Business

People, processes, and technology: if a company has gaps in its defenses, they most likely come from one of these three areas. We walk through a real-world breach, and explain how to stand up to attackers without hiring a huge team or needing to vastly increase the security budget.

We believe that investing in cybersecurity, like any other investment, should pay off. This post explains what a small company needs to make its security setup work for the business instead of staying a formality.

A new variation of ClickFix allows attackers to gain access to Microsoft 365 accounts. We break down how this technique works, and what threat it poses to organizations.

How attackers gain access to corporate services without stealing passwords or cookies: we’re analyzing the Shadow Token via Remote Debug technique used in ToddyCat APT attacks.

We’re breaking down why developers have moved into the crosshairs, the specific tactics attackers are using, and how to reduce the risks of company infrastructure being compromised.

Breaking down core cybersecurity terms that colleagues often interpret differently or incorrectly.

Crooks are impersonating your brand to attack customers, partners, and employees. How do you spot — and stop — an attack of the clones?

Here’s how to mitigate the risks of targeted attacks on your organization’s mail servers.

Systematic measures and tools that organizations can use to defend against malicious browser extensions.

We examine how popular Canon printers could become a foothold for attackers within an organization’s network.

Attackers are abusing legitimate websites to host hidden SEO links. We break down their tactics, and what you can do about it.

WordPress sites are increasingly becoming targets of attacks exploiting vulnerabilities in plugins and themes. In this post, we examine recent cases and share protection tips.

Companies need to build a culture of security, but this is impossible when employees are afraid to discuss incidents or suggest improvements.

We dive into which corporate systems support passkeys, where compatibility falls short, and why we probably won’t be saying goodbye to passwords anytime soon.

How cybercriminals can exploit your online store — and how to stop them.

Researchers have found several vulnerabilities in the Sitecore CMS platform that enable unauthenticated remote code execution (RCE).

How to assess all the complexities of open-source application integration in advance, and choose the most efficient solutions.

Since 2016, a threat actor has been exploiting insecure plugins and themes to infect WordPress websites and redirect traffic to malicious websites.

Businesses reaching the “acceptance stage”: given inevitable breaches — how to prepare for them?

Scammers are using Google ads to push fake versions of real websites – and they’re after business accounts and company data.

How organizations implement zero-trust principles, and what CISOs advise for project success.