Best practices to implement self-doxxing in organizations

Organizations face a constant challenge to balance transparency and security in today's rapidly evolving digital landscape. One emerging concept that has gained traction in recent years is the practice of "self-doxxing." This seemingly counterintuitive term refers to the deliberate and controlled sharing of an organization's information, often sensitive, to enhance transparency, accountability, and trust.

Russian State-Sponsored Threat Actor Targets High Profile Individuals in Phishing Campaign

The Russian state-sponsored threat actor “COLDRIVER” is launching phishing campaigns against “high profile individuals in NGOs, former intelligence and military officers, and NATO governments,” according to researchers at Google’s Threat Analysis Group (TAG). “COLDRIVER continues its focus on credential phishing against Ukraine, NATO countries, academic institutions and NGOs,” TAG says.

The Need For a Shift Up Strategy, Using CRQ for Resilience, Part 3

Whether it’s supporting initiative prioritization, as discussed in Part 1, or justifying budget requests, pursuing cost-effective strategies, and calculating risk appetite levels, as discussed in Part 2, CRQ has the power to transform an organization’s mindset to include cybersecurity in strategic risk planning conversations. This transformation, known as a Shift Up strategy toward cyber management, has become more critical than ever as cyber threats evolve.

Fortifying Your Systems: 7 Essential Strategies for Enhanced Hardware Security

How do you reinforce hardware against unauthorised access and attacks? Implementing hardware security is critical, and understanding it helps protect enterprise systems at every level. In this blog, we explore seven fundamental strategies to shield your organisation from hardware-related threats.

Russian Hackers Win Big: Microsoft's Senior Exec Team Emails Breached

In a Friday regulatory filing, Microsoft has reported that its corporate email accounts were compromised by a Russian state-sponsored hacking group known as Midnight Blizzard, also identified as Nobelium or APT29. Microsoft's disclosure aligns with new U.S. requirements for reporting cybersecurity incidents. The attack was detected on January 12th, 2024, but it appears to have started in November 2023.

The Role of Proxies in Enhancing Online Security and Privacy

Considering the interconnectivity of the world, online security and privacy have become paramount. As a result, individuals and businesses take their cyber hygiene seriously. Using web proxies is one way they employ to improve their online safety. However, not all proxies are the same. Paid proxies have advantages over free proxies. In this article, we cover the features of proxies, how paid proxies improve on free proxies, and suitable use cases of proxies.

How Jaguar Land Rover and Asda are Building a Modern DevSecOps Culture

Organizations at different stages of growth or maturity will have different challenges when adopting a modern DevSecOps program. In this session we talked with Mike Welsh, Lead Enterprise Security Architect DevSecOps, at JLR, and Ruta Baltiejute, DevSecOps Lead at Asda, about their differing approach to implementing a secure development model at their organizations. We discussed the significant differences between how they’re building software today, including their approach to change in People, Process and Tooling.

Mobile Application Security - From Vulnerabilities to Vigilance

Your mobile apps are your business's face to the world. As an app creator or business owner, credibility is everything, and security is the cornerstone upon which it stands. Now, with the digital ecosystem being highly susceptible to breaches, even a single slip in security can shatter the trust your users have in your brand, tarnishing the hard-earned credibility of your business. This is why mobile app security is key to your business’s growth.