Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Announcing Context Engine: Focus on the alerts that matter

Today, I’m delighted to announce the release of Jit’s Context Engine, which uses the runtime context of vulnerabilities to automatically prioritize the top security risks in our customers’ cloud applications. One of the defining challenges of product security is the overwhelming volume of alerts generated by code and cloud security scanners, which is especially painful when the majority of “issues” don’t pose any real security risk.

Vulnerability Management Trends & SLAs: Risky Biz Podcast Episode

Nucleus Security co-founder and COO, Scott Kuffer, joined the Risky Biz News Podcast with host Catalin Cimpanu, for a discussion around trends Nucleus is observing when it comes to vulnerability management and how service level agreements (SLAs) have become a sign of an organization’s security health. In the podcast, Scott and Catalin discuss major trends of high performing vulnerability management programs for organizations using Nucleus’ platform, including.

Alissa Starzak on Internet regulation, elections, and Project Galileo's decade

In this week’s episode, we feature a segment all about policy, Internet regulation, and the 10th anniversary of our Project Galileo. Host João Tomé is joined by Alissa Starzak, Global Head of Policy at Cloudflare, to discuss policy and regulation in 2024. This conversation was recorded in early May 2024 in our San Francisco office. We begin with Alissa’s impressive background, from the private sector to the CIA, the US Army, and then Cloudflare.

The SIEM vs. XDR debate: industry perspectives

How many times can we say, “It’s been a busy week for the security industry,” before it becomes cliche? We recently discussed changes in the SIEM market, with mergers and acquisitions disrupting the traditional SIEM vendor landscape and XDR vendors introducing new SIEM solutions. This week, we continue to see a range of mixed messages from the market around the future of XDR and SIEM.

StateRAMP vs FedRAMP: What's The Difference Between Them?

Here at Ignyte, we’ve talked a lot about FedRAMP, the Federal Risk and Authorization Management Program. As you likely well know, FedRAMP is the federal government’s unified security standard, derived from NIST standardization documents and transformed into a framework to provide a cohesive idea of security across disparate government organizations and contractors. You might wonder, how does this work with state-level agencies and departments?

10 Tips for Summer Travelers Looking to Avoid Getting Scammed

Summer 2024 is about to heat up, and you know what that means. Sun, sand, and surf? Don’t forget to pack your swimsuit and sunscreen! Snow cones, strawberries, and s’mores? Mmmm, yes, please! Sightseeing, stargazing, and … scams? Oh my! Oops. Sorry for ending on such a bummer. But summer isn’t all fun and games and, unfortunately, scamming is on the rise. In 2023 alone, scams cost people more than $10 billion.

What are the Components of an Excellent Offensive Security Program

In the dynamic world of cybersecurity, creating an effective offensive security program is paramount for organizations seeking to proactively identify and mitigate potential threats. An offensive security program encompasses a suite of strategic components designed to test and strengthen an organization's defenses. An effective offensive security program includes various components, such as penetration testing, red/purple teaming, managed vulnerability scanning, and bug bounty programs, to name a few.

How GitGuardian Enhanced Vermeer's Software Development Security

In the rapidly evolving world of software development, maintaining robust security protocols is paramount. For Vermeer Corporation, a leading manufacturer of large agricultural and industrial machinery, embedding security into their software development lifecycle was a significant challenge. That is until they discovered GitGuardian. CJ May, a senior IT Security Analyst at Vermeer Corporation, shared his experience of integrating GitGuardian into their software development process. He described the tool as "invaluable for any security program.".