  SciPlay brings you Solitaire Spark- an engaging and interactive classic solitaire game. Play the classic card game you know and love compl...

Welkom bij een nieuw solitaire kaartspel.

SciPlay brings you Solitaire Spark- an engaging and interactive classic solitaire game. Relax and play endless levels of free classic klondike solitaire. Download Solitaire Spark and play klondike solitaire free.

Ontspan en speel eindeloze niveaus van gratis klassieke klondike solitaire. Waarom speel je geen nieuw solitaire kaartspel? Download Solitaire Spark en speel gratis klondike solitaire.

SciPlay brings you Solitaire Spark- an engaging and interactive classic solitaire game. Play the classic card game you know and love completely free and with no ads! Relax and play endless levels of free classic klondike solitaire. The goal of the game is to move all the cards from the Tableau to the Foundation from Aces to Kings in the same suit.

Looking for something fun to do in your spare time? Why not play a new solitaire card game? Download Solitaire Spark and play klondike solitaire free. Also known as the patience game, klondike solitaire involves strategy, skill, and a little luck.

Keep your mind sharp by solving free solitaire games. This classic solitaire card game will help you keep your brain active during your downtime. Play these free basic solitaire card games anytime, anywhere!

♦️ Keep track of your performance with statistics on your current match and your all-time best score

♣️ Boosters: Not sure what your next move should be? Use the ‘hint’ booster to make things easier. Regret your last move? No problem. Use the ‘Undo’ booster to take it back

♣️ New player friendly: Use our tutorial for beginners and you’ll be completing levels in no time!

So, sit back, unwind, and play Solitare Spark- the most engrossing solitare card game online.

Solitaire Spark - card game - Android Card Game

Latest round led by IVP values the company at $450 million.

In our series of letters from African journalists, novelist and writer Adaobi Tricia Nwaubani looks at the challenges facing artificial intelligence (AI) security.

In onze reeks brieven van Afrikaanse journalisten kijkt romanschrijfster Adaobi Tricia Nwaubani naar de uitdagingen voor de veiligheid van kunstmatige intelligentie (AI).

SAN FRANCISCO, May 3, 2022 — Traceable AI, the API security & observability company, today announced it has raised $60 million in Series B funding. This new funding values Traceable AI at more than $450 million. Traceable AI plans to use this round of funding to accelerate its next phase of growth by further investing in its product development and research efforts, expanding its sales and marketing teams, and expanding global sales.

SAN FRANCISCO, 3 mei 2022 - Traceable AI, het API security & observability bedrijf, heeft vandaag aangekondigd dat het $60 miljoen heeft opgehaald in Series B financiering. Deze nieuwe financiering waardeert Traceable AI op meer dan 450 miljoen dollar. Traceable AI is van plan deze financieringsronde te gebruiken om zijn volgende groeifase te versnellen door verder te investeren in zijn productontwikkeling en onderzoeksinspanningen, zijn verkoop- en marketingteams uit te breiden, en zijn wereldwijde verkoop uit te breiden.

SAN FRANCISCO, May 3, 2022 — Traceable AI, the API security & observability company, today announced it has raised $60 million in Series B funding. This new funding values Traceable AI at more than $450 million. This investment round was led by Institutional Venture Partners (IVP), and other investors include Tiger Global Management and existing investors Unusual Ventures and BIG Labs. Traceable AI plans to use this round of funding to accelerate its next phase of growth by further investing in its product development and research efforts, expanding its sales and marketing teams, and expanding global sales.

“API security has become a major security and compliance concern for most companies,” said Steve Harrick, general partner, IVP. “Traceable offers a fundamentally differentiated solution that provides coverage across the full DevSecOps software lifecycle — from API development and testing to runtime protection. The company is led by Jyoti Bansal and Sanjay Nagaraj, proven entrepreneurs who we have been fortunate to work with before. They listen to customer needs and know how to deliver software at scale.”

Traceable was started two years ago by AppDynamics and Harness founder Jyoti Bansal and former AppDynamics VP of Engineering Sanjay Nagaraj through a $20 million Series A in July 2020.

