The Difference Between Securing Custom-Developed vs. Commercial Off-the-Shelf Software

Modern applications are designed to process, use and store vast amounts of sensitive data. As adversaries seek to infiltrate these applications, IT and security teams must ensure the software they use has the strongest possible security. The first step to implementing strong application security is understanding the type of application you need to protect. The two types of applications security teams must be familiar with are custom-developed software and commercial off-the-shelf (COTS) software.

Bluejacking vs Bluesnarfing: Exploring Bluetooth Hacking Variations.

Imagine walking down the street, innocently scrolling through your phone, completely unaware that someone nearby is attempting to hijack your Bluetooth connection. It sounds like a scene straight out of a spy movie, right? Well, this kind of covert hacking, known as bluejacking and bluesnarfing, is a growing concern in today’s digital age.

Free proxies and the hidden dangers

Data privacy continues to be a growing concern for all internet users. While the internet gives us so much more freedom and access to information we might not have otherwise, online privacy continues to be a significant risk. It’s not just cybercriminals that invade your privacy, but businesses as well. Data has become more valuable than ever, and companies will do whatever they can to collect your information. Proxies have been a popular option for protecting your online privacy.

Exploring the Monetary Authority of Singapore's TPRM Guidelines

The Monetary Authority of Singapore (MAS) is Singapore's central bank and financial regulatory authority. Along with regulating monetary policies, banking, and currency issuance, MAS sets standards for financial institutions' operational practices. MAS’ third-party risk management guidelines provide structure for financial institutions to ensure resilience against third-party outsourcing arrangements risks, including supply chain vulnerabilities and information security.

AT&T announces creation of standalone managed Cybersecurity services business

On November 17, 2023 AT&T announced the creation of a new managed security services business backed by WillJam Ventures. Press release here. Businesses of all types and sizes want to, and need to focus on innovation, growth, and transformation strategies. Meanwhile, the complexity of managing the evolving cybersecurity landscape continues to expand. Adversaries are determined, well-funded, and on a mission to disrupt businesses of all types and sizes.

How Corelight's ServiceNow integration speeds response

See how the integration between Corelight's Open NDR platform and ServiceNow allows analysts to send specified detections to ServiceNow, enabling efficient case management for in-depth analysis. Send selected detections with contextual information to ServiceNow with a few clicks, and easily jump from ServiceNow to view detection-related details in Corelight, resulting in faster time to case resolution/MTTR.

Endpoint and Identity Security: A Critical Combination to Stop Modern Attacks

Today’s adversaries increasingly use compromised credentials to breach target environments, move laterally and cause damage. When attackers are logging in — not breaking in — legacy endpoint security offers little help in detecting and stopping breaches. Exacerbating the problem is an expanding attack surface, largely due to the growth of remote work and evolving supply chains.

Insider Risk Management Fundamentals: 10 Best Security Practices for Implementation

Insider-driven security incidents are increasing in frequency. According to the 2022 Cost of Insider Threats Global Report by the Ponemon Institute, 67% of companies experienced between 21 and 40 incidents in 2022, which is 7% more than in 2020. Insiders with authorized access can fall victim to hackers’ attacks due to negligence or can deliberately compromise and severely damage the organization’s data and systems.

4 Key Security Platforms Capabilities & Noted Shortcomings

In recent years, the cybersecurity landscape has evolved dramatically, with more advanced threats and operational challenges for organizations. Many vendors offer security platforms that address these changes and streamline security management. This post explores vital capabilities managed service providers (MSPs) should prioritize when assessing such platforms and explains some shortcomings observed in other security platforms.

One Identity Manager version 9.2 has been released GA

Identity Manager governs and secures your organization’s data and users, meets uptime requirements, reduces risk and satisfies compliance by giving users access to data and applications they need – and only what they need – whether on-premises, hybrid or in the cloud. Now, identity security can be driven by business needs, not by IT capabilities. With Identity Manager, you can unify security policies and satisfy governance needs — today and long into the future.