The Value of Threat Modeling in an Evolving Security Landscape
Even though threat modeling plays a vital role in addressing cyberattacks, many companies were slow to adopt the cybersecurity tool. Threat modeling was done manually, an extremely time-consuming task, and in a fast-paced threat landscape, manual processes can’t...
ThreatModeler Launches IaC-Assist and CloudModeler to Reduce Threat Drift from Code to Cloud
ThreatModeler, a leader in securing cloud infrastructure from design to deployment, today announced the launch of IaC-Assist and CloudModeler, enabling organizations to implement true DevSecOps. The latest iteration of the company’s technology provides continuous...
AWS re:Invent: It’s Not Too Late to Attend
People and organizations generally want to begin the new year with a clean house. That includes organizations seeking enterprise transformation involving cloud migration. The end of the year is as good a time as any to flip the switch. With a little research, you can...
Bugcrowd Reports Ethical Hackers Prevented $27B in Cybercrime
Over the last year, ethical hackers have prevented more than US$27 billion in cybercrime, according to a report released Tuesday by a leading bug bounty platform. Read more…
Don’t Overlook This Booth #1626 at AWS Reinvent
Are you heading over to AWS Reinvent in Las Vegas, November 29 – December 3, 2021? If so, then there’s a booth you’re going to want to visit, especially if migrating to the cloud is in your future. But first, you have to understand why. The Curious Case of Cloud...
Security Company Faces Backlash for Waiting 12 Months to Disclose Palo Alto 0-Day
There has been considerable debate within the cybersecurity community about Randori, a security firm that waited one year before disclosing a critical buffer overflow bug it discovered in Palo Alto Networks’ GlobalProtect VPN. Read more…
Zero-Day Vulnerability Found in Palo Alto VPN
Researchers on Wednesday discovered a zero-day buffer overflow vulnerability that causes an unauthenticated remote code execution on Palo Alto Networks (PAN) firewalls using the vendor’s GlobalProtect Portal VPN. Read more…
Cyber-Mercenary Group Void Balaur Attacks High-Profile Targets for Cash
A Russian-language threat group is available for hire, to steal data on journalists, political leaders, activists and from organizations in every sector. Russian-language group Void Balaur, also tracked under the name Rockethack, has been identified as a prolific...
