Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

‍ In my previous blog, I shared details about the global proliferation of data privacy regulations, including the fact that at least 10% of U.S. states will be covered by stronger data privacy regulations by the end of 2023. However, an interesting trend has emerged: Newer regulations such as the California Privacy Rights Act (CPRA), General Data Protection Regulation (GDPR), and Brazil’s Data Protection Law (LGPD) all regard employees’ personal data as highly-sensitive.

A selection of this week’s more interesting vulnerability disclosures and cyber security news. For a daily selection see our twitter feed at #ionCube24. With the big news of a crucial tech industry bank in the last week, its no surprise that fraudsters are jumping on the interest in news articles. Here we go again…

In this blog post, we outline the steps that make up the incident response lifecycle and explain how it can be used alongside the Kroll Intrusion Lifecycle to help organisations strengthen their security posture.

Silicon Valley Bank (SVB) experienced a rapid implosion last week after a historic bank run. While many are discussing the immediate financial impacts to the bank accounts — which were largely held by venture capitalists, investors, and technology business owners — and the larger impact on banking in general, it’s important to note that there will be a secondary impact. Hackers and scammers are going to take advantage of the confusion to launch a barrage of social engineering attacks.

Streaming platforms have become the go-to option for entertainment, especially in the wake of the pandemic. However, with an increase in the number of streaming services, the security concerns surrounding them have also escalated. While you may be enjoying your favorite TV shows or movies, have you ever wondered whether your private data is safe from prying eyes? We'll take a closer look at the most secure streaming services that provide peace of mind while you stream.

In the face of rising cybersecurity threats, cyber readiness continues to be an urgent matter for every organization.

Ensuring employees operate securely regardless of location has grown in importance over the last several years as the number of people working remotely has exploded. These workers are most likely operating within a software-defined wide area network (SD-WAN). They use SD-WAN to work with data that is now processed more and more in many different cloud services.

Almost everyone understands what passwords are, and how they work. But passkeys? That’s a different story.

Legacy gas and coal plants are being aged out – and no one wants to pay enough to keep them going. With increased pressure from green energy laws and added competition from renewable sources, these monsters of Old Power are being shown the door. Considering they've predated and precipitated all Industrial Revolutions (except for this last one – that was digital), it's safe to say they've had a good long run. So, what's the fuss?

Lack of resources & rate limiting is #4 on the OWASP Top 10 API Security Risks 2019. It is a prevalent API security risk. As per OWASP, rate limiting and resource-related flaws in APIs are quite easy to exploit, especially with automated toolkits and for-hire services. But the exploitation of the lack of resources & rate limiting flaws has severe consequences for the organization. So, what exactly is this security risk, and how do you prevent it?