Modern SOCs and MDR Services Series: 6 Benefits and Why They Matter

The growing number and complexity of threats, combined with the expansion of the attack surface, complicate the primary purpose of a SOC: detecting, analyzing, and responding to security incidents. These factors generate exponential growth in data volume and security alerts, which teams need more resources to address.

Are you fishing for tips to thwart phishing scams?

“You’ve inherited a fortune. To transfer the money, I need your bank account credentials.” If you have ever stumbled across something like this, you need to continue reading. According to Verizon’s 2022 Data Breach Investigations Report, 25% of all data breaches consistently involve phishing. How does this happen? The fraudsters who are involved in phishing are some of the best content writers.

Framing the Modern Conversation Around Digital Transformation and Digital Risk

Following my recent AISA session about security transformation in October, I am digging further into the value that can come from both security and digital transformation, applying security service edge capabilities and zero trust principles as part of the broader digital transformation strategy.. In the first part of this three-part blog series, I am going to take a look at how an understanding of digital strategy and digital risk are foundational to a modern security transformation journey.

5 Data Security Trends You Might Be Missing

Malware is becoming more sophisticated, and it would be impossible to prevent and defend from every single cyber threat out there. As the digital dependence of enterprises grows in tandem with the enterprise’s growth, we at Rubrik are seeing some consistent trends that can be mapped to their exacerbating cyber risk. In today's competitive landscape, it is even more important to secure your data to defend against cyber attacks.

3072-bit Key Length: Additional Strength to Code Signing Certificate

As data is becoming a critical asset and data breach incidents are increasing, the software is becoming a primary factor for both. And for securing it, Code Signing Certificate is a primary component software publishers use. Developers have recently been utilizing certificates with a 2048-bit key length. But, in 2021, a new policy was enacted, directing CAs to issue Code Signing Certificates with a 3072-Bit Key Length. The primary aim of defining such a standard was to strengthen security.

Endpoint protection - the ultimate guide in 2023

Calling all enterprises, endpoint management is changing. New endpoint protection platforms & AI-powered solutions are a game-changer for companies looking to enhance their security capabilities and remain bulletproof. The worst of the pandemic appears to be behind us; however, enterprises are still adjusting to the post-COVID new normal. For many industries, remote work and the hybrid office remain essential adjustments that are not going back to normal.

Stories from the SOC - Phishing for credentials

Humans are considered the weakest link in cybersecurity. No matter how much a company invests in firewalls, antivirus, and other security software to detect, deter, and prevent attacks humans will always be the main vectors for compromise. If no adequate user-security training is provided within the organization, they will always be at risk. Phishing is one of the oldest cyber-attacks yet one of the most used by attackers due to its effectiveness and low cost.

2 million .git directories exposed! Why .git folders are sensitive & how they are leaked publicly

In this video, we look through research by CyberNews and other independent researchers that exposes the huge problem of publicly accessible.git directories hosted on web servers. These folders contain all the metadata from a git repository including all the history, commit data and remote host information. These can contain lots of sensitive information that hackers can use to exploit your website and are often very sensitive. We look in detail at what.git directories are, what sensitive information they contain and how they become accidentally public.

Datadog Cloud Security Management Demo

Datadog Cloud Security Management provides security context for your observability data to help you quickly identify threats and misconfigurations across your infrastructure. In this demo, we show you how Cloud Security Management allows you to remediate threats, collaborate with other teams, and declare incidents for further investigation, giving you complete cloud-native application protection.