Rebecca Kappel

Centraleyes

What is Compliance Automation? Compliance automation is like finding an underground tunnel through a (literal) mountain of paperwork and manual processes. Suddenly, the daunting task of aligning processes with requirements and preparing for audits makes you sweat a lot less.  So, what’s the secret to automation?  It’s all about working ... Read More

Coalition, a leader in cyber insurance, has added a positive endorsement for artificial intelligence (AI) to its cyber insurance plans for the US and Canada. The endorsement expands the definition of a security failure or data breach to include events caused by artificial intelligence. In practical terms, this means that ... Read More

Let’s discuss an acronym reshaping the business world: Vendor Risk Management, or VRM. Once an abbreviation that few knew the meaning of, VRM is now a basic component of responsible business processes. In our interconnected world, our security is only as strong as our weakest link, and the third-party vendors ... Read More

How’s your vulnerability management going? Is it effective? Or perhaps you’re doubting yourself, unsure whether your organization is protected against vulnerability-based attacks. Let’s explore how you can enhance your vulnerability management strategy. We’ll also shortlist the top 8 vulnerability management tools. What is Vulnerability Management? Vulnerability management is the process ... Read More

The ransomware attack on UnitedHealth’s Change Healthcare subsidiary last month demonstrated how appealing the data-rich US healthcare industry is to hackers, how devastating the consequences can be, and how sophisticated cybercriminals are. Why is Healthcare Targeted? It’s not the healthcare they’re after. It’s the money. Unlike other industries, hackers know ... Read More

The National Institute of Standards and Technology (NIST) plans to update the Privacy Framework to Version 1.1. This announcement comes four years after the release of the original framework in January 2020. Initially introduced as The NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0, ... Read More

Tuta Mail introduced TutaCrypt, a protocol engineered to bring email encryption into the post-quantum era. Tuta Mail is at the forefront of online communications, with over ten million users globally. It’s a timely solution to the real threat of ‘harvest now, decrypt later’ attacks. TutaCrypt leverages a potent combination of ... Read More

Hackers have recently seized upon a critical-severity authentication bypass vulnerability, CVE-2024-27198, within TeamCity On-Premises. JetBrains has swiftly responded to this threat by releasing an update on Monday to address the issue. JetBrains TeamCity automates software project development, testing, and deployment. The flaw allows administrators to take over TeamCity servers by ... Read More

In a recent move to bolster the nation’s water utilities against cyber threats, the US government has released a comprehensive guide through agencies such as CISA, the FBI, and the Environmental Protection Agency. This guide outlines crucial defense strategies to protect our vital water systems. It’s a proactive step in ... Read More

The proliferation of deepfake creation software on the Dark Web is fueling a surge in AI-assisted financial fraud, raising urgent questions about how to combat this growing threat. Recently, a chilling example unfolded when a Hong Kong-based employee in a multinational corporation’s finance department fell victim to a sophisticated deepfake ... Read More