Articles from the Curios security team on penetration testing, cloud security, compliance (NIS2, DORA, ISO 27001, TISAX), DevSecOps and security awareness.
Since October 2024, NIS2 has been law in Belgium. Many companies ask: we already have ISO 27001, isn’t that enough? It gets you a long way — here is what still needs doing.
Read articleSince October 2024, NIS2 has been law in Belgium. Many companies ask: we already have ISO 27001, isn’t that enough? It gets you a long way — here is what still needs doing.
The gap nobody wants to admit Most organisations in scope for NIS2 or DORA have a compliance project. Steering committee, gap assessment, roadmap, status update that says “on track.” What most of…
The DevSecOps dilemma is a myth. Here is how specialized governance turns compliance into a driver of engineering velocity. The Unnecessary Conflict: Speed vs. Security Every DevSecOps leader has…
Cloud adoption has changed how organizations store data, build applications, work, and deliver services to their customers. It offers scalability, agility, and improved cost benefits. However, these…
Many organizations moving to the cloud make the same mistake: they treat it as “just another datacenter.” At first glance, the workloads look familiar — virtual machines, databases, storage. But…
In an increasingly digital world, protecting sensitive information is no longer a luxury but a necessity. Yet, many organizations, especially those without vast resources, struggle to maintain robust…
In today’s quickly evolving business world, organizations of all sizes face various cybersecurity threats. Not only are attackers working around the clock poking at everything they can attack but…
Caldera is an open source C2 platform developed by MITRE designed for adversary emulation and automated security testing. It provides a comprehensive framework to simulate and evaluate potential…
In today’s world, network security is a vital component of cybersecurity. Organizations rely heavily on network security systems to protect their sensitive data and prevent unauthorized access. Among…
Quantum-Proof Encryption Quantum-proof encryption (also known as post-quantum encryption or quantum-resistant encryption) refers to cryptographic algorithms that are designed to be secure against…
In a rapid evolving cybersecurity environment, security incidents are unavoidable. It makes no difference how big or small your company is, knowing how to handle a security breach is essential and…
A DevSecOps Approach to Web App Security Web Applications are the engines driving modern businesses, but they also represent a significant attack surface for cybercriminals. Security vulnerabilities…
Welcome, brave digital adventurer! If you’ve ever wondered how to misplace your precious data with the elegance and grace of a cat knocking over a vase, you’ve come to the right place. Here, we…
Large industrial firms are the backbone of our modern world: they keep the lights on, they maintain industrial production, and supply water. But behind the scenes, there is a myriad of Industrial…
In the continuously shifting tactics in cybersecurity, some of the most significant breaches originate from endpoints, making it essential for small to medium enterprises (SMEs) to strengthen their…
Introduction Fuzzing is an automated software testing technique used primarily to uncover bugs and security vulnerabilities in software. It involves generating many genuine, random, semi-random and…
The history of cybersecurity is a fascinating journey that reflects the ongoing battle between digital attackers and defenders. It traces back to the earliest attempts to safeguard digital systems…
Open-source software has revolutionized the tech industry in many ways, and one of its most significant impacts has been in the field of cybersecurity. Over the past 25 years, open source has…
Public Key Infrastructure (PKI) is a system of technologies and protocols that enables secure communication and digital identity verification by using digital certificates and cryptographic keys…
Phishing is a serious threat to the online security of individuals and organisations. It is important to know how to recognise and prevent phishing. In this post, I share some tips to protect…
Duolingo-Inspired Learning Model Safety Science Compliance Box Ticking Effectiveness: Key Factors Conclusion In Summary We hope you found these tips on enhancing your small business’s cybersecurity…
It’s an exciting moment when new talent joins the team, bringing fresh perspectives and diverse skills. However, this transition also comes with challenges, particularly when it comes to…
Cybersecurity awareness has become a significant concern for organizations worldwide as cyber-attacks continue to increase in frequency and sophistication. In a recent LinkedIn post, we shared a link…
European nations cannot take the ongoing Russian-Ukrainian conflict lightly because both these countries are adept at fighting cyber wars. So, the cyber threat landscape will remain gloomy for Europe…
In today’s fast-paced digital world, cybersecurity is a crucial aspect of any organization or individual’s online activities. With the rise of cyber threats such as hacking, phishing, and ransomware…
Ensure all accounts enable Multi-Factor Authentication (MFA) Not requiring Multi-Factor Authentication (MFA) in your company is like not requiring a password in 2010. Enable MFA for all user &…
In the recent couple of days/weeks, we have been noticing a lot more spam e-mails targeting Gmail, Outlook and Hotmail addresses. We received multiple messages a day. The spam collection mailboxes…
The first and vital element to preventing cyber-attacks is training your employees. Since employees form the backbone of your business, investing in cybersecurity awareness will bring immense…
Anyone can start to build their own SIEM solution for free with SecurityOnion. While it is possible to run individual tooling and connect them together manually, SecurityOnion gives you an integrated…
