4 min read
Achieving SOC 2 Compliance for Cloud Services
As companies rely more on cloud services, cybersecurity frameworks like System and Organization Controls have become essential for establishing trust...
3 min read
Offensive Security Foundations for Financial Industry Professionals
Security Standards (PCI DSS) are vital in establishing baseline security measures for financial industry professionals who face challenges...
3 min read
Penetration Testing for Cybersecurity Insurance: What You Need to Know
As cybersecurity threats continue to evolve and become more sophisticated, the importance of robust security measures, coupled with comprehensive...
3 min read
Cyber Attack Seasons: Key Times When Businesses Are at Risk
While cyber attacks remain a persistent, year-round threat to organizations, cybersecurity professionals have discovered patterns in the frequency...
3 min read
Safeguarding Innovation in the Digital Age
In today's fast-paced tech landscape, startups are the driving force behind innovation. However, with rapid growth and development comes increased...
3 min read
Enhancing Cloud Application Security: OWASP 2024 Guide for Developers
The Open Worldwide Application Security Project (OWASP) is an essential resource for developers, particularly those working with cloud-based systems....
18 min read
Understanding the Risks Associated with NTLM Authentication
Despite the release of Kerberos more than 20 years ago, many enterprises today have not transitioned away from using NTLM authentication in their...
PCI Compliance V4.0: Is your Business Ready?
Control Gap's Robert Spivak had a follow up session with David Goodale from www.merchant-accounts.ca to talk about some of the major impacts that PCI...
7 min read
Access Control Facades and Hardcoded Secrets: A Sage 300 Case Study (Part 3)
This is a continuation of the Sage 300 case study series where we explore the process of discovering and developing exploits for six (6) different...