Authenticating legacy apps with a reverse proxy

When we think of “authentication” for our applications, most of us think of user registration, a login form, and resetting passwords. Our concerns begin and end there. But as we dive deeper and our security and compliance requirements change over time, we have to consider new password hashing algorithms, blocking bots, multi-factor authentication, and external identity providers. What started as a clear, concise set of requirements became an ever-growing list.

Do you know how to identify your third-parties', third-parties?

It might sound confusing at first, but knowing who your third parties also rely on for their day-to-day business operations is key to building out a smarter and more informed vendor risk management program. Commonly known as fourth-party concentration risk, the ability to determine the fourth-party vendors in your digital supply chain that serve a majority of your third-party vendors can help organizations avoid potentially catastrophic supply chain risk from such a dependency.

Analytics and Automation in the Autonomous SOC

SOC analysts suffer from alert fatigue caused by too many data sources and platforms, too little context in investigations, too few people, and too little time. Mature cybersecurity teams manage this challenge by leveraging an integrated set of data analytics capabilities from best-of-breed solutions to establish an end-to-end experience — from data collection to response.

CrowdStrike Falcon Pro for Mac Achieves 100% Mac Malware Protection, Wins Fifth AV-Comparatives Approved Mac Security Product Award

CrowdStrike believes that continuous testing and evaluation by third-party organizations is critical in helping customers make informed decisions about which security solution best fits their needs. This is why CrowdStrike continues to participate in more third-party testing than any other next-gen endpoint cybersecurity vendor.

Why Do You Need Client-Side Security?

Client-side security is important today because of the increase in attacks against individuals using the web to access services that require the sharing of sensitive and personally identifiable information (PII). Feroot enables proactive client-side security programs to protect the customer journey. Our products are designed to significantly diminish a threat actor’s ability to breach customer data or damage websites via client-side attacks. We help cybersecurity and application security professionals guard the customer experience.

Random but Memorable - Episode 9.8: Sentient Chatbot Croissant Insights

Has a Google AI chatbot become sentient? And will a U.S. ban on the sale of location and health data make a difference? Join us this episode to find out, as we discuss everything from savory croissants to cross-site browser cookies. 🥐🍪 We also invite Scott Lougheed, 1Password’s Manager of Education & Training, to the show, to celebrate the launch of Insights from 1Password: An intuitive new dashboard for 1Password Business users.

What is Double Extortion Ransomware? And How to Avoid It

As the internet grows, so does the sophistication and capabilities of cyber attacks. Cybercriminals constantly develop new ways to exploit even the most complex networks and servers. One of the newer types of attacks caused major headlines in 2020 and continues to be a force to be reckoned with for even the largest companies and organizations. It's called a double extortion ransomware attack. Becoming a victim of these vicious attacks can lead to devastating consequences.

1Password Developer Fireside Chat: Serde Deserializers

Join 1Password senior developer, Nathan West, as he discusses Serde, a Rust library that enables Rust to talk to wire formats like JSON, YAML, XML, or more binary formats like MessagePack. Nathan shares how Serde facilitates a way to interchange between wire formats and Rust data in a very efficient way, without going through a lot of intermediary data structures or allocations. Later, Nathan breaks down the Serde data model, and, step by step, takes you through writing a.csv deserializer from scratch.