Cyber Watch

90% of the world's data was generated in the last two years. To keep pace with this massive proliferation of data creation and transmission, cryptographers have been working overtime to engineer increasingly complex encryption techniques.

From NASA to the State Department, federal agencies are relying on outdated systems, ignoring mandatory security patches and failing to protect classified data.   CISA has finally released its highly anticipated Cross-Sector Cybersecurity Performance Goals in collaboration with DHS, NIST and numerous industry leaders.

According to recent reports, Managed Security Service expenditures are set to double to nearly $50 billion in 2023.           As the tech industry continues to mature and cybersecurity skills shortages climb to record highs, many firms are turning to Managed Security Service Providers (or MSSPs) to help shore up internal security gaps. But this is only half the story; the truth is that there are a...

A) What is DevSecOps and how can you benefit from it? B) Top 5 tips from pentesters on how to harden your Web App security

The penetration test, or as it is fondly nicknamed, the pentest, has been a security staple for decades. But is it time for an upgrade?        As security breaches and budgets continue to bloom, many firms are looking for ways to boost their security preparedness by taking advantage of the latest innovations in AI, DevOps, and security analytics. In this episode, we'll discuss five of the late...

Adoption of technologies such as Internet of Things devices (IoT), cloud applications, complex digital supply chains, open-source code, and more have resulted in the expansion of organization's attack surfaces and exposure to breaches. Now more than ever, organizations require increased visibility into how their digital environment looks from an external perspective. Viewing your attack surfac...

With the rapid evolution of the digital world, data privacy protection has become a global trend for organizations, individuals and governments. These entities are now increasingly reconsidering the process of collecting, storing and processing personal information which not only includes names or phone numbers, but also individual healthcare information and financial data.

Unfortunately, organizations across nearly every sector are still struggling to secure their public-facing applications. In 2022, for example, Silent Breach security consultants found that 92% of web applications tested contained serious or critical security flaws. In particular, we recently reported that 97 of the 100 largest airports are similarly compromised. A major contributor to this trend l...

As budgets tighten and teams shrink, cybersecurity leaders will be facing an impossible challenge: how to accomplish more with fewer resources.      To make matters worse, business executives often (mistakenly) view cybersecurity as a luxury, setting it up as a prime target for any cost-cutting measures. As we head into a financial downturn, here are five ways that CISOs can maintain momentum desp...

The heads of the FBI and MI5 met in London to deliver an unprecedented joint warning regarding China's "game changing" cyber offensives.

During the last year, 22% of businesses were forced to pause operations due to ransomware, often for days or weeks at a time. But this comes as no surprise. In just the few days it took to produce this podcast, a hospital system in Louisiana (serving 270,000 patients), the Guardian media company, and the Intrado telecoms firm were all hit by crushing ransomware attacks. While this might feel like...

Threat intelligence has come a long way since its humble beginnings as a shared blacklist of malicious IP addresses and URLs.         Today, security analysts and technicians can access curated, real-time, and targeted threat information from around the world, helping fend off attacks before any damage is done.

When you receive a call on your phone from an unknown number, it's nearly impossible to guess who's calling. Increasingly, it could be someone vishing you.    Vishing is a term derived from "phishing" and "voice." Just like phishing involves malicious emails, vishing is a phone scam that is designed to compel you to provide your personal information. Here's what you...

A string of crypto thefts and security breaches have caused some to question the overall security of a rapidly growing industry.

In today's digital world, cybersecurity is a critical aspect of any business. With the growing number of cyber attacks and data breaches, it's essential for companies to have robust cybersecurity measures in place to protect sensitive information, maintain business operations, and avoid reputational damage. This is where ChatGPT, a large language model developed by OpenAI, can come in hand...

On Friday, February 5th, a hacker breached the water plant serving Oldsmar, Florida and instructed it to increase the amount of lye in the water to extremely dangerous levels.

Blockchain has ushered in a new era of transparency, cryptography, and decentralization. However, there is still a long way to go to overcome glaring security challenges. In this episode, we'll discuss some of the most common security flaws that Silent Breach routinely discovers in smart contracts and review some helpful steps developers can take to stay secure.

While developing a cybersecurity strategy is critical for any business, the distributed nature of the blockchain introduces some interesting new challenges.    As blockchain systems continue to attract more attention from hackers, it's important to have a tailored structure in place to prevent and respond to any potential security incidents. Let's dive into the 6 steps to boosting your blo...

As the greatest software rivalry of all time, emotions can run high. So we decided to create a non-partisan fact-based analysis of Android's and iOS's cybersecurity profile.

According to FBI reports, Russian actors spent the summer of 2020 planning a cyber-attack against Tesla's systems.            Here's a play-by-play of how the plan unfolded, along with 3 lessons we can all learn from Tesla's close brush.

Over the past few years, government entities around the world have banned public employees from installing TikTok on government phones. In the US, TSA personnel and soldiers are banned from using it entirely. To defend these moves, governments have issued accusations that TikTok provides the Chinese government with unrestrained access to user data as well as a hugely popular platform which it can...

As the newest addition to the due diligence process, cyber audits come in all shapes and sizes. Here are the main 4 components, along with accompanying case studies.

With 95% of the internet hosted on the Deep and Dark Webs, companies now have a valuable opportunity to leverage this data for positive purposes.

A Year of Consolidation While 2022 was certainly no walk in the park, strong cybersecurity investments and institutional support suggest a light at the end of the tunnel. As we turn toward 2023, these will be the top ten challenges facing CISOs in the new year. To generate this list, we analyzed internal Silent Breach data, discussions with clients and industry leaders, as well as a general review...