Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

No matter what industry you’re in, solving for performance issues is always at the top of every networker’s mind. Especially with applications like Microsoft Teams, or similar unified communications as a service (UCaaS) solutions from Zoom, Webex, RingCentral, Mitel, Vonage, or 8×8, that have become critical to day-to-day business operations.

Looking for a work-from-home gig this year? Cool, but beware of scams.

In this guest post, Eric Newcomer, Principal Analyst at Intellyx explores the practical applications and limitations of generative AI. Generative AI is a game-changing technology. Chat bots seem like magic compared to a traditional static web search. You submit questions in natural human language and receive back complete sentences and paragraphs. But it isn’t always clear what it is really good for, given limitations such as hallucinations and inaccurate answers, and possible bias.

Software as a Service (SaaS) applications have become indispensable for organisations in today's digital landscape. From collaboration tools enabling better communication, to SaaS applications that streamline operations, enhance productivity, and support remote work. However, their convenience comes with significant security challenges—many of which stem from human errors, insider threats, and inadequate configuration practices.

However, the growing convergence of IT and OT due to digital transformation initiatives has exposed OT environments to a wide array of cybersecurity threats, creating an urgent need for robust and tailored security solutions.

In my experience, computers are only as smart as the person in front of them. Same with AI. The results are dependent on the prompts given. Today, users typing prompts from their brains into Microsoft Security Copilot may find it hard to get value. Prompts with adequate specificity are difficult to create, let alone repeat.

It’s becoming all too common these days: ransomware hitting another organization. However, most people don’t know exactly what happens when ransomware is found and what must be addressed. What makes it even more challenging for healthcare is that the data that can be stolen, like personal health information, is much more valuable than credit card numbers.

Traditionally, approaches to Attack Surface Management (ASM) went something like this: A business scanned its own IT estate to discover assets and understand what its attack surface actually included. We can think of this as Phase I. Following the completion of an asset inventory, they assessed each of their assets to identify risks and vulnerabilities, such as open ports, certificate issues, DNS misconfigurations, and more.

On September 19th, 2024, a critical vulnerability (CVE-2024-40748) was discovered in Joomla version 5.1.4, exposing their website to stored cross-site scripting (XSS) attacks. Stored cross-site scripting (second-order or persistent XSS) arises when an application receives data from an untrusted source and unsafely includes it within its later HTTP responses. This could lead to attackers injecting malicious scripts into the website, which would be executed whenever a user visits a specific page.

Credential stuffing is a type of cyberattack where attackers use stolen username and password combinations, often obtained from previous data breaches, to gain unauthorized access to multiple online accounts. The attacker automates the process of trying these combinations across various websites, hoping that users have reused the same login details.