Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

As security practitioners, we like to read blogs, whitepapers, and even Mastodon “toots” that talk about new or novel threats and vulnerabilities. Recently, our fearless and never sleeping Security Strategist Leader James Brodsky called attention to a blog post from a researcher that highlighted the risks of password disclosure in authentication logs.

Software is an integral part of everyone’s life and it gets used for both personal and professional tasks. But, if any complexity occurs in it, overall business operations can get impacted. And as a developer/programmer or a part of the development team, you must make sure that application will function seamlessly. And to assure it, you must prefer following the software development best practices.

Among the numerous certificate authorities, DigiCert is a prominent name, whose solutions are always up-to-the-mark. And DigiCert EV Code Signing Certificate is one of the most advanced software security solutions. From protecting an application from malicious actors to removing warnings and enhancing brand value, it provides some amazing benefits. If you are a developer, a software publishing organization, or a technology enthusiast, then you must know about it.

Ransomware is a type of malware that is designed to take your system or files on your system hostage. The basic concept behind ransomware is pretty simple. An attacker prepares a payload that infiltrates a computer’s hard drive and encrypts the files in it.

Over 4 million mobile apps (Android and iOS combined) are available to download. A majority of those apps store and process confidential user information such as contact number, email, age, gender, banking details, etc. No wonder mobile apps are one of the most lucrative and sought-after targets for hackers, and app fraud volumes are expected to double by 2026.

DIY or open-source secrets detection can seem cost-effective and customizable initially... until you start hitting the first obstacles like scalability, developer experience (DX), or deep application security expertise. Read on to find out how GitGuardian can help you rise above these!

Everyone has secrets leakage incidents from time to time, even massive players like GitHub. This is a good reminder we all need to stay vigilant and embrace the right tools to help us stay safe.

Users normally update their domain account passwords using the Windows Settings menu. But if they forget their password or their account is disabled, an administrator needs to step in. This blog post explores several ways that an admin can reset a user’s password or create a new one. First, we review the easiest options: Active Directory Users and Computers (ADUC) and Active Directory Administrative Center (ADAC).

Microsoft SharePoint is one of the most popular platforms for collaboration and content sharing within internal teams and even with external users. Therefore, ensuring SharePoint security is vital to helping your company avoid costly data breaches and business disruptions. This article details the key best practices for protecting your SharePoint sites, whether you are using on-prem SharePoint Server or SharePoint Online version.

On Saturday, March 18, 2023, Horizon3 researchers released a proof-of-concept (PoC) exploit for CVE-2023-27532, a high-severity missing authentication vulnerability impacting Veeam Backup and Replication (VBR) software. Based on Horizon3’s technical analysis published on March 23rd, the PoC exploit allows a remote unauthenticated threat actor with access to the VBR service to obtain plaintext usernames and passwords.