Featured

Now in its ninth successive year, the much-anticipated annual European Cybersecurity Blogger Awards, sponsored by KnowBe4 and Qualys, is now open for nominations. The awards have always been committed to celebrating the cybersecurity industry’s most coveted bloggers, vloggers, podcasters and social media influencers. Previous award winners have included renowned blogging and podcast stars such as Troy Hunt, the creator of Have I Been Pwned, Graham Cluley, Carole Theriault and Geoff White.   To be part of...

There is often confusion between Cloud Access Security Brokers (CASB) and SaaS Security Posture Management (SSPM) solutions, as both are designed to address security issues within SaaS applications. CASBs protect sensitive data by implementing multiple security policy enforcements to safeguard critical data. For identifying and classifying sensitive information, like Personally Identifiable Information (PII), Intellectual Property (IP), and business records, CASBs definitely help. However, as the number of SaaS apps increase, the amount of misconfigurations and...

One week later and International Women's Day is still fresh in our minds. There is still some way to go but every day that we challenge the stigma and bias that impact women in the workplace. Obrela Security Industries have launched a campaign to celebrate women in the cybersecurity industry. You can read their blog here The persistent cyber skills shortage is getting worse. Despite gender representation generally improving over the past 5 years, there...

This week, smart vulnerability management provider Edgescan has published the findings of its 2022 Vulnerability Statistics Report, which for the 7th year running offers a comprehensive view of the state of vulnerability management globally. The report reveals that organizations are still taking nearly two months to remediate critical risk vulnerabilities, with the average mean time to remediate (MTTR) across the full stack set at 60 days. High rates of “known” (i.e. patchable) vulnerabilities which have...

https://vimeo.com/683449370/53eb067506   Armis, unified asset visibility and security company, announced the discovery of three zero-day vulnerabilities in APC Smart-UPS devices that can allow attackers to gain remote access. If exploited, these vulnerabilities, collectively known as TLStorm, allow threat actors to disable, disrupt, and even destroy APC Smart-UPS devices and attached assets, researchers have warned.   Uninterruptible power supply (UPS) devices provide emergency backup power for mission-critical assets in data centres, industrial facilities, hospitals, and more....

With 85% of data breaches caused by social engineering or human error, creating a company-wide security culture has risen up the agenda for many organisations. However, the phrase can be problematic in itself – as definitions vary, with some even equating it to security awareness training. KnowBe4 says it wants to change this and recognise the multi-faceted nature of security culture. For the first time, KnowBe4 has defined security culture as “the ideas, customs, and...

Salt Security released its Salt Labs State of API Security Report, Q1 2022. The bi-annual report found that 95% of surveyed organisations have experienced an API security incident in the past 12 months. The research showed that 34% of respondents - all of whom are running production APIs - lack any kind of API security strategy. This lack of defence presents significant business risk to enterprises in the form of slowed business innovation, compromised consumer...

Cato Networks has recently reported its 2021 business results, showing a growing revenue by 96% YoY, increasing headcount by 66%, and a doubling in valuation to $2.5 billion with an added $200 million investment.    In a new Total Economic Impact (TEI) study, Forrester Research found that Cato delivers 246% ROI in under six months. Along with performance improvements, increased security posture, and reduced operational and maintenance costs, the study found IT teams experienced higher employee morale, which is particularly...

Yesterday, Illusive released its Analysing Identity Risks (AIR) 2022 report, which examines the unmanaged, misconfigured and exposed identity risks within organisations. The report shows that all organisations are vulnerable to attack, despite the deployment of privileged account management (PAM), multi-factor authentication (MFA) and other identity and access management (IAM) solutions. Illusive's security teams witnessed these blind spots firsthand in the financial services, healthcare, and retail sectors. According to Gartner®, “Many breaches are caused by security...

This week, the NHS reported a data leak incident to the Information Commissioner's Office, which puts third-party contractor cybersecurity risks in the spotlight.   What happened? A former employee of PSL Print Management, a consultancy used by the NHS, requested all emails and text messages regarding his employment at the company. PSL obliged, but sent him a USB stick that seemingly contained the company's entire email server contents, including thousands of patient letters that contained...