TL;DR for CISOs: Railway, a cloud deployment platform, says an unauthorized party may have read customer environment variables, and
TL;DR for CISOs: Ahold Delhaize took systems offline after a cybersecurity incident that reportedly reaches U.S. and European banner
TL;DR for CISOs: The FBI and Secret Service say FortiBleed attacks are still running and are locking administrators out of Fortinet f
Penetration Testing as a Service refers to a delivery model, not a testing technique. The service wraps penetration testing in a platform: a dashboard where findings appear as they are discovered, a subscription
The cybersecurity threat landscape on July 25, 2025 revealed 4 significant security incidents across
We all know David Bianco Pyramid of Pain, a classic from 2013. The focus of this famous visual is on indicators that you “latch onto” in your detection activities. This post will reveal a related mystery connected to SIEM detection evolution and its
Mention “alert fatigue” to a SOC analyst. They would immediately recognize what you are talking about. Now, take your time machine to 2002. Find a SOC analyst (much fewer of those around, to be sure, but there are some!) and ask him about alert fati
In today's data-centric world, organizations face increasing pressure to uphold privacy standards and comply with regulatory requirements. This blog explores essential steps for fostering a privacy-driven culture within organizations, aligning with
The implementation of the India Privacy Act heralds a new era of data protection regulations in the country, bringing significant challenges and opportunities for organizations. In this blog, we delve into the critical aspects of the Act and highli
The enactment of the India Privacy Act has ushered in a new era of data protection regulations, presenting significant challenges and opportunities for organizations across the country. In this blog, we delve into the intricacies of the Act, its impl
The India Privacy Act marks a transformative shift in the regulatory landscape, with profound implications for both large enterprises and startups. Recently, CESO platform hosted a panel discussion featuring leading experts in cyber law—Advocate D
In the rapidly evolving landscape of data protection and cybersecurity, the India Privacy Act stands as a significant legislative milestone. To shed light on its nuances and implications, CESO platform recently hosted a panel discussion featuring
In the ever-evolving landscape of cybersecurity, organizations are constantly seeking effective solutions to manage their external attack surface and mitigate risks. One approach gaining traction is the utilization of open-source tools for reco
%20Capability_%20Tools%2C%20Techniques%2C%20and%20Procedures.png)
In today's digital landscape, managing an organization's external attack surface is paramount for cybersecurity. External Attack Surface Management (ASM) involves understanding and securing all assets, including those beyond the traditional netw
According to research from Risk Based Security, the total number of breaches was up 33% over last year. That’s a whopping 5,183 data breaches for a total of 7.9 billion exposed records and in November, the research firm called 2019 the “worst year on
Internet of Things (IoT) has been gaining prominence in the consumer space in the last few years by redefining business-to-consumer (B2C) markets such as smart homes, media, infotainment, retail, financial services and so on. This IoT revolut
