News May 3, 2023

Insider hacks exfiltrate five times as many records

4 min read - How secure is your organization from the inside? If you’re not sure, it might be worth finding out. According to recent data, the rate and cost of insider threats are growing fast. And when an insider breach occurs, the number…

Cloud Security December 13, 2022

How to implement cloud identity and access governance

4 min read - Creating identity and access governance across cloud environments is crucial for modern organizations. In our previous post, we discussed how important human and non-human identities are for these environments and why their management and the governance of their access can…

News November 30, 2022

Abuse of privilege enabled long-term DIB organization hack

2 min read - From November 2021 through January 2022, the Cybersecurity and Infrastructure Security Agency (CISA) responded to an advanced cyberattack on a Defense Industrial Base (DIB) organization’s enterprise network. During that time frame, advanced persistent threat (APT) adversaries used an open-source toolkit…

Zero Trust November 15, 2022

Effectively enforce a least privilege strategy

3 min read - Every security officer wants to minimize their attack surface. One of the best ways to do this is by implementing a least privilege strategy. One report revealed that data breaches from insiders could cost as much as 20% of annual…

Data Protection November 8, 2022

Millions lost in minutes — mitigating public-facing attacks

4 min read - In recent years, many high-profile companies have suffered destructive cybersecurity breaches. These public-facing assaults cost organizations millions of dollars in minutes, from stock prices to media partnerships. Fast Company, Rockstar, Uber, Apple and more have all been victims of these…

Zero Trust July 19, 2022

Boost SAP Security With Zero Trust

6 min read - How can your organization improve its Systems Applications and Products (SAP) risk posture? Aligning with the key principles of zero trust through tangible and specific measures is one way. To begin, let’s define the principles of zero trust. We’ve all…

Cloud Security June 7, 2022

How to Create Identity and Access Governance In and Across Clouds

2 min read - In March 2021, we posted a three-part series about whether cloud-native identity and access management (IAM) controls are good enough for an enterprise. Many of the points we raised at that time are still valid. However, the industry has developed…

Incident Response September 30, 2021

Using Vendor Management to Defend Against Supply Chain Attacks

2 min read - Supply chain attacks are growing more common. According to the Identity Theft Resource Center (ITRC), there were just 19 supply chain attacks in the final quarter of 2020. In the following quarter, that volume grew to 27 attacks — an…

Intelligence & Analytics September 24, 2021

How Privileged Access Management Fits Into a Layered Security Strategy

3 min read - In its early stages, privileged access management (PAM) involved protecting only the passwords used for privileged accounts. But it evolved beyond that single purpose in the years that followed. Nowadays, it includes other security functions like multifactor authentication (MFA), session…

Identity & Access September 21, 2021

Identity Management Beyond the Acronyms: Which Is Best for You?

3 min read - With so many devices and users accessing networks, applications and data, identity access management (IAM) has become a cornerstone of cybersecurity best practices. The short explanation is that you must make sure everyone (and everything) is who they claim they…