Search results for: Magecart

Tala Detect platform ensures data privacy violation monitoring

Numerous third-party integrations power the website supply chain. These integrations have access to critical and sensitive data and have become one of enterprise’s most glaring supply chain blind-spots. Tala Security announce Tala Detect, platform solution specifically designed to secure and control critical, sensitive web data and enable compliance/risk management. With the onset of regulations and the need for complete visibility, verification and control of private customer and business sensitive data, Tala Detect tracks data across … More


February 2021 Patch Tuesday: Microsoft and Adobe fix exploited zero-days

On this February 2021 Patch Tuesday: Adobe has fixed a Reader flaw used in limited attacks, as well as delivered security updates for a variety of products, including Acrobat and Reader, Dreamweaver, and Magento Microsoft has plugged 56 security holes, including one actively exploited privilege escalation flaw SAP has released 7 new security notes and updated 6 previously released ones Mozilla has fixed a critical vulnerability affecting Firefox and Firefox ESR on Windows Adobe updates … More


How to take SASE from a buzzword to a plan

Whether you are talking to your leadership or external auditors, it’s always best to be able to explain that your cybersecurity program is based on a framework utilizing industry best practices. A recent framework by Gartner is one that I recommend having as part of your toolkit: Secure Access Service Edge (SASE), as outlined in their November 2019 “The Future of Network Security is in the Cloud” report. The idea was to develop a single … More

Cymatic names Stuart McClure to its advisory board

Cymatic announced that Stuart McClure, founder and former chief executive of AI security firm Cylance, has been named to the Cymatic advisory board. Stuart’s security and technology expertise will provide Cymatic with technical guidance and market leadership to ensure the success and relevance of its all-in-one client-side WAF CymaticONE + VADR. Stuart is widely recognized for his achievements in applying machine learning and artificial intelligence to endpoint protection and defense. His groundbreaking work led to … More

Source Defense’s client-side platform protects online businesses from data-stealing threats

Source Defense announced its new offering of Website in Page Protection (WiPP), as well as product enhancements and performance improvements to the VICE sandboxing technology within the Source Defense Platform. WiPP’s added security benefits protecting eCommerce and other web interfaces from data-stealing threats arrive at a critical time, as online shopping is expected to increase dramatically this holiday season, along with online banking and demand for telehealth services. The Source Defense Platform protects online businesses … More

CymaticONE + VADR’s new features allow customers to protect their web properties from persistent attacks

Cymatic unveiled exciting new features to its client-side web application firewall, CymaticONE + VADR—the only WAF solution that combines client-side WAF defenses with a proprietary vulnerability, awareness, detection, and response (VADR) engine to deliver continuous in-session intelligence and cyber threat defense for users and applications. Click. Click. Done. It’s that simple. CymaticONE + VADR installs at the client with a single line of JavaScript to combat modern-day cyber threats such as Magecart, cross-site scripting (XSS), … More

Cyberpion raises $8.25M to boost sales and marketing efforts

Cyberpion announced it has emerged from stealth after closing an $8.25 million seed funding round co-led by Team8 Capital and Hyperwise Ventures. The company’s groundbreaking platform enables security teams to identify and neutralize the rising threats stemming from vulnerabilities within online assets throughout an enterprise’s far-reaching, connected ecosystem. Cyberpion will use the new capital to boost its sales and marketing efforts, while expanding and accelerating product development of its Ecosystem Security platform. Enterprises are increasingly … More


Week in review: ERP security, early warning of ransomware, Active Directory disaster recovery

Here’s an overview of some of last week’s most interesting news and articles: ERP security: Dispelling common misconceptions The various applications integrated in ERP systems collect, store, manage, and interpret sensitive data from the many business activities, which allows organizations to improve their efficiency in the long run. Needless to say, the security of such a crucial system and all the data it stores should be paramount for every organization. Confirmed: Browsing histories can be … More


The global cost of cybercrime per minute to reach $11.4 million by 2021

Cybercrime costs organizations $24.7, YOY increase of more than $2 every minute, a RiskIQ report reveals. It will also have a per-minute global cost of $11.4 million by 2021, a 100% increase over 2015. The report covers the top threats facing today’s organizations, which are proliferating at a clip of 375 per minute, and reflects the current surge in attacks leveraging the COVID-19 pandemic. Other malicious activity 1.5 attacks on computers with an Internet connection … More


Protect your organization in the age of Magecart

The continuing wave of attacks by cybercriminal groups known under the umbrella term Magecart perfectly illustrates just how unprepared many e-commerce operations are from a security point of view. It all really boils down to timing. If the e-commerce world was able to detect such Magecart attacks in a matter of seconds (rather than weeks or months), then we could see an end to Magecart stealing all of the cybercrime headlines. What steps can organizations … More

Attackers exploit Twilio’s misconfigured cloud storage, inject malicious code into SDK

Twilio has confirmed that, for 8 or so hours on July 19, a malicious version of their TaskRouter JS SDK was being served from their one of their AWS S3 buckets. “Due to a misconfiguration in the S3 bucket that was hosting the library, a bad actor was able to inject code that made the user’s browser load an extraneous URL that has been associated with the Magecart group of attacks,” the company shared. Who’s … More