Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

How Secure Is Cloud Storage?

Cloud storage has become a go-to solution for individuals and businesses seeking scalable, cost-effective ways to store data, as it offers significant advantages over traditional methods of storing our files. Public cloud storage works by using remote servers operated by a service provider so you can access files from anywhere with an internet connection. While convenient, trusting your sensitive and potentially confidential files to an external provider leaves many asking, "How secure is cloud storage?".

Google Cloud KMS Introduces Quantum-Safe Digital Signatures Align with NIST's PQC Standards

Quantum computing poses rapidly escalating challenges to many of the public-key cryptographic algorithms currently in use: RSA, ECC, and DSA. Many of the classical public key cryptographic algorithms secure everything that deals with financial transactions, software updates, identity verification, and data encryption.

Optimize EDR logs and route them to SentinelOne with Observability Pipelines

Endpoint detection and response (EDR) systems such as SentinelOne Singularity Endpoint, CrowdStrike, and Microsoft Defender monitor IT infrastructure such as computers, mobile devices, and network devices to detect, alert on, and respond to cyber threats. These EDR systems record data about the endpoints to identify abnormal behavior, block malicious activity, and provide remediation suggestions with contextual information.

Cybersecurity Performance Management and Measuring Cyber Risk Exposure

Cybersecurity performance management (CPM) is the process of continually assessing and optimizing an organization's security posture. As cyber threats evolve, organizations must ensure their security measures are withstanding this increasing sophistication of ensuing attacks. However, with this rapid rate of change, traditional approaches to cybersecurity performance measurement, which often rely on static technical metrics, are failing to capture the broader business impact of cyber risks.

Cybersecurity Best Practices for Managing Vendor Access

Third-party vendors are essential to organizations, but each vendor an organization adds widens its attack surface and can introduce various security risks, such as data leaks or data breaches. To effectively manage vendor access and prevent security threats, organizations must conduct thorough vendor risk assessments, implement least-privilege access, establish clear vendor access policies, require MFA, log vendor activity, update vendor access and ensure vendors comply with industry standards.

What Is a Watering Hole Attack? Detection and Prevention

We already know that cybercriminals exploit the weakest link in your IT networks. The best defense against these exploits comes down to safeguarding the most vulnerable entry points. But what if the weakest link in your cybersecurity defense lies beyond your IT network itself?

Automating Data Privacy Confidence with a PIA

A Privacy Impact Assessment (PIA) is a process that helps identify and manage any privacy risks that may arise from taking on new projects or systems that involve personally identifiable information (PII). PIAs are recommended by the EU’s General Data Protection Regulation (GDPR) and required for government agencies to perform under the U.S. E-Government Act.

Can Snyk Find Weak Cryptographic Algorithms? Bye Bye MD5

Using strong cryptography is essential for data protection and application security, such as tasks required for hashing passwords (which, technically, isn’t classic cryptography for the sake of encryption). However, some legacy code may still be deployed to production using weak and outdated cryptographic algorithms that weren’t found. How can Snyk Code help you find these vulnerable applications?