Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Office Hours With Or Amir - Dive Into The First Ever CRQ-Powered Cyber Risk Register

Explore Kovrr’s brand-new CRQ-Powered Cyber Risk Register — a first-of-its-kind solution that’s redefining the way organizations build cyber GRC programs and manage cyber risk. Led by Or Amir, Product Manager at Kovrr, this session will offer a hands-on deep dive into the risk register’s extensive capabilities and show you why moving beyond static, spreadsheet-based registers to a fully quantified, dynamic risk intelligence framework is necessary for achieving resilience in today’s landscape.

5 SAST Purchasing Tips That Actually Maximize ROI

Following these 5 tips when purchasing a SAST tool will save you headaches and regrets. A flashy demo or “industry-leading” badge doesn’t mean much if the tool doesn’t work for your code, your developers, or your workflow. This short video covers 5 things every AppSec or engineering team should consider before signing on the dotted line. Because choosing the wrong tool won’t just cost you budget, it’ll cost you trust.

Hackers REVEALED: The TRUTH About Bug Bounty Programs #cybersecurity #bugbounty

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Turn Shadow IT into a Strategic Advantage with a Business-Led IT Approach

90% of IT admins are worried about shadow IT, but here's the twist. 54% also believe employees use those apps to make their jobs easier. So what if, instead of fearing it, we saw shadow IT as a roadmap to a better workplace? This is business-led IT: collaboration, not control.

The MemcycoFM Show: Episode 1 - Disrupting AI-Powered Phishing, What CISOs Must Do Now

Welcome to the inaugural episode of our sparkling new podcast, The MemcycoFM Show. Your new go-to for everything digital deception, brandjacking, and real-time cybersecurity defense. In our first episode, two of our own Memcycans discuss why AI-powered phishing is changing the threat landscape and what CISOs must do to stay ahead. Powered by Memcyco’s mission to protect trust in the digital world.

How Poor User Experience (UX) Can Undermine Your Enterprise Security

For years, cybersecurity has been chasing a future where passwords no longer exist. And yet, here we are in 2025—still resetting them, reusing them and getting breached because of them. The reality is this: despite all the talk about passwordless authentication, we still live in a password-dependent world. Credentials remain the No. 1 attack vector.

5-Step Plan for Prevention of Social Engineering Attacks

Cyber threats aren’t always about complex code or advanced hacking tools. Often, they start with a simple trick—convincing someone to click a link, share a password, or let someone into a secure area. This tactic is called social engineering. Social engineering is when attackers trick people into breaking security rules. Instead of hacking systems, they use lies, pressure, or fake trust to get what they want. These attacks work well because they target human emotions, not technology.

LockBit Ransomware Panel Breached: Database Dump Reveals Deep Insights into RaaS Infrastructure

The LockBit ransomware group's dark web infrastructure has suffered a major blow following a significant breach on May 7, 2025. This cyberattack targeted LockBit's onion-based infrastructure—including their affiliate and admin panels—and resulted in the complete defacement of the sites. The attackers left behind a taunting message: "Don't do crime, CRIME IS BAD xoxo from Prague," along with a link to a leaked MySQL database dump.