Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What is a Sophisticated Bot Attack?

Earlier this year we stated that bot attacks can be run by anyone, from skilled individuals to organised gangs. Bots can hit websites for a number of reasons. Common attacks include credential cracking to account takeover, to scalping. These bots have the power and capability to conduct multiple attacks repeatedly. Those actions have long seen standard for bots though, so what is new in the world of bot attacks? What is making these attacks more sophisticated?

SOC 2 certification: 5 things we learned

Maybe you’re considering AICPA SOC 2 certification? Aikido was recently examined to check that our system and the design of our security controls meet the AICPA’s SOC 2 requirements. Because we learned a lot about SOC 2 standards during our audit, we wanted to share some of the insights that we think might be helpful to someone starting the same process. Read our top tips on becoming ISO 27001:2022 compliant.

Unlocking the Power of AI in Cybersecurity: Key Takeaways from the HMS Belfast Breakfast Briefing

In the rapidly evolving landscape of technology, the fusion of Artificial Intelligence (AI) and cybersecurity is creating both exciting opportunities and formidable challenges. The recent breakfast briefing on the historic HMS Belfast served as a critical forum for industry leaders to explore these issues in depth.

Locker vs Crypto Ransomware: What's the Difference?

While both locker and crypto ransomware are types of ransomware, there is one key difference between the two. The main difference between locker and crypto ransomware is that locker ransomware locks an entire device whereas crypto ransomware only encrypts files and data stored on the infected device. Keep reading to learn more about locker and crypto ransomware and how your organization can prevent these and other ransomware attacks.

From SAP IDM to One Identity: The preferred path for seamless migration

SAP recently announced the end-of-life for SAP Identity Manager (IDM). This announcement required SAP to establish guidelines for existing customers to transition away from the platform with other products. One Identity is a leading vendor of choice for this migration due to its well-established market presence and robust SAP solutions support. In this two-part blog series, we will shed some light on how One Identity can seamlessly integrate with SAP products, starting with its certified ABAP connector.

Solving for CMMC: An Accelerated, Low-Risk Compliance Approach

In a recent webinar, NeoSystems and Deltek unveiled a strategy to help government contractors, compliance officers, and IT professionals achieve Cybersecurity Maturity Model Certification (CMMC) swiftly and with minimal risk. Here’s a synthesis of the critical points discussed, offering valuable guidance on how to navigate the complexities of CMMC.

Role-Based Access Control or Multitenancy-Which is Right for Your Organization?

Choosing the right software to defend your organization, both in real-time and in retrospect, is one of the most important decisions an organization can make. Security teams need to be able to view activity and affect access quickly, and that becomes more difficult at bigger, complex enterprises. A classical approach to this problem is role-based access control (RBAC), but for many organizations, multitenancy is a better fit.

Random but Memorable - Episode 12.9: Previously Generated Internet Slop with Jason Meller

Should businesses be tying compensation and bonuses to security performance? We debate this question and more in the latest instalment of Watchtower Weekly. It's also time to get your best guesses ready for the penultimate game of Security Blank! Plus, we sit down with Jason Meller to discuss the recent acquisition of Kolide and what it means for the future of 1Password. In this episode, you'll learn how we can all make the productive way to work the secure way to work.

The 443 Podcast - Episode 293 - Recall Windows Recall

This week on the podcast, we discuss a new Microsoft Windows feature that is shaping up to be a security nightmare. Before that, we discuss a new research initiative from the Advanced Research Projects Agency for Health (ARPA-H) that could make big improvements in healthcare cybersecurity. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.