Become the Next Executive Director
As one chapter closes, another begins. Julie Smith, who has been fundamental in establishing the IDSA as the trusted identity security source for IT and cybersecurity professionals, has been appointed to…
Witchetty APT used steganography in attacks against Middle East entities
A cyberespionage group, tracked as Witchetty, used steganography to hide a previously undocumented backdoor in a Windows logo. Broadcom’s Symantec Threat Hunter Team observed a threat actor, tracked as Witchetty,…
Cloudflare partners with Yubico to help customers in adopting a hardware key security model
Cloudflare has announced a new offering to make physical security keys the most accessible and economical solution for customers to better secure their business and employees. Cloudflare customers will be…
Episode 3: Unlock Your Modernization Advantage: Your Database
Modernization is on the minds of IT decision makers, and with good reason — legacy systems cannot keep up with the realities of today’s business environment. Additionally, many organizations are…
Common Cloud-Native Security Misconfigurations & Fixes
Cloud configuration errors are a major concern for modern DevOps teams, introducing a new attack surface with numerous potential points of vulnerability. Read on to discover some of the most…
Friday Squid Blogging: Breeding the Oval Squid
Japanese scientists are trying to breed the oval squid in captivity. As usual, you can also use this squid post to talk about the security stories in the news that…
Worried About the Exchange Zero-Day? Here’s What to Do
While organizations wait for an official patch for the two zero-day flaws in Microsoft Exchange, they should scan their networks for signs of exploitation and apply these mitigations.