Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

During the investigation of a large-scale cryptocurrency theft, with total losses significantly exceeding USD 1 million spread across multiple currencies, Kroll researchers discovered two new pieces of malware. These pieces of malware ultimately led to deployment of Havoc C2’s agent, “Demon.”

Hospitals, clinics, pharma companies and digital‑health start‑ups are now on the front line of application‑layer threats. Without purpose‑built Web Application and API Protection, vital services and patient safety are placed at risk. Some concerning stats.

CMMC mandates that companies working as part of the government supply line need to comply with a level of security determined by their handling of controlled information. Identifying the level of compliance necessary for your business is the first step in achieving that compliance. The second step is scoping.

The rapid adoption of AI, particularly generative AI tools like ChatGPT and Copilot, presents both immense productivity opportunities and significant data security challenges for organizations. While employees increasingly leverage AI for various business functions, this widespread use often occurs outside sanctioned channels, creating what's known as shadow AI.

Artificial intelligence is rewriting the rules for cybersecurity on both sides of the battle. Cloud adoption, a broadening attack surface, and AI-fueled cyber threats are driving organizations to rethink their approach to security. Discussions on the best way to adapt to a highly dynamic threat environment will naturally steer toward updating SIEM, as it is core to today’s security operations.

Modern security leaders know that account takeover detection (ATO) isn’t just about spotting a bad login. ATO attacks are part of a broader scam lifecycle – starting with phishing or impersonation, escalating into credential harvesting, and ending with unauthorized access. To stop ATOs effectively, security teams need visibility into this full progression, not just the login attempt. That’s why a true ATO prevention strategy starts long before a password is entered.

APIs are now prime targets for attackers, and as your API landscape grows, so does the challenge of securing it. AppTrana’s API protection just got more powerful—with new enhancements designed to deepen discovery, increase visibility, and strengthen security.