Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Blog

The Impact of UNECE R155 on Automotive Cybersecurity

In an era where technology and transportation converge, the fusion of vehicles with IoT technologies heralds a new dawn of mobility. This leap forward promises enhanced connectivity and autonomous capabilities, yet casts a shadow of cyber vulnerabilities that could jeopardize not just the integrity of the vehicles but the safety of their passengers.

Defense-in-Depth for Secrets Management: Discovery, Visibility, Leak Detection and AI

In the past, many security teams considered securing secrets enough – if your secrets were secured, you were good. While you’re still kind-of-good staying on this course, security professionals increasingly recognize that just securing secrets is not enough – organizations require a more sophisticated solution to help protect themselves in today’s increasingly sophisticated threat landscape.

The global threat evolution of internet-exposed OT/ICS

Operational technology (OT) and Industrial Control Systems (ICS) are core parts of an engine fueling critical infrastructure in industrialized nations worldwide. Water treatment facilities. Wastewater plants. Electrical transmission and distribution hubs. Nuclear power and manufacturing plants. Energy pipelines.

TrustCloud's New Hallucination-Proof GraphAI Shaves Hours Off Security Questionnaires

TrustCloud’s AI already pre-fills up to 80% of a security questionnaire, but we’ve developed the next iteration. TrustShare has built new generative AI capabilities called GraphAI. GraphAI will still find the right answer for a security questionnaire topic, but now it will better account for context and generate more natural, accurate responses based on your program controls. GraphAI is built on a retrieval-augmented generative (RAG) model on our large language model (LLM).

CVE-2024-3400: Zero-Day Remote Code Execution Vulnerability Exploited to Attack PAN-OS

A command injection vulnerability, being tracked as CVE-2024-3400, was recently discovered in the GlobalProtect feature of Palo Alto Networks PAN-OS software. This vulnerability has a CVSS score of 10 (Critical) and is actively being exploited in the wild. It impacts versions PAN-OS 120.2, PAN-OS 11.0 and PAN-OS 11.1. If exploited on vulnerable PAN-OS versions and distinct feature configurations, an unauthenticated attacker could execute arbitrary code with root privileges on the firewall.

7 Best Endpoint Management & Monitoring Software in 2024

Endpoint management and monitoring are critical for maintaining an organization’s IT infrastructure’s security, performance, and efficiency. Whether you’re dealing with remote workers, corporate devices, or virtual endpoints, having reliable endpoint management tools is essential. In this article, we’ll explore some of the top solutions available.

PasskeyScanner: A Kroll BurpSuite Extension for Passkeys

Despite being a globally accepted security measure, passwords have associated issues that have led to countless breaches and compromised systems over many years of not-so-secure authentication technology. Yet passwords remain the dominant form of authentication because more secure options have not been accessible to all users. Passwords have evolved into the security risk they are today because, as the security requirements for passwords have increased, usability has decreased.

UEBA & SIEM: How They Differ & Work Together

Are your cybersecurity tools working together effectively? UEBA (User Entity Behavior Analytics) and SIEM (Security Information and Event Management) are two of the most potent cybersecurity solutions in modern organizations, but they serve very different purposes. UEBA identifies risky behaviors, while SIEM collects and analyzes security data across your network.

iPhone Security: How to Remove A Hacker From My iPhone

We have all become pretty familiar with our smartphones due to the amount of time we spend on them. According to recent data, the average user spends 3 hours and 15 minutes on their phones every day. As a result, the chance of you noticing something is not quite right with your phone is quite high. However, knowing the cause of the problem and how to fix it can be slightly more difficult. Is your iPhone behaving strangely due to outdated software, age, or hardware problem?

Insider Threat Program: How To Setup, Benefits & Tips

Cyberattacks are an ever-present danger for organizations. However, it’s crucial for security teams to recognize that the threat isn’t limited to external actors. Insider threats, originating from within the organization, are a growing concern. In fact, the frequency of data breaches caused by insider threats has surged by nearly 40% since 2018, now accounting for 60% of all breaches.