Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Evolution of Scalper Bots Part 7: The Next Generation Console Era

Welcome back to our series on the evolution of scalper bots. So far, we have traced scalping from its early ticket resale roots to the rise of automated bots. We have explored the ongoing battle between bot developers and anti-bot defenses and examined how scalping evolved into a professionalized, multi-million-dollar industry. In our last post, we uncovered a hidden sub-market where traders aggressively bought, sold, and exchanged bot licenses just like the products they acquired.

Do not pass GO - Malicious Package Alert

Researchers recently found another Software Supply Chain issue in BoltDB, a popular database tool in the Go programming environment. The BoltDB Go Module was found backdoored and contained hidden malicious code. This version took advantage of how Go manages and caches its modules, allowing it to go unnoticed for several years. This backdoor allows hackers to remotely control infected computers through a server that sends them commands i.e. via a command and control server.

Securing Data Flows into Your Cloud Data Warehouse

Traditionally, data security focused on protecting data at rest within the confines of your on-premise data center. The cloud era has blurred these lines. Data now flows through complex pipelines, often traversing multiple services and third-party vendors. This expanded data perimeter creates new vulnerabilities: It’s crucial to ensure that the data loaded into warehouses and analytics tools is scanned for sensitive information and redacted or redirected accordingly.

Securing Budget for TPRM: How to Convince Executives to Invest

Advocating for a larger budget is a common need for most security professionals. With so many business obligations fighting for priority and funding, even vital concerns like Vendor Risk Management can fall through the cracks. However, third-party cyber risks can devastate businesses in the blink of an eye—meaning maintaining a proper third-party risk management program should be at the top of your priority list.

CIEM Podcast - What it is. How it fits. Challenges you should know. Advice for how to get started.

This podcast is a quick but informative discussion into CIEM, it's definition, its importance, and its role within a comprehensive IAM and cybersecurity program. As organizations accelerate their migration to cloud environments, managing access and entitlements within these dynamic infrastructures becomes increasingly critical. Cloud Infrastructure Entitlements Management (CIEM) has emerged as a pivotal component in the broader Identity and Access Management (IAM) and cybersecurity landscape.

How AI-powered Secure Email Gateways Fight Back vs. AI-armed Bad Actors

As bad actors use artificial intelligence to step up their phishing game, mounting an effective defense means using a secure email gateway that likewise employs AI to detect even the most cleverly crafted phishing emails and the fraudulent websites to which the emails attempt to direct recipients. The concern is not just with generative AI (GenAI) tools like ChatGPT, which has some (rather limited) guardrails to prevent nefarious use.

Speed meets security: Pascal Wehrlein races Cato's Etay Maor

Get ready for a high-speed showdown as ABB FIA Formula E Drivers' Champion Pascal Wehrlein teams up with Etay Maor, Chief Security Strategist at Cato Networks, in a thrilling race on Formula E simulators. Can Etay keep up with Pascal on the track? And can they make the right calls in the world of IT security? Hit play and see who comes out on top! Let’s connect.

Will Proposed Rules for Health Industry Actually Strengthen Cybersecurity?

If you’re a US citizen, you’re likely numb to the endless letters informing you of your information being stolen yet again. For most of us, this is an annoyance and an inconvenience. But if you’re a patient in a hospital during an attack, it would be disconcerting to know that studies indicate medical errors increase by 30% when clinical applications are offline, and there’s a “small but significant” increase in patient mortality.