"Widespread use of APIs in cloud-native applications has led to a significantly larger attack surface, intensifying the challenge of protecting these APIs from malicious usage or abuse,” said Bansal. “Bad actors only need one API entry point to access an organization’s data and cause irreparable financial, reputational and service interruptions damage. Traceable AI applies the power of machine learning and distributed tracing to truly understand how an application really works in the context of the business, and therefore, be able to detect anomalies and block threats to keep customers secure and resilient against next-gen attacks.”

By leveraging the team's expertise in distributed tracing and observability, Traceable AI is the only API security platform that discovers, manages and secures APIs for enterprise-level organizations. Their differentiated capabilities provide coverage for the most important API security use cases, including API discovery, sensitive data exfiltration, and detecting and blocking attacks such as account takeover, API abuse and API fraud.

“As we know, all businesses are run by software. Given that APIs are the core engine of any software model today, it’s imperative that we secure them to protect the business”, said John Vrionis, partner at Unusual Ventures. “We are extremely excited to be a part of the Traceable team and their continued efforts to help enterprises secure their most important software asset – APIs.”

Traceable AI provides the industry’s leading API security platform that discovers, manages, and secures all APIs against malicious attacks and provides rich analytics to perform threat hunting, so you can make the right decisions regarding your API security posture.

A wide range of companies, including Informatica, Bullish, Digital Ocean, Zolve, Houwzer and many large finance firms utilize Traceable AI’s innovative distributed tracing technology to secure their cloud-native applications.

“We want to detect and respond to breaches in the shortest time possible,” said Pathik Patel, head of cloud security at Informatica. “The most important part is to figure out how much visibility we have into our environment and how quickly we can find the root causes and remediate those items. Traceable AI deploys across any environment, whether it’s your cloud, Kubernetes, or traditional virtual machines. Knowing how our applications behave as a part of API discovery is what created the win for the Traceable AI team at Informatica.”

“Businesses are now API driven and increasingly susceptible to business logic abuse and generic vulnerabilities like Log4Shell/Spring4shell. A holistic approach is needed to protect APIs from known and unknown threats across environments by understanding their production and pre-production environments,” said Nagaraj. “Traceable AI fits into a company’s existing infrastructure quickly and without friction. We offer agentless deployment options, including out-of-band traffic mirroring, to make sure our platform fits the needs of our customers.”

Traceable protects APIs from the inside by understanding the unique business logic, user attribution, and context of each API – from development through production. With our distributed tracing technology and advanced context-based behavioral analytics, we deliver modern API security to your cloud-native and API-based applications. Learn more at https://traceable.ai.

API Security Company Traceable AI Lands $60 Million Series B

There are dozens of Metaverse crypto coins on the market. It may be difficult for someone new to the space to navigate the market and figure out which are the top Metaverse cryptocurrencies to buy in 2022. Today we look at our pick of the top seven best Metaverse crypto coins to buy in 2022 that could see significant price growth during crypto’s next bull run. Note: The list below is ordered by the current market capitalization of each Metaverse crypto, lowest to highest. 7. Mines of Dalarnia (DAR) – $224 million Launching in November 2021, Mines of Dalarnia (DAR)

Cryptocurrencies could be worth billions of dollars in the next few years.

Cryptocurrencies kunnen in de komende jaren miljarden dollars waard worden.

It may be difficult for someone new to the space to navigate the market and figure out which are the top Metaverse cryptocurrencies to buy in 2022. Today we look at our pick of the top seven best Metaverse crypto coins to buy in 2022 that could see significant price growth during crypto’s next bull run. Note: The list below is ordered by the current market capitalization of each Metaverse crypto, lowest to highest.

