A new Enterprise Strategy Group (ESG) report found that 93% of respondents think their mobile app security protections are sufficient. However, these same respondents report that they face an average of 9 mobile app security incidents per year, with a staggering 62% having suffered a mobile app breach in the last year alone. What this implies is that there is a gap between what developers believe is good security and what proper security measures actually are ...

Organizations across the globe face unprecedented cybersecurity challenges as their digital footprints expand across cloud, on-premises, and remote environments. Ransomware continues to surge as one of the top global cyber threats, with attacks increasing by 33% globally in 2024 and organizations experiencing an average of 1,200 weekly attacks — the highest in three years ...

Not long ago, "security" meant building walls — firewalls, intrusion detection, access control lists. While those tools aren't dead, they're not enough. Cloud-native systems don't care about your perimeter, and one misconfigured API or overly generous IAM role is all it takes. The rules have changed, and if your security game hasn't, you're already behind ...

While modern cybercriminals can deploy AI-powered attacks that breach systems in seconds, most organizations still require 258 days to detect these intrusions. This dramatic mismatch in speed creates more than just tactical challenges. It can threaten organizations' survival ...

In Episode 125 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler from EMA present Cybersecurity 101: Ransomware ...

When was the last time you actually looked at the API calls in your codebase? Not the ones you wrote yourself, but the ones quietly generated by your AI assistant. Do you know where they point? Are they hitting a test server? Did they skip authentication? Are they leaking something in error responses? You start asking these questions after something goes wrong (and no one knows why) ... The thing is, generative AI (GenAI) is excellent at speeding up how we write code, but it could become a major concern if not thoroughly checked ...

In Episode 124 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler from EMA discuss the largest ever recorded DDoS attack, and the efforts to stop it ...

In Episode 122 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler from EMA discuss proactive vs. reactive cybersecurity ...

In Episode 120 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler from EMA discuss data governance for agentic AI ...

As your SOC monitors for network intrusions and your AppSec team secures code repositories, a new capability is required to secure the AI tools your employees use daily, before threats emerge ... As security teams grapple with how to adopt AI responsibly, prompt engineering is emerging as a strategic capability that enables teams to build enterprise-grade security into AI systems from the ground up while scaling protection efforts without proportional resource increases ...

AI-assisted development — often referred to as "vibe coding" — is transforming the way we write software. New tools are being widely adopted by established developers and newcomers alike, opening up code development to a larger audience, while reducing barriers like time and cost. While this technology promises to usher in a new era of innovation, it introduces a range of new security concerns that security leaders are struggling to mitigate ...

Traditional firewalls are paradoxically contributing to a new security crisis: alert overload. Security teams are drowning in a sea of notifications, and it's impossible to differentiate between genuine threats and false positives. On a basic level, it's simply annoying. But digging deeper reveals critical threats caused by the sheer tidal wave of alerts that obscure genuine risks and delay response times. The question is, how do modern firewalls overcome issues like outdated rules and a lack of contextual awareness? ...