Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Corporate Investigations: Protecting Your Business from Fraud and Theft

Fraud and theft are among the most damaging problems facing businesses today. From small local companies to global corporations, the risk of losing money, stock, or sensitive information is a constant threat. What makes matters worse is that fraud often happens quietly, over long periods, and sometimes at the hands of trusted insiders. The financial losses can be devastating, but the damage to reputation and trust can be just as severe.

You Built Your Own Certificate Management System - It's Already Broken

You were tired of renewing all those certificates, and Certbot looked so easy. Now you have scripts thousands of lines long filled with command line incantations you have to Google every time you open it. The script is running on all the critical servers. And some of the printers. If someone looks at it the wrong way, a certificate expires.

Trusted Access: Smuggled Secrets, SD Cards and Peanut Butter Sandwiches

Some insider threats are quiet and compulsive. Others come wrapped in a peanut butter sandwich. In 2021, U.S. Navy engineer Jonathan Toebbe was arrested for attempting to sell classified submarine technology to a foreign government. He wasn’t forced into it. He wasn’t coerced. He initiated the contact himself, asking for hundreds of thousands of dollars in cryptocurrency in exchange for nuclear secrets. This wasn’t a data dump or a careless mistake. It was premeditated.

The Evolution of AI: From Symbolic Reasoning to GPTs and Agentic Systems

It seems like Artificial Intelligence (AI) has suddenly appeared in everything, everywhere, all at once. What feels like “five minutes ago”, there was “pre-AI life”, and now we have AI assistants that speak like real people, apps that create images, music, and video from nothing, and AI agents that do work for us.

Should Microsoft Be More Accountable for Security? - The 443 Podcast - Episode 343

This week on the podcast, we cover a massive software supply chain compromise involving widely-used NPM packages. After that we discuss an increase in social engineering attacks called ClickFix. Finally, we end with a discussion of Senator Wyden's recent letter to the FTC demanding Microsoft being held accountable for "gross cybersecurity negligence" and whether his claims have any merit. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

You Won't Believe These Results from Replit

In this video, we put Replit’s AI coding tool to the test by asking it to create a secure note-taking app. While the tool shows off some seriously impressive abilities, it’s not without its flaws... Join me as I explore what Replit can (and can’t) do, and whether AI coding tools such as this one are ready to build reliable, secure apps.

Why Your SOC Needs XDR to Automate Threat Detection and Containment

Your SOC scrambles when alerts flood in: disparate tools, manual triage, and slow follow-through mean attackers move faster than your defenses. That gap from detection to containment stretches dwell time, increases breach impact, and drains your team. Manual tasks consume your most valuable resource—analyst attention—while every second matters in incident response.