Geek Guy

Category: Cybersecurity

Dive into deep-dive analysis on the evolving threat landscape, focusing on identity security (ITDR, NHI), data protection (DSPM), and agentic identity. Stay updated with expert insights on threat actor tactics and local AI security for researchers and market analysts.

SAP zero-day vulnerability under widespread active exploitation

Threat hunters and security researchers have observed widespread exploitation of a zero-day vulnerability affecting SAP NetWeaver systems. The unrestricted file upload vulnerability — CVE-2025-31324 — has a base score of 10 on the CVSS scale and allows attackers to upload files directly to the system without authorization.  The software defect, which affects the SAP Visual…

VulnCheck spotted 159 actively exploited vulnerabilities in first few months of 2025

Attackers exploited nearly a third of vulnerabilities within a day of CVE disclosure in the first quarter of 2025, VulnCheck said in a report released Thursday. The company, which focuses on vulnerability threat intelligence, identified 159 actively exploited vulnerabilities from 50 sources during the quarter. The time from CVE disclosure to evidence of exploitation in…

Is Your Cybersecurity Scalable Enough?

Are Your Cybersecurity Efforts Truly Scalable? A question all organizations grapple with: is your cybersecurity infrastructure ready to adapt, evolve and scale alongside your business? Achieving scalable cybersecurity solutions forms the bedrock of data protection strategies. Not just from the viewpoint of managing the increasing volume of data, but also to combat advanced threats that…

Calm Your NHI Management Concerns

What if You Could Calm Your NHI Management Concerns? Where businesses are migrating to the cloud at an astonishing pace, the security of Non-Human Identities (NHIs) and their associated secrets has become an absolutely critical concern. NHIs and their associated secrets, if not managed correctly, can significantly increase the risk of security breaches and data…

Stay Proactive with Advanced Secrets Management

Why is Proactive Cybersecurity Crucial? Where machine identities take center stage, the need for advanced secrets management is more crucial than ever. The rise of key management failures, token compromises, and password leaks are some of the telltale signs of a flawed cybersecurity strategy. With an alarming increase in data breaches, how can organizations stay…

Gain Confidence in Your IAM Strategies

What Makes for Effective IAM Strategies? IAM (Identity and Access Management) strategies have become a cornerstone element, focusing on the protection of critical assets through superior access control and user authentication. But the question is, how can organizations incorporate IAM into their cybersecurity strategy to create a safer, more reliable digital environment? Understanding the Role…

Are Your Secrets Properly Protected?

Implementing Strategic Non-Human Identity Management for Sensitive Data Protection Are your organization’s secrets safe? How comprehensive is your strategy for securing your Non-Human Identities (NHIs) and their secrets? Businesses must aim to eliminate data leaks and security breaches by incorporating NHI and Secrets management as a core part of their cybersecurity strategy. Understanding Non-Human Identities…

Attackers hit security device defects hard in 2024

Attackers are having a field day with software defects in security devices, according to a new report released Wednesday by Mandiant  Exploits were the most common initial infection vector, representing 1 of every 3 attacks in 2024, and the four most frequently exploited vulnerabilities were all contained in edge devices, such as VPNs, firewalls and…

Video: How Eaton Partners Can Boost Profits with Lithium-Ion UPS Technology

In this Partner POV episode, host Katie Bavoso talks with Sami Hussaini, Product Line Manager at Eaton, about the shifting landscape of physical infrastructure and how solution providers can capitalize on Eaton’s lithium-ion UPS technology to grow profits and customer loyalty. Learn how Eaton empowers its partners with industry-leading products and comprehensive support—from hands-on training…

10 key numbers from the 2024 FBI IC3 report

It looks like 2024 was a record year in cybercrime for all the wrong reasons, according to the FBI’s annual Internet Crime Complaint Center (IC3) report released Wednesday.  As cyber-enabled fraud and ransomware continue to harm individuals, businesses, and critical infrastructure, the report, now in its 25th year, provides crucial insight into evolving criminal tactics…

Cynomi cinches $37M for its AI-based ‘virtual CISO’ for SMB cybersecurity

Small and medium businesses are the latest targets for cybersecurity attacks, with one in three small businesses experiencing a data breach last year. SMBs are becoming more proactive in detecting and stopping these threats, and today a startup called Cynomi is announcing $37 million in funding to meet that demand. Insight Partners and Entrée Capital are co-leading…

AI can help defenders stop nation-state threat actors at machine speed

Last year, the escalating concerns about Chinese threat actors breaching U.S. organizations reached a crescendo as federal authorities issued increasingly urgent advisories about China’s “Typhoon” groups infiltrating U.S. networks, pressing organizations to take immediate action. The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) warned that these groups were engaged…

