Reports
New Research on Salesforce Industry Clouds: 0-days, Insecure Defaults, and Exploitable Misconfigurations
AppOmni’s latest research reveals 20+ OmniStudio security flaws, including 5 CVEs affecting Salesforce industry clouds. Learn how misconfigurations expose sensitive data and how to secure your org. The post New Research on ...
Out of Sight, Not Out of Risk eBook
SaaS is powering growth and introducing risk. This guide helps mid-sized security teams gain visibility and control without adding headcount or complexity. The post Out of Sight, Not Out of Risk eBook ...
NCSC Guidance on “Advanced Cryptography”
The UK’s National Cyber Security Centre just released its white paper on “Advanced Cryptography,” which it defines as “cryptographic techniques for processing encrypted data, providing enhanced functionality over and above that provided ...
SaaS Security Made Simple: Build Your Case, Choose Your Vendor, and Protect Your Data
Accelerate your organization's SaaS security journey with a detailed guide, checklist with 25 essential questions, and an RFP template to streamline SSPM vendor selection. The post SaaS Security Made Simple: Build Your ...
Report on Paragon Spyware
Citizen Lab has a new report on Paragon’s spyware: Key Findings: Introducing Paragon Solutions. Paragon Solutions was founded in Israel in 2019 and sells spyware called Graphite. The company differentiates itself by ...
NIST Recommends Some Common-Sense Password Rules
NIST’s second draft of its “SP 800-63-4“—its digital identify guidelines—finally contains some really good rules about passwords: The following requirements apply to passwords: lVerifiers and CSPs SHALL require passwords to be a ...
How SOAR Automation is Boosting MSSP Revenue Without Replacing Human Workers
Learn how SOAR automation helps MSSPs increase revenue, boost efficiency, and improve job satisfaction—without replacing human workers. Explore key 2024 survey insights The post How SOAR Automation is Boosting MSSP Revenue Without ...
Get SOAR Savvy Before RSAC 2024: 5 Reads to Level Up Your SOC
For security leaders heading to RSAC 2024 in need of a refresher on all things SOAR (Security Automation, Orchestration and Response), D3 Security has you covered. Before you hit the expo floor, ...
D3 Security Releases “In the Wild 2024” Report with Analysis and Incident Response Playbooks for the 10 Most Prevalent Cyber Attack Techniques
Vancouver, BC — April 10, 2024 — D3 Security, the leader in smart security orchestration, automation, and response (SOAR), today published In the Wild 2024, the first in a series of reports ...
On Secure Voting Systems
Andrew Appel shepherded a public comment—signed by twenty election cybersecurity experts, including myself—on best practices for ballot marking devices and vote tabulation. It was written for the Pennsylvania legislature, but it’s general ...
