In today’s fast-paced and increasingly competitive business landscape, digital innovation isn’t just desirable if an organisation wants to thrive – it’s essential for it to survive. Fortunately, between modern software development practices, such as low-code and no-code, and cloud-based applications and services (SaaS, PaaS, IaaS), digital innovation is easier than ever. However, more digital solutions mean more digitised data, and … Read More
What is a malware evasion technique?
Malware evasion techniques alter the characteristics of malicious software to avoid detection by cyber security solutions that rely on patterns or predefined signatures. Malware evasion techniques are used by malicious actors to bypass detection systems and traditional antivirus software. Malware evasion techniques are not only used to counter network-based intrusion detection systems (IDS) and intrusion prevention systems (IPS) but can also … Read More
What is scareware?
What is scareware? Scareware is a type of malware cyberattack that scares a person into visiting an infected site and downloading malicious software. Scareware works by claiming to have detected an issue or virus on a device and directs the user to buy or download malicious software to rectify the problem. Scareware is basically the gateway to a more sophisticated … Read More
What is mobile malware?
Mobile malware is designed to target mobile devices, such as smartphones and tablets, with the aim of accessing private data. Mobile malware is a growing threat to organisations of any size because many businesses now allow their employees to access corporate networks using their own devices. Not only does this increase the potential for bringing unknown threats into the company … Read More
Examples of Real-Life Data Breaches Caused by Insider Threats
In organisations of all sizes, there are often a large number of employees that know the ins and outs of a company’s cybersecurity tools and infrastructure. This is the reason behind thousands of inadvertent and malicious insider attacks conducted around the world each month which can lead to real threat data breaches and substantial financial losses. Insider threats can cause … Read More
7 Advantages of DSPM for Data Security
Although cloud computing has revolutionised a company’s ability to share data, to account for an increasingly mobile and distributed workforce, cloud environments also complicate its ability to secure sensitive data. The exponentially increasing volume of data – and datasets being frequently duplicated across multiple cloud-based platforms, applications, and services – mean that most cloud security solutions struggle to keep up … Read More
What Is the CIA Triad Security Model?
While a company’s information security controls and policies aim to keep its sensitive data secure, what does that mean in practice? Or, put another way, how can security teams determine whether the information and assets under their purview are actually secure? Confidentiality, integrity and availability, collectively known as the CIA triad, is a model designed to guide a company’s information … Read More
What is integrity in cyber security?
Integrity in cyber security is one of the key components of the CIA triad of confidentiality, integrity, and availability. Every security control and vulnerability can be viewed in relation to one or more of the three concepts. In order for a security program to be deemed comprehensive and complete, it must address all three components of the CIA triad. More on … Read More
What are cloud security metrics?
Cloud migration has surged in recent years, with an estimated 94% of companies adopting cloud services as of 2022. Predictably, cybercriminals have capitalised on this rapid shift to the cloud, and have turned their attention to finding ways to infiltrate the cyber security defences of cloud service providers. Unfortunately, as their sensitive data, applications, servers, and other assets are stored … Read More