Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

SEC Fines Publicly Traded Company $2.125 Million For Negligence Before, During, and After a Ransomware Attack

According to the filing, the organization in question failed to devise controls to adequately detect, respond to, and disclose an attack that included data exfiltration and service disruption. Back in 2021, R.R. Donnelley & Sons Co.

The Importance of OSINT in Application Security

In our interconnected online world, the security of applications and the data they process is essential. Open-Source Intelligence (OSINT) plays a critical role in enhancing application security by offering valuable insights into potential threats, vulnerabilities, and the overall security posture of an organization.

Mastering modern access control with RBAC and ABAC

Managing access to resources efficiently and securely within today’s complex IT environments is paramount. Two prominent access control models, Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC), play crucial roles in this endeavor. Understanding their relationship and how they can be integrated is essential for optimizing security and operational efficiency.

How to Spot and Avoid Grandparent Scams

Grandparent scams happen when a cybercriminal impersonates a victim’s family member, such as a grandchild, to convince them that there is an emergency. Despite the name of this scam, the victim doesn’t always have to be a grandparent or grandchild. The primary goal of these scams is to extort money from a victim by pretending that their loved one is in danger.

The Biggest Factors Influencing API Security Today

Application Programming Interfaces (APIs), with their ability to enable different software systems to communicate, have helped shape the digital world irrevocably. They allow developers to create more interoperable, scalable, efficient, and innovative digital services and applications across important industries such as retail, finance, manufacturing, and healthcare. However, with the explosion of API creation and usage comes inevitable risks.

1Password product enhancements [Summer edition]: Recovery codes, auto-save, and more

Since the beginning of the year, we’ve committed to enhancing your experience in ways that will help you easily accomplish whatever you set out to do when you open 1Password – especially saving, finding, and accessing your sensitive data across any of the devices you’re using.

Cloud Security Managed Services: Defending the Cloud in Partnership

As cloud technologies continue to advance and more organizations shift toward cloud-based solutions, the need for stringent security measures has become increasingly vital. Effective cloud security not only protects sensitive data from unauthorized access and potential breaches, but also ensures the smooth functioning of cloud-based services.

Top 4 Strategies to Demonstrate Cybersecurity's Value in the Boardroom

Cybersecurity expertise is notoriously absent from the boardroom. Only last year, a market analysis found that a mere 12% of US Fortune 500 companies have a board member with adequate knowledge of cyber risk management. However, increased cybersecurity regulations, coupled with heightened cyber event costs, have begun to highlight the need to rectify this void as soon as possible.

New Report: How SME IT Professionals Really Feel About Security, AI, MSPs, and More

Twice a year, JumpCloud commissions a survey of IT professionals working at small and medium-sized enterprises (SMEs). These surveys examine pressing current matters like the security landscape, emerging technologies, job outlook, and more. JumpCloud’s latest report was released on July 16. It surveyed 612 IT decision-makers in the U.K. and U.S. to get a read on the SME IT market, both today and where IT professionals think it’s headed in the future.

The Role Regulators Will Play in Guiding AI Adoption to Minimize Security Risks

With Artificial Intelligence (AI) becoming more pervasive within different industries, its transformational power arrives with considerable security threats. AI is moving faster than policy, whereas the lightning-quick deployment of AI technologies has outpaced the creation of broad regulatory frameworks, raising questions about data privacy, ethical implications, and cybersecurity. This gap is driving regulators to intervene with guidance in creating standards that reduce the risks.