The Case Against Abandoning CrowdStrike Post-Outage

October 31, 2024 at 10:01AM The July CrowdStrike outage highlighted risks in vendor security, prompting discussions on industry responses to such events. Companies should assess vendor reliability, avoid hasty changes, and maintain a balanced approach to updates. Leaders must act cautiously, avoiding panic-driven decisions while improving cybersecurity resilience and business continuity strategies. ### Meeting Takeaways … Read more

Think You’re Secure? 49% of Enterprises Underestimate SaaS Risks

October 23, 2024 at 06:36AM A significant portion of security practitioners lack awareness of their organization’s SaaS deployments, with only 15% centralizing SaaS security. This disconnect, paired with a culture that undervalues proactive security, leads to increased vulnerabilities. Establishing a security-first culture and implementing continuous monitoring are essential to mitigate risks associated with decentralized SaaS … Read more

Why I’m Excited About the Future of Application Security

October 21, 2024 at 10:04AM The text discusses advancements in application security, emphasizing the proactive approach of Application Detection and Response (ADR). It highlights how ADR enhances real-time visibility, enabling quicker identification of vulnerabilities and better integration of security with development teams. This shift is crucial for addressing evolving threats in complex environments. **Meeting Takeaways … Read more

Supply Chain Cybersecurity Beyond Traditional Vendor Risk Management

October 18, 2024 at 10:04AM Supply chain attacks are increasingly common, necessitating a shift from traditional vendor risk management to continuous, proactive security measures. Key strategies include real-time vendor monitoring, blockchain for transparency, zero-trust access protocols, and collaborative security practices. Organizations must adopt a comprehensive approach to protect their entire ecosystem from evolving threats. ### … Read more

Internet Archive Slowly Revives After DDoS Barrage

October 17, 2024 at 02:31PM The Internet Archive is gradually restoring its services after a data breach affected 31 million users, leading to a week-long outage. Founded in 1996, it offers free access to vast digital resources. Security experts emphasize the need for enhanced data protection measures amid rising cyber threats, including DDoS attacks. ### … Read more

4 Ways to Address Zero-Days in AI/ML Security

October 17, 2024 at 01:03PM The rapid adoption of AI and machine learning raises concerns about zero-day vulnerabilities, unique to these technologies. Traditional security practices must adapt to address AI-specific threats, such as prompt injection and data leakage. Security teams are urged to integrate security throughout the AI lifecycle and conduct proactive audits to mitigate … Read more

The Rise of Zero-Day Vulnerabilities: Why Traditional Security Solutions Fall Short

October 15, 2024 at 08:12AM The rise of zero-day vulnerabilities poses significant threats to organizations, exploiting unpatched software flaws. Traditional security solutions fail to detect these novel attacks due to their reliance on historical data. Network Detection and Response (NDR) offers proactive security through machine learning and anomaly detection, enabling early identification of threats and … Read more

Tackling Vulnerabilities & Errors Head-on for Proactive Security

August 9, 2024 at 10:01AM Verizon’s latest report shows a threefold increase in hacker exploitation of vulnerabilities, raising concerns for cybersecurity leaders. Organizations face challenges in managing vulnerabilities, with the expanding attack surfaces and difficulties in patching. The report also highlights the growing risks posed by software and partner ecosystems, emphasizing the need for proactive … Read more

Threat Hunting Market Worth $6.9B by 2029

July 22, 2024 at 02:08PM The threat hunting market is projected to grow significantly, reaching approximately USD 3.4 billion in 2024 and expected to increase to about USD 6.9 billion by 2029. The proactive approach of threat hunting and the global shortage of cybersecurity professionals are driving the market. Large enterprises and the Asia Pacific … Read more

NetSPI Acquires Hubble, Adds CAASM to Complement its IEASM

June 13, 2024 at 05:25PM NetSPI acquires Hubble, a Northern Virginia-based cyber asset attack surface management solution. The integration will empower security teams with complete visibility of their attack surfaces and asset management. NetSPI CEO, Aaron Shilts, highlights the importance of the acquisition on the company’s journey towards proactive security. Founder Tom Parker will join … Read more