How data security posture management complements CSPM

If you pay attention to cloud security, you may have heard about a new category of security tools called data security posture management, or DSPM. These tools ensure sensitive data always has... Read more »

Mandiant floats off into Google Cloud

Fifteen months after a “velvet divorce” from previous partner FireEye, the acquisition of cyber defence, threat intelligence and incident response services specialist Mandiant by Google has formally completed on 12 September. Valued at... Read more »

CISOs should spend on critical apps, cloud, zero-trust, in 2023

Although the global economy faces troubled times, we can expect no pause in cyber threats and attacks, so CISOs must direct investment towards technologies to protect customer-facing and revenue-generating workloads, and should... Read more »

Security Think Tank: Adding trust to AppSec and DevSecOps

App stores have an implied level of trust associated with them, meaning we rarely read the fine print in the terms and conditions. It is easy to assume that because they are... Read more »

NCSC CyberUK event heads to Belfast in 2023

The National Cyber Security Centre’s (NCSC’s) flagship annual conference, CyberUK, is heading to the ICC Belfast conference centre in Northern Ireland in April 2023, with the theme of “Securing an open and... Read more »

data integrity

By Data integrity is the assurance that digital information is uncorrupted and can only be accessed or modified by those authorized to do so. Integrity involves maintaining the consistency, accuracy and trustworthiness of... Read more »

Chinese APT using PlugX malware on espionage targets

Bronze President, the China-backed advanced persistent threat (APT) group that also goes by the name of Mustang Panda, has been conducting a widespread campaign against targets of interest to Chinese espionage, using... Read more »

Dutch cyber security organisations to join forces

The Netherlands’ National Cyber Security Centre (NCSC), Digital Trust Centre (DTC) and Cyber Security Incident Response Team for Digital Service Providers (CSIRT-DSP) are to merge into a single central expertise centre and... Read more »

Security Think Tank: Creating a DevSecOps-friendly cyber strategy

As DevSecOps become more complex – with various IDE platforms, coding languages, open source components, multicloud environments, and so on – the risk of potential breaches, vulnerabilities and compliance violations increases. Therefore,... Read more »

Albania cuts diplomatic ties with Iran after cyber attack

In a geopolitical “first”, the Albanian government has reacted to a cyber attack on its systems that was attributed to an Iran-backed advanced persistent threat (APT) actor by severing diplomatic ties with... Read more »