Advocating for a larger budget is a common need for most security professionals. With so many business obligations fighting for priority and funding, even vital concerns like Vendor Risk Management can fall through the cracks. However, third-party cyber risks can… Read More "Securing Budget for TPRM: How to Convince Executives to Invest"
Unternehmen müssen ein Governance-, Risiko- und Compliance-Rahmenwerk (GRC) speziell für KI einführen, wenn sie nicht den Risiken Künstlicher Intelligenz zum Opfer fallen wollen. Carl DMaster – shutterstock.com Der Einsatz von Künstlicher Intelligenz (KI) in Unternehmen birgt vielfältige Risiken in den… Read More "AI Governance – So gestalten Sie die KI-Revolution sicher"
ESET researchers make a discovery that signals a shift on the UEFI threat landscape and underscores the need for vigilance against future threats 27 Nov 2024 ESET researchers have uncovered the first UEFI bootkit designed specifically for Linux systems. The… Read More "A new chapter in UEFI threats"
Cyber insurance is becoming increasingly important and necessary as cyber attacks become more sophisticated and frequent. Healthcare is one of the most targeted industries because of the valuable medical data they handle and the lack of proper cybersecurity protections. Although… Read More "How to Reduce Cyber Insurance Premiums in Healthcare"
May 21, 2025Ravie LakshmananMobile Security / Browser Security Cybersecurity researchers have discovered a new campaign that employs malicious JavaScript injections to redirect site visitors on mobile devices to a Chinese adult-content Progressive Web App (PWA) scam. “While the payload itself… Read More "Researchers Expose PWA JavaScript Attack That Redirects Users to Adult Scam Apps"
As the mercury starts to dip and the Halloween decorations are cleared away, it can mean only one thing: the countdown to Christmas has begun. But the festive season – or Golden Quarter if you’re a retailer – is not… Read More "Scams to look out for this holiday season"
Organizations looking to securely decommission end-of-life IT assets now have a useful how-to guide published by the National Cyber Security Centre (NCSC). The agency warned that safely retiring data, software and hardware is a critical endeavor with “potentially severe repercussions”… Read More "NCSC Helps Firms Securely Dispose of IT Assets"
If you’re new to vendor risk assessments, this article includes a real-life example of service provider risk assessment, helping you understand their structure and the details they entail. Learn how UpGuard streamlines vendor risk assessments > Risk Assessments vs. Security… Read More "Vendor Risk Assessment Example (2025)"
Continuous Integration and Continuous Delivery/Deployment (CI/CD) refers to practices that automate how code is developed and released to different environments. CI/CD pipelines are fundamental in modern software development, ensuring code is consistently tested, built, and deployed quickly and efficiently. While… Read More "Securing CI/CD workflows with Wazuh"
Zero days under attack, a new advisory from ‘Five Eyes’, thousands of ICS units left exposed, and mandatory MFA for all – it’s a wrap on another month filled with impactful cybersecurity news 29 Nov 2024 As you might expect,… Read More "Month in security with Tony Anscombe – November 2024 edition"
