Optiv Blog

The REvil Ransomware group’s reemergence isn’t a surprise, given the context of the Ukraine invasion.

Our new vulnerability and asset scoring mechanism more accurately identifies business risk associated with vulnerabilities.

In this series, we explain the threats, issues and impacts associated with managing third-party organizations and discuss how best to minimize risk.

This post highlights different tools and approaches for testing thick client applications for vulnerabilities.

PCI DSS v4.0 permits the traditional method and a new customized approach. Organizations should consider which best suits their requirements.

The Cyber Incident Reporting for Critical Infrastructure Act requires organizations to report cybersecurity incidents within 72 hours.

The new Gramm-Leach-Bliley Act (GLBA) Safeguards Rule is much more prescriptive and has more “teeth.” The compliance deadline is December 9, 2022.

The new Payment Card Industry Data Security Standard – version 4.0 – has been released. This post explores the details of the new standard.

A new agreement will allow the transfer of Europeans’ personal data to the U.S. This post offers advice for affected organizations.

Privileged accounts are the keys to your kingdom. Organizations need to secure them via end-to-end planning, AI and ongoing skilled management.

Some companies should update to PCI DSS v4.0 now, while others should wait. This post features helpful details and advice on how to begin preparing.

Hyperautomation in IGA provides a framework for building rapid automation of workflows and processes without the need for process redesign.