Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

WatchGuard's Cyber Hygiene Report - The 443 Podcast - Episode 379

This week on the podcast we cover the key takeaways from the just-released Cyber Hygiene Report from WatchGuard. After that, we discuss a recent alert from CISA and other international security agencies on state-sponsored attacks against network equipment. We end with an interesting research post on exfiltrating data from Claude's memory.

Best Cyber Risk Posture Management (CRPM) Platforms

The modern security landscape is an unfair fight. The perimeter is gone—replaced by a borderless terrain where a team of one to 10 is expected to defend the same footprint as a 50-person security operations center (SOC). Attack surface. Vendor ecosystem. Workforce identity. Even fully-staffed teams struggle to cover them all. For a lean team, that coverage fractures almost instantly.

From E-Sign to RMM: DocuSign Kit Targets Windows and macOS

BlueVoyant SOC (Security Operations Center) and Threat Fusion Cell (TFC) teams are tracking a long-running phishing and remote access campaign that uses DocuSign/e-sign themed lures and a reusable web kit to drive victims into installing legitimate remote access tooling.

AI Threat Intelligence vs. Traditional Threat Intelligence: A Practical Guide for CISOs

Most CTI programs aren’t failing because analysts lack skill. They’re failing because signal volumes have outpaced what any manual workflow can process. Thousands of newly registered domains, phishing kit variants, and brand impersonation attempts surface daily. Human teams can’t triage all of it. Threat intelligence automation addresses the throughput problem by automating collection, enrichment and prioritization so analysts spend time on decisions, not data wrangling.
Featured Post

The tech sector cannot build the future while children are being locked out of it

The technology industry is very comfortable talking about the future. We talk about AI, automation, cyber resilience and digital transformation as though the next decade is something we can design, optimise and secure. But there is a more basic question the sector needs to confront. Who gets to be part of it?

Why Your Virtual Waiting Room is Actually Just a VIP Lounge for Bots

The basic concept of a waiting room makes sense when you're sitting in a drafty clinic flipping through a three-year-old golf magazine waiting to be called in for a physical. But encountering one when you're just trying to buy a pair of boots online? The basic premise makes sense, but the experience rarely works like it does at the doctor's surgery. Yet, here we are. eCommerce sites getting hammered by sudden traffic peaks that make regular hosting setups curl up and die mean virtual queues are as important online as they are at a brick-and-mortar store when the Labubus are re-stocked.

Security Starts at the Firmware Level: The Role of Embedded Development in IoT Protection

When a connected device is compromised, the headlines usually blame "the cloud" or "the network." But the most damaging IoT breaches often trace back to something far closer to the hardware: the firmware. The code running on the device itself - written, structured, and secured through embedded development - is where an attacker's job is either made hard or made easy.