Het kan moeilijk zijn voor iemand die nieuw is in de ruimte om de markt te navigeren en uit te zoeken welke de top Metaverse cryptocurrencies zijn om te kopen in 2022. Vandaag kijken we naar onze keuze van de top zeven beste Metaverse cryptomunten om te kopen in 2022 die een aanzienlijke prijsgroei zouden kunnen zien tijdens de volgende bull run van crypto. Wanneer spelers op mijnexpeditie gaan, ontvangen de landeigenaren een deel van de beloningen die door de speler worden verzameld, waardoor een passieve inkomstenstroom ontstaat en gebruikers worden gestimuleerd om land te kopen in Mines of Dalarnia.

There are dozens of Metaverse crypto coins on the market. It may be difficult for someone new to the space to navigate the market and figure out which are the top Metaverse cryptocurrencies to buy in 2022. Today we look at our pick of the top seven best Metaverse crypto coins to buy in 2022 that could see significant price growth during crypto’s next bull run.

Note: The list below is ordered by the current market capitalization of each Metaverse crypto, lowest to highest.

Launching in November 2021, Mines of Dalarnia (DAR) is a 2D NFT-based blockchain game involving users mining assets and using the native DAR tokens to upgrade their equipment and characters. Mines of Dalarnia also allows players to buy virtual real estate on the platform by purchasing expeditions.

When players go on a mining expedition, the landowners will receive a portion of the rewards collected by the player, creating a passive income stream and incentivizing users to purchase land in Mines of Dalarnia.

This blockchain game is 100% free to try, and if you haven’t yet, we recommend checking it out. It’s one of the top games built on Chromia, a relatively new relational blockchain built explicitly for Metaverse crypto games. Mines of Dalarnia is exceptionally well made, the gameplay is both fun and intuitive, and the project is a must-watch in May 2022.

The primary utility asset for the platform is DAR, featuring both BEP-20 and ERC-20 versions. DAR’s utility includes paying for in-game purchases, buying virtual real estate, upgrading equipment, etc.

You can buy DAR on Crypto.com, Gate.io, Binance, PancakeSwap, etc.

Launched in August 2021, Radio Caca (RACA) is one of the leading Metaverse ecosystems consisting of its USM Metaverse (The United States of Mars), an NFT marketplace, a DAO, and its flagship NFT-based play-to-earn game Metamon.

Radio Caca features a robust 3D in-browser Metaverse similar to Decentraland and The Sandbox, enabling users to explore its vast experiences, connect with others in a social setting, and earn rewards. If you’d like to check Radio Caca’s USM, you can connect via a Web3 wallet like MetaMask.

Radio Caca is highly underrated because of its incredible partnerships. In recent news, the team partnered with French Montana and announced that it would allocate $25 million to build a 2D Metaverse themed after Montana’s upcoming album Montega.

Moreover, Radio Caca’s flagship NFT-based game Metamon is an excellent way for users to generate income. The game recently received several updates making it more attractive to players.

With its robust ecosystem, and continuous development and innovation, Radio Caca is a top-rated Metaverse crypto coin worth keeping an eye on in May 2022.

The primary utility asset on the platform is RACA, including both ERC-20 and BEP-20 versions living on the Ethereum and BNB chains. RACA’s primary utilities include interacting with its Metaverse, receiving it as rewards, buying NFTs on its marketplace, etc.

You can purchase RACA on Huobi Global, Uniswap, KuCoin, PancakeSwap, Gate.io, Poloniex, etc.

Launched in December 2017, WAX (WAXP), aka The Worldwide Asset Exchange, is a specialized Metaverse and NFT blockchain platform built for next-generation crypto applications and games.

The WAX ecosystem features one of the most robust and active gaming communities on the market, with some of the most popular blockchain games hosted on the chain, including Alien Worlds, Splinterlands, and Farmers World.

Check out this compilation for the Top 5 Most Popular Metaverse Games Built on WAX.

What makes the WAX blockchain unique is its delegated proof of stake consensus mechanism, which significantly reduces the fees users have to pay. WAX utilizes three resources to pay for transactions called CPU, RAM, and NET. Users can obtain those resources by staking WAXP, the native asset on the chain. Users can also unstake their WAXP tokens to claim back all the fees spent for transactions.

