique Cybersecurity Challenges

Since 2020, working from home has become commonplace. In the wake of the COVID-19 pandemic, almost every company had to switch their traditionally in-office employees to some version of hybrid or remote work. Indeed, working from home became the new “normal” almost overnight. We all have a variety of collective experiences and observations during this time of no longer commuting to work, sitting in a cubicle, or chatting with coworkers at the water cooler.

Introducing GitGuardian's Remediation Location & Tracking

Remediation is one of the most challenging aspects of fighting secrets sprawl. Finding exactly the right code to address and then tracking when and how it was fixed can get cumbersome, Especially when dealing with multiple projects and teams. We are proud to Introduce Remediation Location and Tracking to your GitGuardian incidents detail view. With our new Pinpoint location within the Impacted Perimeter view, the platform will organize issues all fixable incidents into the new "Require code fixing" tab helping developers concentrate their efforts.

Enabling Data Protection for ZTNA with Lookout

In today's remote work landscape, Lookout Secure Private Access integrates AI-enhanced Data Loss Prevention (DLP) into its ZTNA framework for seamless application access and robust data security. By applying contextual policies based on user identity, application data, device, and location, it ensures efficient protection without disruption. Safeguard confidential data, including intellectual property, through encryption and dynamic masking, simplifying security while ensuring access to essential tools.

Identity Crisis: The Curious Case of a Delinea Local Privilege Escalation Vulnerability

During a recent customer engagement, the CyberArk Red Team discovered and exploited an Elevation of Privilege (EoP) vulnerability (CVE-2024-39708) in Delinea Privilege Manager (formerly Thycotic Privilege Manager). This vulnerability allowed an unprivileged user to execute arbitrary code as SYSTEM. CyberArk responsibly disclosed this vulnerability to Delinea, including the exploit proof of concept (POC) code, as part of our commitment to contributing to the security community.