Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The General Data Protection Regulation (GDPR) isn’t new, yet many organizations still struggle to meet its requirements. Why? It’s in part, at least, because GDPR is just plain hard to follow. As it turns out, meticulously protecting the personal data of 450 million citizens of the European Union (EU) isn’t easy. Most IT professionals, managed service providers (MSPs) and business leaders know what GDPR is. Many know what it requires.

Your security operations are running in full throttle. Every log, alert, and event is fuel for defense. But as enterprises scale across endpoints, cloud, and SaaS, data has become both an enabler and an expense. The explosion of telemetry has turned visibility into an economic dilemma. Across the industry, CISOs are confronting a simple truth: the challenge isn’t how much data you can collect; it’s how intelligently you can use it to stay both Breach Ready and Board Ready.

Researchers at Push Security warn of an extremely convincing ClickFix attack posing as a Cloudflare verification check. ClickFix is a social engineering technique that tricks the victim into copying and pasting a malicious command, then running it on their computer. In the instance observed by Push Security, the phishing page has a pop-up box that appears to be from Cloudflare, instructing the user to press the keyboard shortcuts necessary to open a terminal and run a command.

Over the past few years, API security has gone from a relatively niche concern to a headline issue. A slew of high-profile breaches and compliance mandates like PCI DSS 4.0 have woken security teams up to the reality that APIs are the front door to their data, infrastructure, and revenue streams. OWASP recently published its first-ever Business Logic Abuse Top 10 List; a clear indication that the industry is taking API security and all its nuances seriously.