Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why You Need To Protect Your Streaming Services And How To Do It

The best part about streaming services is that you get to share them with your friends. One person pays for Netflix, another one pays for Roku, a third one pays for Apple TV, and that's how the circle goes. You all share the login details and access all the shows on all platforms. But is it safe, and should you do it?

What You Need to Know About the NIST Cybersecurity Framework 2.0

Ten years ago, the National Institute of Standards and Technology (NIST) released the Cybersecurity Framework (CSF) 1.0 following an Executive Order from President Obama to help companies and governments facing cybersecurity attacks. In 2014, data breaches were escalating. Major Fortune 500 companies and household names, such as Target, Yahoo, 7-11, Visa, and more, experienced heaps of customer data theft, online fraud and attacks from malware.

ThreatSync+ NDR: Bringing AI-Driven Threat Detection to Every Business

In a world where cybersecurity threats are ever evolving and increasingly sophisticated, businesses of all sizes need robust solutions to protect their networks. However, these solutions have traditionally been costly and complex. WatchGuard is changing that tradition with the launch of its new ThreatSync+ Network Detection and Response (NDR) solution.

Black Hat NOC: Zero Trust...but Verify | Corelight

The Black Hat network is unlike an enterprise network. The network operations center (NOC), which Corelight helps to operate, sees traffic that would never be permissible on most enterprise networks. Still, in many ways the Black Hat network is a microcosm of many real-world environments, with similar challenges that require similar solutions.

Making Sense of NIS 2: Adopt a Cybersecurity Blueprint like NIST to Set Your House in Order

In 2023, the European cybersecurity landscape painted a concerning picture. According to a report in detection, response, and mitigation further emphasized that enterprise cybersecurity implementations were falling short.

Build the foundation for airport networks with centralized DDI solutions

As airports embark on their digitalization journeys, the significance of connectivity is more pronounced. For an airport to function as a global aviation gateway, connectivity is no longer a mere utility but a strategic asset, crucial to its operations, much like its runways.

Learn about the top five types of cyber security

In today's digitally-driven world, safeguarding sensitive information is more crucial than ever. As cyber threats become increasingly sophisticated, understanding the different facets of cybersecurity is essential for individuals and organizations alike. In this blog, we'll delve into the top five types of cybersecurity measures that form the backbone of a robust defense strategy. From network security to cloud security, each type plays a pivotal role in protecting data, ensuring privacy, and maintaining the integrity of systems against malicious attacks.

Do not allow anonymous enumeration of SAM accounts

The two policy settings in the CIS Benchmarks control the ability of anonymous users to enumerate the accounts in the Security Accounts Manager (SAM). By enabling the policy settings, users with anonymous connections will not be able to enumerate domain account user names on the systems in your environment.

CVE-2024-6387 OpenSSH RCE vulnerability ("regreSSHion") - Cato Networks impact and analysis

TL; DR – Multiple versions of OpenSSH are vulnerable to remote code execution. There is no working public PoC, and researchers have only been able to exploit the vulnerability under unique lab conditions. Cato Sockets by default do NOT have a publicly exposed SSH interface, it is always recommended to keep Cato Sockets LAN interface exposed only internally and use comprehensive network access controls to manage SSH access.