Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

OWASP Top 10 2021 - A09: Security Logging and Monitoring Failures

Logging and monitoring failures occur when security-relevant events are not properly captured, stored, or analyzed, making it difficult or impossible to detect ongoing attacks or respond effectively. These failures include missing logs, incomplete data, ineffective alerting mechanisms, insecure log storage, and inadequate retention policies. Such gaps are often exploited by attackers who rely on invisibility to move laterally across systems.

OWASP Top 10:2021 - A02 Cryptographic Failures

Cryptographic failures refer to the improper use, implementation, or management of cryptographic systems. These issues often result in unauthorized exposure of sensitive data like passwords, credit card numbers, or personal records. In the OWASP Top 10 – 2021, this category replaced the broader ‘sensitive data exposure’ from the 2017 list, with a sharper focus on the misuse or failure of cryptographic mechanisms.

Falcon Adversary OverWatch with Next-Gen SIEM

Discover how CrowdStrike Falcon Adversary OverWatch with Next-Gen SIEM expands threat hunting across endpoints, identities, cloud, and third-party data to stop breaches quickly. By correlating subtle signals and enhancing them with world-class intelligence, OverWatch helps detect threats earlier and reduce alert fatigue. Gain 24/7 proactive threat hunting across your entire environment because breaches never wait.

AI - More Than a Buzzword?

Lately, the common theme in emerging identity security technology has been… well, you know. AI. It’s all anyone wants to talk about. All of us in the IAM business have been scurrying to find a way to tell our customers and the market that, yes! we have AI! we've had it all along! If that were so obviously true, then why are we having to tell you about it now? As an identity security technologist, I’ve experienced the growing pains of AI in IAM.

API Compliance

Most organizations have no idea how many APIs are running in their environment – and that's a significant security problem. In this essential discussion, A10's security experts Akhilesh Dhawan and Jamison Utter tackle one of cybersecurity's biggest blind spots: API compliance and protection. Unlike traditional applications, APIs operate without standardized functionality requirements, creating a regulatory nightmare. This lack of standards renders APIs nearly impossible to govern effectively, making API discovery a mission-critical security function. If you can't see it, you can't protect it.

SOC 2 vs. HIPAA: Everything you need to know

SOC 2 and HIPAA are widely adopted security standards aimed at protecting in-scope organizations and the sensitive data they process from cybersecurity threats. While they have the same overarching security goal, HIPAA and SOC 2 differ in a few major aspects, and their implementation specifics can also vary considerably. ‍ Depending on your security posture and compliance needs, you may need to implement one or both frameworks.

What is Union-based SQLi? How Hackers Exploit Your Database

Union-based SQL injection is one of the oldest—and most dangerous—ways attackers steal sensitive data from your databases. By exploiting the UNION operator in SQL, they can merge malicious queries with legitimate ones and extract usernames, emails, passwords, and more. This video explains how the attack works, why it's still a threat, and what steps you can take to prevent it.

Top Container Scanning Tools in 2025

Containers have become the backbone of modern DevOps, but they also introduce new security headaches. A single vulnerable base image or misconfigured container can snowball into a major breach across dozens of services. In fact, recent research found that about 75% of container images carry high-severity or critical vulnerabilities. Add to this the 2025 trends of supply chain attacks and ever-evolving CVEs, and it’s clear that container scanning tools are a must-have.

Comprehensive Guide to Implementing Asset Monitoring Solutions

Are you seeking support to avoid unexpected asset malfunctions? Companies utilize asset monitoring solutions to maintain equipment operations without disruptions while protecting against costly downtime periods and extending the life of important infrastructure. Here's the good news... These solutions implement more easily than anticipated but yield substantial advantages. Our guide demonstrates all necessary steps to establish an efficient asset monitoring system for your business.

Fullscreen BitM Attack Discovered by SquareX Exploits Browser Fullscreen APIs to Steal Credentials in Safari

Today, SquareX released new threat research on an advanced Browser-in-the-Middle (BitM) attack targeting Safari users. As highlighted by Mandiant, adversaries have been increasingly using BitM attacks to steal credentials and gain unauthorized access to enterprise SaaS apps. BitM attacks work by using a remote browser to trick victims into interacting with an attacker-controlled browser via a pop-up window in the victim's browser.