organizations
-
Blog
Get started on post-quantum encryption, organizations warned
The UK’s national cybersecurity agency is urging companies to begin preparing themselves for quantum threats by 2035. The National Cyber Security Centre (NCSC) has laid out a recommended timeline for transition to quantum-resistant encryption methods, and is strongly encouraging the adoption of post-quantum cryptography (PQC) in the next ten years. “Quantum computing is set to revolutionize technology, but it also…
Read More » -
Blog
Healthcare organizations need to shake up email security practices
Microsoft 365 is the source of almost half of all healthcare email breaches, thanks mainly to misconfigurations in security settings. According to Paubox’s 2025 Healthcare Email Security Report, email is the main attack vector in the sector, with Microsoft 365 accounting for 43% of all breaches. Proofpoint was next, at 13%, followed by Barracuda Networks and Mimecast at 7%, and…
Read More » -
Blog
Organizations urged to act fast after GitHub Action supply chain attack
More than 20,000 organizations may be at risk following a supply chain attack affecting tj-actions/changed-files GitHub Action. GitHub Actions is a continuous integration and continuous delivery (CI/CD) service that enables developers to automate software builds and tests. Workflows are triggered by specific events, for example when new code is committed to the repository. Used in more than 23,000 repositories, tj-actions/changed-files…
Read More » -
Blog
Suspected Desorden hacker arrested for breaching 90 organizations
A suspected cyber criminal believed to have extorted companies under the name “DESORDEN Group” or “ALTDOS” has been arrested in Thailand for leaking the stolen data of over 90 organizations worldwide. The suspect was arrested in Bangkok through a law enforcement operation by the Royal Thai Police and the Singapore Police Force, with the help of experts from Group-IB. The…
Read More » -
Blog
Almost half of US organizations still using Kaspersky, researchers claim
Almost half (40%) of US organizations are still using Kaspersky software despite a ban enacted in the summer, new research from Bitsight has revealed. Though the ban went into effect months ago, active use of Kaspersky products remains high, with more than 1,000 US organizations observed to be connecting to Kaspersky servers post-ban. Bitsight said only 58% of US organizations…
Read More » -
Blog
Organizations failing to use tech to reach sustainability goals
While the vast majority of organizations say they take their sustainability goals very seriously, only a few are using technology to cut their environmental footprint and shape their overall sustainability strategy. Research from Kyndryl and Microsoft shows leaders increasingly recognize the benefits of sustainability initiatives for their organizations, with 38% having increased their sustainability goals and program execution since last…
Read More » -
Blog
How the channel helps organizations curb software sprawl by focusing on process
The economic conditions in the years following the COVID-19 pandemic offered many organizations access to incremental capital and additional funding, which led them to increase their spending on software to enable remote work and increase digital transformation. The rapid adoption of specialized software left many organizations with an overcrowded and disconnected technology stack, however, negatively impacting their productivity and efficiency.…
Read More » -
Blog
UK organizations scrambling to divert funds for NIS2 compliance spending
Virtually all UK organizations have been forced to divert funds from elsewhere to deal with the costs of NIS2 compliance. The EU cybersecurity bill NIS2 came into effect earlier this year, with the deadline for compliance having recently passed. Under the legislation, EU-based businesses operating in critical sectors such as energy, transport, water, financial services, and healthcare, are required to…
Read More » -
Blog
Organizations warned of the dangers of ‘long-lived’ cloud credentials
‘Long-lived’ cloud credentials are still a major risk for organizations across all cloud providers, according to new research from Datadog, and nearly half or organizations are using them. These cloud credentials never expire and are a major security risk, often leaked in source code, container images, build logs and application artifacts – indeed, they’re the most common cause of publicly…
Read More » -
Blog
NCSC warns organizations of cyber threat from Russian Foreign Intelligence
The National Cyber Security Centre (NCSC) is warning organizations to buckle up for online attacks by Russia’s Foreign Intelligence Service (SVR). More than 20 publicly disclosed vulnerabilities have been listed in a joint advisory of US security agencies. These, it believes, can be exploited by the hacking group, APT29, also known as Midnight Blizzard, the Dukes, and Cozy Bear. The…
Read More »