News August 2, 2024

CISA and FBI warn the public about OS command injection vulnerabilities

3 min read - On July 10, 2024, CISA and the FBI released a new Secure by Design Alert that highlighted the dangers of OS (operating system) command injection vulnerabilities in common software products. Although these vulnerabilities continue to surface in modern software solutions,…

News June 4, 2024

CISA warns about directory traversal vulnerabilities

3 min read - On May 02, 2024, CISA and the FBI released a Security by Design alert to all software manufacturers and customers regarding an ongoing security vulnerability associated with “directory traversal” (also known as path traversal) in the software design process. The…

Risk Management October 20, 2022

The dangerous flaws of Web3 security, according to a former hacker

4 min read - “New and improved” is the refrain of progress, but new technology doesn’t always turn out to be an improvement. In the case of the evolution from Web2 to Web3, a former hacker revealed how recent changes have created an all-new…

Application Security September 22, 2022

Does Follina mean it’s time to abandon Microsoft Office?

4 min read - As a freelance writer, I spend most of my day working in Microsoft Word. Then, I send drafts to clients and companies across the globe. So, news of the newly discovered Microsoft Office vulnerability made me concerned about the possibility…

Network August 23, 2022

Beyond shadow IT: Expert advice on how to secure the next great threat surface

4 min read - You’ve heard all about shadow IT, but there’s another shadow lurking on your systems: Internet of Things (IoT) devices. These smart devices are the IoT in shadow IoT, and they could be maliciously or unintentionally exposing information. Threat actors can…

Data Protection August 22, 2022

CISA or CVSS: How today’s vulnerability databases work together

3 min read - In the cybersecurity field, large databases of known threats and vulnerabilities have often been an essential resource. These catalogs show you where to focus your efforts. They’re also a good tool for prioritizing patches to increase security and mitigate the…

Data Protection August 4, 2022

Cybersecurity and the metaverse: Patrolling the new digital world

2 min read - The metaverse is a hot topic, and it’s easy to see why. It promises a 3D model of the internet, where virtual reality (VR) and mixed reality offer endless escapism. It provides a place parallel to the physical world where…

Endpoint March 16, 2022

IOCs vs. IOAs — How to effectively leverage indicators

4 min read - Cybersecurity teams are consistently tasked to identify cybersecurity attacks, adversarial behavior, advanced persistent threats and the dreaded zero-day vulnerability. Through this endeavor, there is a common struggle for cybersecurity practitioners and operational teams to appropriately leverage indicators of compromise (IOCs)…

Network March 14, 2022

93% of organizations have network vulnerabilities: Here’s how to beat the odds

3 min read - Cybersecurity is an ongoing battle, and the latest figures from penetration testers prove that the fight is far from over. According to Positive Technologies, 93% of all networks are open to breaches due to common vulnerabilities. However, there are proactive…

Risk Management January 28, 2022

When it comes to stopping IoT security camera breaches, focus on procurement

4 min read - Earlier this year, an enterprise security camera system maker suffered a data breach. The incident, which involved the compromise of a Jenkins server, enabled a group of attackers to bypass the company’s authorization system, including its two-factor authentication processes. Those…