Verizon discovers spike in ransomware and exploited vulnerabilities

Cybercriminals and state-sponsored threat groups exploited vulnerabilities and initiated ransomware attacks with vigor last year, escalating the scope of their impact by hitting more victims and outmaneuvering defenses with speed. The rate of ransomware detected in data breaches jumped 37%, occurring in 44% of the 12,195 data breaches reviewed in Verizon’s 2025 Data Breach Investigations…

Deeper Network Promo Deeper Network Promo Deeper Network Promo Image

Cloud-Native Security: Assurance for Tech Leaders

Why Should Tech Leaders Place Their Trust in Cloud-Native Security? Let’s ask another question: What better assurance for tech leaders than a robust system that offers comprehensive end-to-end protection? This is precisely what cloud-native security does, and why it is gaining traction. Cloud-native security, with its focus on non-human identities (NHIs) and secrets security management,…

Attackers stick with effective intrusion points, valid credentials and exploits

IBM X-Force observed an identical breakdown of the top methods cybercriminals used to intrude networks for two years running, the company said in its annual Threat Intelligence Index. The top initial access vectors, valid account credentials and exploitation of public-facing applications, each accounted for 30% of IBM X-Force incident response cases last year. By focusing…

The danger of data breaches — what you really need to know

In today’s digital world, your personal data is like cold hard cash, and that’s why cyberthieves are always looking for ways to steal it. Whether it’s an email address, a credit card number, or even medical records, your personal information is incredibly valuable in the wrong hands. For hackers, breaking into a company database is…

The danger of data breaches — what you really need to know

In today’s digital world, your personal data is like cold hard cash, and that’s why cyberthieves are always looking for ways to steal it. Whether it’s an email address, a credit card number, or even medical records, your personal information is incredibly valuable in the wrong hands. For hackers, breaking into a company database is…

Assured Security with Secrets Scanning

Is Secrets Scanning the Key to Assured Security? The alarming rise in data breaches and cyber threats globally raises an essential question – is secrets scanning the definitive answer to assured security? I grapple with this question every day. This article offers some valuable insights into why secrets scanning stands as a stalwart for assured…

Multiple top CISA officials behind ‘Secure by Design’ resign 

Two top officials at the Cybersecurity and Infrastructure Security Agency who worked with the private sector to manufacture secure products and technology are leaving the agency. Bob Lord, senior technical adviser and Lauren Zabierek, senior advisor at CISA, were both chief architects behind CISA’s Secure by Design initiative, which garnered voluntary commitments from major vendors…

Protected NHIs: Key to Cyber Resilience

Why is Management of Protected NHIs Essential? Protected Non-Human Identities (NHIs) have become a crucial factor for organizations looking to strengthen their cybersecurity framework. Given the surge in hacking attempts and data breaches, it is pertinent to ask, “How crucial are protected NHIs in ensuring cyber resilience?” Let’s delve deeper into this topic. NHIs, as…

Ensuring a Safe Environment with Least Privilege

Why Is Least Privilege Fundamental to Creating Safe Environments? Data is the new gold. If data volumes surge, so do cyber threats, making data protection a top priority. The principle of least privilege (POLP) crucially comes to play here. But what is least privilege, and how does it contribute to creating safer environments? Least privilege…

Staying Ahead with Proactive Secrets Rotation

Why Should Organizations Prioritize Proactive Secrets Rotation? Where digital connectivity is ever-increasing, how can organizations stay one step ahead? One answer lies in proactive secrets rotation – a strategy that is pivotal to maintaining robust cybersecurity health. Not only does this strategy allow companies to prevent unauthorized access to their networks, but it also facilitates…

Stay Reassured with Advanced NHIDR

Can Advanced NHIDR Keep Your Cloud Environment Secure? Enriched with advanced technologies, potential threats also grow in complexity. One such concern circulates around the concept of Non-Human Identities (NHIs) and Secrets Security Management. But, what if there was a way to feel reassured about your security in NHIs? In comes the role of advanced NHIDR—…

How to Ensure Security in Cloud Compliance

Why is Cloud Security of Paramount Importance? It’s a well-acknowledged fact, isn’t it, that our reliance on cloud services has significantly increased in the past few years? According to data from Dell Technologies, almost every organization, regardless of size and industry, has adopted some form of cloud storage or applications. This shift has prompted many…

House investigation into DeepSeek teases out funding, security realities around Chinese AI tool

A House panel has concluded that the U.S. government should double down on export controls and other tools to slow down the progress of Chinese AI companies like DeepSeek, while also preparing for a future where those efforts fail. In a report released Wednesday, the House Select Committee on the Chinese Communist Party further fleshes…

