Blog | Holm Security (5)

July 3, 2023 — Compliance PCI DSS 4.0: What you need to know In today's digital landscape, where electronic payments have become the norm, protecting sensitive cardholder data has become paramount. With cyber threats lurking at every corner, organizations must fortify their defenses and adhere to robust security...

June 21, 2023 — Vulnerability management Debunking misconceptions: Common objections to vulnerability management

We’ve recently done a pen test of our infrastructure Pen tests are a great step in...

June 8, 2023 — Company news Bulwark & Holm Security partner to enhance cyber security in the Middle East

Organizations in the Middle East will be able to better protect themselves against...

June 7, 2023 — API Security The beginner's guide to API security

Understanding API security Let’s start at the beginning. What are APIs? In modern mobile,...

Filter posts

June 2, 2023 — Cyberattacks & exploits MOVEit Transfer zero-day vulnerability exploited in data theft attacks

MOVEit Transfer is a popular file transfer program developed by Ipswitch, a subsidiary of US-based Progress Software Corporation, and widely used by...

May 29, 2023 — Cyberattacks & exploits Barracuda email security gateway appliance zero-day vulnerability

Security flaw in email security gateway The California-based company investigation has revealed that the flaw is rooted in a component that screens the...

March 18, 2023 — Compliance Understanding PCI DSS compliance: What you need to know

Do I need to care about compliance with industry standards? Compliance provides a framework for businesses to identify potential cyber security risks,...

March 17, 2023 — Cyberattacks & exploits Microsoft Outlook zero-day vulnerability CVE-2023-23397 exploited

Outlook vulnerability allows zero-click attackers to compromise user authentication An attacker who successfully exploited this vulnerability could access a...

January 30, 2023 — Vulnerability management Modernizing vulnerability management for full attack surface coverage

The drawbacks of traditional vulnerability management Traditional vulnerability management is the process of identifying, assessing, and addressing...

December 16, 2022 — Cyberattacks & exploits Critical vulnerability in FortiOS

Overview FortiOS SSL-VPN doesn't validate HTTP requests properly, leading to an overflow of heap buffer using specially crafted requests.

Risk assessments for NIS/NIS2 compliance

The complete platform for a systematic, risk-based, and proactive cyber defense. Made in Europe.

Latest insights

Filter posts