WAX also features some of the most user-friendly integrations, including its WAX Cloud Wallet, compatible with all applications running on the WAX chain. This means users don’t have to download third-party apps or install anything on their devices to access WAX’s games and services.

The primary utility asset on the platform is WAXP, allowing users to interact with the ecosystem, purchase NFTs, access games, etc.

You can buy WAXP on Binance, KuCoin, WazirX, Gate.io, Bithumb, Bittrex, Crypto.com, etc.

Launched in March 2018, Axie Infinity (AXS) is one of the pioneers in play-to-earn Metaverse and NFT-based games that was one of the first games to enable players to earn a significant income from playing the game.

Axie Infinity features one of the most active NFT marketplaces, with over 20k NFTs selling in the past 24 hours. It’s also currently the fifth-largest Metavere crypto game on the market right now with a market capitalization of over $1.8 billion.

Axie Infinity’s gameplay revolves around users collecting monster NFTs called Axies. Users can use their Axies to battle, take on quests, and start earning rewards. Players can also upgrade their Axies and breed/evolve them into more powerful versions.

Axie Infinity is also highly affordable. Users can purchase an Axie for under $20 and start playing the game immediately. With the current bear market, AXS could be an excellent opportunity to open a position while the price is low.

The game features a dual token ecosystem consisting of the SLP utility and AXS governance assets. SLP enables users to breed/upgrade axies, while AXS allows users to purchase Axies from the marketplace and participate in DAO governance.

You can buy AXS on KuCoin, Gemini, FTX, Binance, Kraken, etc.

Launching the Alpha in December 2021, The Sandbox (SAND) is the third-most valued Metaverse crypto coin on the market, with a capitalization of over $2.5 billion. It’s one of the most funded projects, with influential groups like Softbank investing over $90 million into Sandbox’s Metaverse in November 2021.

The Sandbox’s Metaverse is best described as a high-quality hybrid version between Minecraft and Fortnite. It features block-style graphics similar to Minecraft, with colorful and sleek game mechanics similar to Fortnite.

The project also features one of the most sought-after virtual real estate markets in crypto, so if you’re looking to buy land in the Metaverse, check out The Sandbox’s NFT Land OpenSea collection. Keep in mind that land in The Sandbox is quite expensive and can run you upwards of $5k.

As one of the most funded and anticipated projects on the market, The Sandbox is a must-watch in May 2022. The project is still in alpha, which means when the open beta drops, SAND could see significant bullish momentum.

SAND is the primary utility asset on the platform, allowing users to purchase in-game items, stake them for rewards, etc.

You can purchase SAND on Binance, FTX, Crypto.com, Bittrex, KuCoin, MEXC, etc.

Launched in February 2020, Decentraland (MANA) is the second-most valued Metaverse project and is our personal favorite on this list. It features the most popular Metaverse with the most users, making it a must-watch in May 2022.

Decentraland’s Metaverse is free to access and features an easily-accessible in-browser version and a desktop client for a higher-quality experience. Decentraland features dozens of places to visit, ranging from virtual casinos, play-to-earn games, clubs, etc.

Whether you’re looking to socialize with users online or earn rewards for spending time in the Metaverse, you’re bound to find your place in Decentraland.

In addition, Decentraland (MANA) also features a robust virtual real estate marketplace similar to The Sandbox. Users can purchase land for roughly $7k, enabling them to monetize it or create unique designs with ease.

The primary utility asset for Decentraland is MANA, a Polygon-compatible ERC-20 token living on Ethereum’s blockchain. MANA can be used to purchase wearable NFTs in Decentralnd, claim rewards, participate in exclusive activities and events, etc.

You can purchase MANA on Gate.io, Gemini, Kraken, Binance, Coinbase, LBank, etc.

Launching on March 17th, 2022, ApeCoin (APE) is currently the most-valued Metaverse crypto coin, with over $4.38 billion market capitalization. Since its inception two months ago, APE surpassed every other Metaverse crypto coin, speaking to the tremendous potential and community support surrounding this project.

ApeCoin will serve as the primary utility asset for its Metaverse, which recently completed a land sale that instantly sold out within minutes and crashed Ethereum’s blockchain, catapulting gas prices into the thousands.