Trump’s Retaliation Against Chris Krebs — and the Cybersecurity Industry’s Deafening Silence

Chris Krebs, the former director of the Cybersecurity and Infrastructure Security Agency (CISA), was fired by Donald Trump in 2020 for publicly affirming that the presidential election was secure and free from widespread fraud. Fast-forward to April 2025: Trump, now back in the White House, issued an executive order revoking Krebs’ security clearances and ordering…

What’s happening with MITRE and the CVE program uncertainty

Yesterday’s headlines have sent ripples through the cybersecurity and software supply chain communities: MITRE announced that U.S. government funding for the CVE (Common Vulnerabilities and Exposures) database was set to expire today. Overnight, the CVE Foundation emerged with a plan to maintain the program before the Critical Infrastructure and Security Agency (CISA) announced it has…

CISA reverses course, extends MITRE CVE contract

In a last-minute switch, the Cybersecurity and Infrastructure Security Agency said it will continue funding a contract for MITRE to manage the CVE program and other vulnerability databases. In a statement sent to CyberScoop, a spokesperson said the agency executed an option to extend the contract and avoid a potential lapse in a program that…

Deeper Network Promo Deeper Network Promo Deeper Network Promo Image

How Safe Are Your Non-Human Identities?

Are Your Non-Human Identities Secure? Where interactions between software, applications, and API components are crucial for seamless processes, Non-Human Identifies (NHIs) and their security cannot be overlooked. NHIs are machine identities that perform sessions, transactions, and process automation. But, are they well-protected against potential security threats? Understanding the Criticality of NHI Security Expanding digital, coupled…

Is Ivanti the problem or a symptom of a systemic issue with network devices?

Network edge devices — hardware that powers firewalls, VPNs and network routers — have quickly moved up the list of attackers’ preferred intrusion points into enterprise networks. While dozens of companies make and sell these devices, customers of one company in particular — Ivanti — have confronted exploited vulnerabilities in their products more than any…

Reasoning in the Age of Artificial Intelligence

Lately, I often hear people asking: “Will Artificial Intelligence replace my job?” Perhaps you’ve had this thought too. More than just a matter of the job market or salary expectations, this question challenges our role in society and our ability to remain relevant over time. It’s worth addressing this doubt once and for all, especially…

Free to Innovate with Secure Machine Identity Management

Why does Machine Identity Management matter for Secure Innovation? Understanding Non-Human Identities (NHIs) Do you know the vast number of operations carried out on the cloud today are managed by non-human entities? That’s right. Non-Human Identities or NHIs make up the majority of individuals making calls to your servers, databases, APIs, and other sensitive resources.…

Gaining Ground with Advanced NHIs Analysis

Why is Advanced NHIs Analysis the Key to Climbing the Cybersecurity Mountain? You likely find yourself climbing a steep mountain of intricate challenges every day. Standing at the pinnacle, striking a balance between operational efficiency and security mindfulness often remains elusive. Dealing with non-human identities (NHIs) introduces another wrinkle. But what if you could leverage…

Judges strike skeptical note of NSO Group’s argument to dismiss case from El Salvadoran journos

A panel of U.S. judges considering an appeal of a ruling that went against El Salvadoran journalists suing NSO Group over alleged infections of their phone by the company’s Pegasus spyware appeared more skeptical Thursday of the vendor’s arguments than those of the reporters. Judge James Donato of the District Court for the Northern District…

Guidepoint Security & Enzoic: Taking on the Password Problem

Compromised passwords remain one of the most common—and preventable—ways attackers gain access to systems. Despite advancements in security tools, weak and reused credentials still leave organizations wide open to phishing, credential stuffing, and account takeovers. To tackle this head-on, password monitoring and threat intelligence firm Enzoic has partnered with GuidePoint Security, a top cybersecurity services…

Guidepoint Security & Enzoic: Taking on the Password Problem

Compromised passwords remain one of the most common—and preventable—ways attackers gain access to systems. Despite advancements in security tools, weak and reused credentials still leave organizations wide open to phishing, credential stuffing, and account takeovers. To tackle this head-on, password monitoring and threat intelligence firm Enzoic has partnered with GuidePoint Security, a top cybersecurity services…

Treasury bureau notifies Congress that email hack was a ‘major’ cybersecurity incident

The Office of the Comptroller of the Currency has notified Congress that a February breach of its email system is classified as a major cybersecurity incident. The incident was first disclosed Feb. 26, though the OCC provided virtually no details at the time, only saying that it had resolved a security incident “involving an administrative…