10 articles that week
Escape - The API Security Blog, Friday, November 24,2023
Penetration testing, commonly known as pentesting, involves simulating a real attack on a server to assess its vulnerabilities against potential real-world attacks. While the primary goal is to emulate concrete threats, pentesting can extend beyond, offering insights into the potential consequences if confidential data were to fall into malicious hackers' hands.
more →
Opensource For U, Thursday, November 23,2023
Applying security principles to address cloud cost challenges is the need of the hour. This first part in the series on security and cost optimisation in the enterprise cloud explains that these are not isolated concerns but are truly interconnected in a well-managed cloud environment.
more →
Check out the Q2 2024 Vulnerability Watch report
This report objectively captures the most-significant CVEs and vulnerabilities identified in the third quarter of 2024. This isn't just a top ten list, but takes the extra steps to outline exposure risk specifications and to provide practical mitigation actions.
more →
ISACA, Wednesday, November 22,2023
Accounts payable (AP) fraud is one of those threats that most people inside the four walls of your organization aren't aware of. However, that doesn't dampen its severity.
more →
Security Boulevard, Tuesday, November 21,2023
Today, malware-infected bots are used for everything from stealing passwords to launching some of the most disruptive network-based attacks in history. Case in point are the direct-path attacks from DDoS-capable botnets such as Mirai, which are frequently leveraged by groups like Killnet. 
more →
DARKReading, Tuesday, November 21,2023
Effective security awareness programs educate staff about risks and - if done well - dramatically reduce data breaches and attacks within an organization. While there are many tactics that work, there are also plenty of clunkers.
more →
TechCrunch, Tuesday, November 21,2023
Indeed reports that almost one in five jobs are highly exposed to generative AI. The technology has proved advantageous for cybersecurity careers, automating threat data analysis and allowing cybersecurity professionals to focus more on mitigating the risks.
more →
DataCenter Knowledge, Monday, November 20,2023
With human error still accounting for the majority of cyber-attacks, can a zero-trust approach remove this lingering vulnerability in an organization's security framework?
more →
Security Boulevard, Monday, November 20,2023
Extended detection and response, or XDR, is a security approach that integrates multiple protection tools into a single, unified and integrated solution. It provides organizations with broad visibility across their networks, endpoints, cloud workloads, and users, allowing for faster threat detection and response.
more → ITProPortal, Monday, November 20,2023
Failing to use basic password hygiene could lead to disaster for organizations
more →