ApeCoin was launched for the Web3 economy, and holders of the token are provided with voting power to influence the outcome of proposals initiated by the ApeCoin Foundation/DAO.

APE is an ERC-20 asset living on the Ethereum blockchain. It features a max supply of 1 billion tokens, and its tokenomics will never allow the digital asset to surpass its supply.

You can buy ApeCoin on Kraken, Gemini, Uniswap, Gate.io, Binance, etc.

Disclosure: This is not trading or investment advice. Always do your research before buying any Metaverse crypto coins.

Follow us on Twitter @themerklehash to stay updated with the latest Metaverse news!

7 Best Metaverse Crypto Coins to Buy in 2022

A cyberwar could spill over to the business world at any moment, so it's time to lock things down tight.

If you're a computer security expert, you could be able to rely on malware to protect your systems.

Als u een computerbeveiligingsdeskundige bent, zou u kunnen vertrouwen op malware om uw systemen te beschermen.

Chances are you don't live in Ukraine's capital, Kyiv, so you don't need to worry about a missile landing on your office. But even if you're 6,000 miles away, you could still get smacked by Russia’s or its Anonymous enemies' cyberwar fallout. They may sound basic, but these recommendations could well save your business.

Maar zelfs als je 6.000 mijl verderop zit, kun je nog steeds worden getroffen door de cyberoorlog van Rusland of zijn Anonieme vijanden. Naarmate de oorlog voortschrijdt, zal de kans alleen maar toenemen dat iedereen wordt getroffen door de resulterende en toenemende cyberaanvallen. Je hebt dit al een miljoen keer gehoord: Maak een back-up van je systemen.

Chances are you don't live in Ukraine's capital, Kyiv, so you don't need to worry about a missile landing on your office. But even if you're 6,000 miles away, you could still get smacked by Russia’s or its Anonymous enemies' cyberwar fallout.

As the war grinds on, chances will only increase that everyone will be affected by the resulting and growing cyberattacks. So, what can you do to protect yourself?

I’ve given it some thought and here are my suggestions. They may sound basic, but these recommendations could well save your business.

You've heard this a million times: Back up your systems. Well, here it is again and this time you'd better pay attention. Russia has released a new kind of Windows malware, HermeticWiper, which wipes the data from your computers and then makes it impossible to boot it. No backup? No computer.

Besides hitting sites in Ukraine, it's also hit businesses in Latvia and Lithuania. I think it's only a matter of time before it damages systems around the world — including the ones in a server room near you.

The most common way for malware to get into your computers is by way of phishing attacks. This common method of tricking one of your employees into clicking a link or opening a file that will infect your computer with ransomware or a virus still works as well as ever.

You can tell your people until you're blue in the face not to open suspicious e-mails, but they sometimes do. So, while I suggest you continue to try to educate your people, you should also invest in anti-phishing tools or services.

Have you been holding back on updating your programs or operating system because it's too much trouble? I get that, but now is not the time to hold back. I guarantee you there are nice, juicy zero-day exploits just waiting to be unleashed on older software. The more recent your patches, the less likely it is you'll get mauled when they arrive.

At the same time, if you rely on, say, node.js or other external programming code repositories, it's time to lock your code. As Alan Cox, a one-time top Linux kernel developer, explained: "Anyone pulling anything from an external repository, especially an automated one, should IMHO start full review and change control to lockdown. People are already talking about trojanning things like js modules and python modules with anti-whoever they hate protests and traps."

There are many kinds of security programs and services out there. I can't tell you what you need in particular, because every business is different and has varying needs. What I can tell you is whatever it is you do, you need to get and use security programs to protect critical systems. (CSO is a good place to start for the latest on what's what in security software.)

A simple login and password doesn't cut it these days. You need multifactor authentication (MFA). Even if you've never used MFA on a computer, you've used it in real life. For example, every time you gas up with a credit card at a gas pump, you must enter your zip code. Or, whenever you get cash from an ATM, you need both your bank card and your personal identification number (PIN). These transactions use both a physical factor, your card, and a knowledge factor, your ZIP code or PIN.

