Security Archives

Why SaaS providers should brace for what is coming

Data protection and encryption / Etienne Maghakian

In today’s threat landscape, traditional security is no longer enough. The fastest documented data breach took just 9 minutes, a wake-up call for SaaS providers serving regulated sectors like finance, healthcare, and government. The Crisis at Hand 300% surge in SaaS breaches globally in 2024 $4.8 million average cost per breach AI-enhanced attacks bypassing MFA and exploiting third-party […]

Why SaaS providers should brace for what is coming Read More »

From Chaos to Control: The Password Managers

Data protection and encryption, In the news, Security / Emilie Pereira

In today’s fast-changing digital world, businesses face increasingly sophisticated cyber threats. With sensitive company data and employee credentials constantly at risk, strong security measures are more critical than ever. One effective solution gaining popularity among enterprises is the use of password managers. These tools offer a secure and efficient way to manage passwords and other

From Chaos to Control: The Password Managers Read More »

API in Danger: Underestimated Security Holes

Audit and intrusion tests, In the news, Security / Etienne Maghakian

In recent years, API security has become a crucial issue for companies, with several significant leaks revealing the vulnerabilities of API integrations. For example, in June 2024, Authy (Twilio) suffered an attack resulting in the exfiltration of personal data of 33.4 million users [1]. This was caused by poor API authorization management, exposing phone numbers.

API in Danger: Underestimated Security Holes Read More »

A Successful Integration

Data protection and encryption, In the news / Etienne Maghakian

A Successful Integration: RegData Protection Suite (RPS) and Thales CipherTrust We are happy to announce a new integration between two major partners of Kyos: RegData and Thales. RegData Protection Suite (RPS) is now able to use Thales’ CipherTrust Manager as a key management solution (KMS). We are very excited about this news, as this will allow

A Successful Integration Read More »

We successfully renewed our Crest Membership

Leave a Comment / Audit and intrusion tests, Security / Etienne Maghakian

Kyos team is proud to announce that we successfully renewed our Crest Membership. This accreditation allows our clients to get CREST Certified penetration testings directly from Kyos. This standard ensures clients that they can get high-quality services from Kyos and entrusted professional ethical hackers. ‘CREST is pleased to welcome Kyos as an accredited member company’,

We successfully renewed our Crest Membership Read More »

Thales HSM vs DpoD Cloud

Data protection and encryption / Etienne Maghakian

High Assurance Hardware Security Modules Secure your sensitive data and critical applications by storing, protecting and managing your cryptographic keys in Luna Network Hardware Security Modules (HSMs) – high-assurance, tamper-resistant, network-attached appliances offering market-leading performance.

Thales HSM vs DpoD Cloud Read More »

Exchange zero-day Exploit

Security / Etienne Maghakian

Whether you are a Kyos customer or not, considering the criticality of this flaw, we offer you a free primary investigation of your Exchange server, to determine if it is still vulnerable, as well as to identify if any potential attacks have taken place, which we know is very likely. Even though Kyos Exchange Servers have not been affected, 50% of our customers with on-premise Exchange Servers have been impacted, despite the application of the patch that we performed the same day.

Exchange zero-day Exploit Read More »

0-day Vulnerability

Security / Etienne Maghakian

On March 2, Microsoft has released an emergency security update for Microsoft Exchange to remediate six vulnerabilities allowing remote code execution, of which 4 can bypass any authentication control.

0-day Vulnerability Read More »

What is Double Key Encryption (DKE)?

Data protection and encryption, Security / Etienne Maghakian

1. Introduction What is DKE? DKE – or Double Key Encryption– is a new option offered by Microsoft Information Protection (MIP), a cloud-based data classification and protection software. Given that many customers are worried to start their journey to the cloud because of data protection concerns, Microsoft implemented a new option to protect unstructured data

What is Double Key Encryption (DKE)? Read More »

Security of data in the cloud

Data protection and encryption, Security / Etienne Maghakian

The concept of Cloud has evolved in the last 20 years, and security concerns have grown with it. The first serious effort to provide data hosting in the Cloud comes with Amazon Simple Storage Service (S3), and with it the security burden to make sure that correct permissions were configured to avoid private data to become public.

Security of data in the cloud Read More »