Data Safety and Information Security

New mutual authentication approach for Kubernetes workloads suffers from eventual consistency, which can produce security vulnerabilities.

An in-depth explanation on Verifiable Credentials from identity first principles, and how and why we think they will happen

Protecting your user's personal medical information is vital in healthcare apps. Here's how to make sure you're doing everything to keep that data safe -

LitterDrifter's means of self-propagation are simple. So why is it spreading so widely?

Database reconstruction allows an attacker to recover raw data from reported statistics. US Census data prior to 2020 was vulnerable to reconstruction attacks.

Though the name sounds secure, API keys do not offer robust security. Sensitive data requires a more fortified form of protection, such as tokens.

APIs are designed to connect and share data with other applications – and it can be easy to underestimate just how exposed that data is.

With the growing adoption of cloud-based tools, it’s important for companies to adapt. A new approach to access governance is necessary.

A look at what is lacking as eBPF for Kubernetes security continues to evolve as a work in progress.

Why a holistic approach to securing CI/CD pipelines is essential, plus practical steps to help fortify your pipeline against potential threats.

The latest IIW was great with many high intensity discussions of identity by people from across the globe.

Learn how SOAR, a collection of orchestration, automation and response technologies, helps organizations analyze, respond to and mitigate threats.

Learn how container runtimes work, why tightly coupled runtimes can lead to host takeover if an attacker escapes a container, and the benefits of secure container runtimes like gVisor and Kata Containers.

This recent costly incident illustrates the need to take extra efforts to up our security game to avoid being the next devastating headline.

Many organizations — including quite a few Fortune 500 firms — have exposed web links that allow anyone to initiate a Zoom video conference meeting as a valid employee. These company-specific Zoom links, which include a permanent user ID number…

When want to open a new page in a new tab on clicking a link on a page, the usual way of achieving this is to use target="_blank" property in a tag. However, the use of this leaves space for

The Black Cat ransomware gang, also known as ALPHV, has confirmed they are former members of the notorious BlackMatter/DarkSide ransomware operation.

Fallout from the massive cyberattack may have regional repercussions in the Southeast if repairs drag on.

Security experts worry a group of English-speaking hackers has allied itself with forces responsible for the Colonial Pipeline ransomware attack.

Check to learn about the five most important SIEM reports shortlisted by our experts, based on their interaction with our clients.

Explore NIST SIEM requirements and standards, and what NIST and SIEM are. Learn about How Sumo Logic can meet all your SIEM regulatory needs.

Pictures made by artificial intelligence seem like good fun, but they can be a serious security danger too. Here's how.

Here is a guide to understanding the new PCI Guidance for Containers and Container Orchestration.

Due to a recent Google change, MFA isn't truly MFA.

SprySOCKS borrows from open source Windows malware and adds new tricks.

Chinese government hacks on the island could damage American military networks and undermine the U.S. response to an invasion of Taiwan.

To buy a new car in 2023 is to jump into a privacy nightmare, reports the Mozilla Foundation. The heavily-computerized and connected modern vehicles constantly collect and promiscuously share perso…