Security News

Authenticating an API requires the developer to have a complete understanding of the transaction - from the user interaction through to the outcome - so it requires them to go beyond the limits of the API specification itself. These range from HTTPS and a username and password to API keys which generate a unique string of characters for each OAuth authentication request, which sees developers use a well-known authorization framework to automatically orchestrate approvals.

The answer: Adopt a zero trust approach to cybersecurity. The guide explains how your organization can design a zero trust implementation strategy, select an appropriate methodology, assemble the right tools, and execute the implementation plan for successful zero trust adoption.

In this Help Net Security video interview, George Finney, CSO at Southern Methodist University, talks about his latest book - "Project Zero Trust: A Story about a Strategy for Aligning Security and the Business". Presented in the form of a fictional narrative involving a breach at a company, the book tracks the actions of the company's new IT Security Director.

The answer: Adopt a zero trust approach to cybersecurity. The guide explains how your organization can design a zero trust implementation strategy, select an appropriate methodology, assemble the right tools, and execute the implementation plan for successful zero trust adoption.

Cybersecurity is a serious concern for every organisation today. With 61% of cyberattacks now involving stolen or weak credentials, IT and Security leaders face immense pressures to close the gaps that let bad actors in and protect their customers, workforce, and reputations from harm.

There is a practical zero trust model for data security every company can follow with such a model heeding data access at the start. There are many reasons why companies need to consider a unified, zero trust approach to their data access as part of their data protection strategy - both in terms of value and risk.

ThreatLocker has announced the launch of its newest software add-on; an in-cloud learning feature that will help businesses to strengthen their zero trust security posture. When users request new applications after the endpoints have been secured, system administrators need to make a judgement as to whether to allow the application.

Since incorporating controls for device health and trust at the application layer, our ability to react to device risk has substantially improved. There are approximately 2.6 million device health checks automatically conducted per month.

Most organizations are deep into a phase of major growth and evolution that's called "Digital acceleration." The goal of digital acceleration for organizations is to adapt and thrive-despite the global pandemic and the nonstop introduction of new cyber threats. Digital acceleration has led to a rapid expansion of attack surfaces and creation of new network edges, including LAN, WAN, 5G, and multi-cloud.

Zero trust has quickly progressed from a buzzword to a critical business imperative, Okta's 2022 State of Zero Trust Security Report has found. EMEA businesses are dragging their feet on zero trust strategy - but budgets are on the rise.