Cloud Security July 6, 2022

Securing Cloud Technology in a Growing Threat Landscape

4 min read - Cloud technologies are becoming more and more popular. Many companies shifted their workloads and their IT infrastructures into the cloud. The advantages are clear: more flexibility and scalability, less admin overhead and often cost savings. But with those advantages also…

Cloud Security May 4, 2022

One Small Error by DevOps, One Giant Opening for Attackers

4 min read - When you look at breach statistics in today’s cloud-dominated IT world, you can see several examples where a small error made by the DevOps or CloudOps team has led to a tremendous impact on businesses’ reputations or, in some cases,…

Zero Trust September 1, 2021

The OWASP Top 10 Threats Haven’t Changed in 2021 — But Defenses Have

5 min read - The more things change, the more they stay the same. Despite a changing threat landscape and threat actors who keep upping their game, the vulnerabilities behind the threats remain consistent. The OWASP Top 10, ranked by the Open Web Application…

Intelligence & Analytics April 20, 2021

‘Inbox Zero’ Your Threat Reports: How to Combat Security Alert Fatigue

3 min read - At best, a new cybersecurity alert should trigger immediate action. But we all know in practice that work is not always clear cut. A new alert can find itself as just the latest un-addressed number in the inbox. In an…

Artificial Intelligence June 19, 2018

Humans vs. Machines: Will Adversarial AI Become the Better Hacker?

3 min read - The advent of artificial intelligence (AI) brought with it a new set of attacks using adversarial AI. How can organizations fight an unknown enemy that's not even human?

September 26, 2014

Shellshock: Where the Bash Bug Could Hit the Hardest

2 min read - The Bash bug, a new vulnerability known as Shellshock, could have a sizable impact on an untold number of devices, according to security experts.

Threat Research August 25, 2014

Why Heartbleed Still Matters: Hindsight in the Age of Pervasive Exploits

4 min read - The latest IBM X-Force Threat Intelligence Report discusses the aftermath of the Heartbleed vulnerability, what organizations can learn and improve upon.

Software Vulnerabilities August 5, 2014

Apache Cordova Vulnerability Discovered: 10% of Android Banking Apps Potentially Vulnerable

8 min read - The IBM Security X-Force Research team has uncovered a serious vulnerability that affects many Android applications built on the Apache Cordova platform.

CISO July 24, 2014

Cyber Security Threats Gain Boardroom Attention

2 min read - According to a recent study, cyber security threats have become the number-one concern of corporate boards because of their possible scale and cost.

Banking & Finance June 9, 2014

ZeuS.Maple Variant Targets Canadian Online Banking Customers

5 min read - Trusteer security research team identified a series of attacks carried out by a new ZeuS.Maple variant that targets customers of leading Canadian banks.