Security News

Enhancing mainframe security with proven best practices
2023-11-15 05:30

Mainframe systems have served as the bedrock of enterprise networks for years, standing unmatched in terms of reliability, scalability, and data protection. Security risks have become a pressing concern as the digital landscape evolves, emerging practices like DevOps, the rise of open-source, and the move to hybrid cloud models.

Product showcase: Nudge Security’s SaaS security and governance platform
2023-11-15 04:00

Nudge Security is the world's first and only solution to address SaaS security and governance by working with employees-not against them. The platform distributes SaaS administration without sacrificing visibility, centralized governance, or control over the organization's cloud and SaaS security posture.

Another month, another bunch of fixes for Microsoft security bugs exploited in the wild
2023-11-15 00:36

Patch Tuesday Heads up: Microsoft's November Patch Tuesday includes fixes for about 60 vulnerabilities - including three that have already been found and abused in the wild. The third vulnerability that was exploited before Microsoft could push a patch out, CVE-2023-36025, allows miscreants to bypass security features in Windows Defender SmartScreen - Redmond's anti-phishing and anti-malware feature.

The Importance of Continuous Security Monitoring for a Robust Cybersecurity Strategy
2023-11-14 11:56

Continuous monitoring is a dynamic approach that encompasses several techniques to fulfil a multi-layered defense strategy. Unlike point-in-time assessments, which are analogous to taking a photo of your security posture, continuous monitoring is like a 24/7 live stream.

Collaborative strategies are key to enhanced ICS security
2023-11-14 05:30

Our conversation will explore the importance of cross-departmental collaboration, balancing security with system functionality, and the dynamic nature of security measures that evolve with emerging threats. Can you shed some light on the best starting point for crafting a solid ICS security roadmap?

Top 5 Marketing Tech SaaS Security Challenges
2023-11-13 11:35

Marketing apps such as Salesforce, Hubspot, Outreach, Asana, Monday, and Box empower marketing teams, agencies, freelancers, and subject matter experts to collaborate seamlessly on campaigns and marketing initiatives. In this article, we explore the top Marketing SaaS application use cases, from external users and publicly shared links to connected apps and credit cards - and how to ensure the security and integrity of the data stored within them.

CISOs vs. developers: A battle over security priorities
2023-11-13 06:00

There is a clear disconnect and even some distrust between CISOs and developers related to how security-conscious each department is within the organization, who is responsible for preventing and mitigating security issues, how well CISOs understand developers' day-to-day tools, and how well developers understand the risk associated with aspects of their job and the tools they use. Only 43% of developers believe that CISOs are "Very familiar" with how container images fit into their work, which is low when compared to other aspects of how developers perceive their security team to understand their work: open-source software libraries and projects, source code repositories and source code management systems, and software build tools.

Australian Nonprofit Cyber Security Is So Poor It Might Be Affecting Donations
2023-11-12 22:01

Research from Infoxchange indicates that poor cyber security practices in Australia's not-for-profit sector are putting its donors' and communities' data at risk. A mere 12% of NFPs conducted regular cyber security awareness training, and only one in five had a cyber security policy in place.

GitHub Universe: Open Source Trends Report and New AI Security Products
2023-11-10 15:38

GitHub Advanced Security gains AI features, and GitHub Copilot now includes a chatbot option. At the GitHub Universe conference held in San Francisco and virtually on Nov. 8 and Nov. 9, 2023, the company revealed its new open source trends report as well as changes to GitHub Copilot and AI enhancements for GitHub Advanced Security.

Data protection demands AI-specific security strategies
2023-11-10 04:30

When asked what significant initiatives their company is taking on in the next 12 months, 80% of respondents said their top priorities were data security related initiatives - such as implementing stronger data governance and security controls, and modernizing data architectures with new concepts like data mesh - while only 20% noted integrating AI into business processes will be a top priority. "With the rapid onset of AI solutions and ongoing push to migrate data to the cloud, data leaders are now grappling with how to prioritize data security, agility, and visibility. They need solutions that provide both proper data protection and the flexibility to use data to drive value," said Matt Carroll, CEO of Immuta.