Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Impact of continuous control assurance on audit readiness

Owing to the rapidly evolving regulatory and operational landscape, organizations are increasingly focused on ensuring that their internal control frameworks are both resilient and adaptive. Continuous control assurance (CCA) plays a pivotal role in enhancing audit readiness, enabling companies to maintain robust compliance standards while minimizing disruption to their routine operations.

It's Time to Prepare as Scattered Spider Spreads Its Web to the US

Scattered Spider, aka UNC3944, is switching the focus of its retail-oriented attacks from the UK market to the US, according to published reports. At this time, no US retailers have been named as targets, but the alleged Scattered Spider activity is a clear sign retailers in the US and worldwide need to prepare.

How Does Privileged Access Management Work?

Privileged Access Management (PAM) works by controlling, monitoring and securing access to privileged accounts and resources through features such as credential vaulting, just-in-time access control, session management and automation. It enforces the principle of least privilege so that only authorized users and systems have access to sensitive data. Continue reading to learn more about how privileged access management works to protect your organization.

May 19, 2025 Cyber Threat Intelligence Briefing

This week’s briefing covers: Coinbase Insider Threat Leads to Theft of Customer Data Coinbase has released a blog post and filed an SEC Form 8-K reporting an incident whereby they received an email attempting to extort the company for $20m. According to the post, the threat actors approached customer support staff and “used cash offers to convince a small group of insiders to copy data in our customer support tools”. Stolen data includes personal details including identity documents and account data include balance and transaction history.

BNPL Fraud Risks: Why 'Buy Now, Pay Later' Is a Target for Cybercriminals

Buy Now, Pay Later services offer a more flexible method for online purchases. Consumers aren't required to make an immediate, full payment; they can instead split the sum into a schedule that works for them. These services work similarly to credit cards but do not incur interest fees over time. Most people have seen Klarna, Afterpay, or Affirm offered on Amazon or other e-commerce websites. They are the most popular BNPL providers, but the market is steadily growing.

Why You Can't "SAST" Your Way Through AI Security #AppSec #LLMs #CloudSecurity #Cybersecurity

AI apps break the traditional rules of application security. Here’s why: AI is cloud-native from day one. That means you’ve got runtime risk before your app even launches. Static analysis (SAST) doesn’t cut it. You can’t predict risk from just looking at code. AI models are just vectors. You need new methods.

Top Security Threats Worldwide Q4 2024

Join WatchGuard Director of Security Operations Marc Laliberte and Security Engineer Trevor Collins as they discuss key findings from the WatchGuard Threat Lab’s Q4 2024 Internet Security Report. They’ll cover the latest malware and network attack trends targeting small and midsized enterprises and defensive tips you can take back to your organization to stay ahead of modern threat actor tactics.

2025 Ransomware Update with Ryan Estes - The 443 Podcast - Episode 329

This week on the podcast, we bring on Ryan Estes from the WatchGuard Threat Lab to discuss the latest trends in ransomware operations. Ryan is an expert in ransomware analysis and currently owns the data behind WatchGuard's public Ransomware Tracker on the WatchGuard Security Center. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.