Everyone now pretty much supports MFA, and you should, too. It can go a long way to protecting you and your systems from harm. It's not perfect, however. The old-school user ID/password/and text message is easily crackable.

But, if you use a FIDO Universal 2nd Factor (U2F) protocol-based device, such as a Yubico YubiKey or Google's Titan Security Key, you'll be as safe as anyone can be these days using MFA.

Ultimately, you want to move to a Zero-Trust security system. But that takes a lot of work. You need better security right away, and that means making the most of a quick and relatively easy security fix rather than shifting to a wholly new approach. There will be time for that once the war is over.

Let's pray the fighting ends sooner than later, both for our own sakes and for the people caught in the middle of the real war.
• Is the cyberwar coming or is it already here?
• Windows is in Moscow’s crosshairs, too
• Russian cyberattacks could soon strike the West, analysts say. ‘The risk right now is high and rising’
• The Cybersecurity Risks of an Escalating Russia-Ukraine Conflict

After Russia’s invasion of Ukraine, it's time to hunker down

Network segmentation is a best practice and when done correctly it improves network security and

The SolarWinds breach has been linked to a massive cyber-attack that has left more than 100 people dead.

De inbreuk bij SolarWinds is in verband gebracht met een grootschalige cyberaanval waarbij meer dan 100 mensen om het leven zijn gekomen.

Every organization is at risk for cyberattacks, and it’s unsettling that the attackers are so good at maximizing the damage to their victims. The time an attacker spends inside a network is referred to as ‘dwell time,’ and it’s measured from the point of intrusion to the point of detection. Long dwell times increase the damage of an attack, often in ways that can’t be measured.

Elke organisatie loopt het risico op cyberaanvallen, en het is verontrustend dat de aanvallers zo goed zijn in het maximaliseren van de schade aan hun slachtoffers. Aanvallers die de bedrijfsverdediging omzeilen, zullen zich zo lang mogelijk in het netwerk verbergen, zelfs als ze van plan zijn een ransomware-aanval uit te voeren. Lange verblijftijden verhogen de schade van een aanval, vaak op een manier die niet kan worden gemeten.

Every organization is at risk for cyberattacks, and it’s unsettling that the attackers are so good at maximizing the damage to their victims. Their tactics are increasingly sophisticated and often involve some type of email attack, bot attack, or even just old-school social engineering. Attackers who bypass company defenses will hide inside the network as long as possible, even if they’re planning to launch a ransomware attack. They use this time to explore the network, steal data and user credentials, destroy backups, and do anything else they can do to set themselves up for future attacks.

The time an attacker spends inside a network is referred to as ‘dwell time,’ and it’s measured from the point of intrusion to the point of detection. Long dwell times increase the damage of an attack, often in ways that can’t be measured. The SolarWinds breach is the perfect example of this. The intruders entered the network in early 2019 and were not discovered until December 2020. The exact number of victims and costs associated with the attack remain unknown.

Network segmentation is one of the easiest and most effective ways to reduce dwell time. For those of you not familiar with this practice, it’s just like it sounds: You divide your network into different sections (segments) and you ‘lock the doors’ between them.

You’ve seen this concept at work in high-security buildings that restrict access to certain parts of the facility to people who have been granted permission to enter that restricted section. This keeps people from wandering around and exploring areas that are critical to operations or contain sensitive information. Segmentation does something similar for your network.

There are immediate security benefits to separating your network into multiple contained segments:
• Segmentation creates a smaller attack surface within the network. An intruder will be limited to the segment that was breached. The attacker can go no further unless they successfully breach another segment. Isolating your mission-critical servers and data can prevent an intruder from gaining access to your resources through a neglected printer or rogue smart device.
• Segmentation makes it easier to detect and isolate security incidents. The division between the segments helps contain the spread of malware and viruses. It limits the areas where the intruder can hide, and it can improve the efficiency of security monitoring.

There are non-security benefits as well. For example, POS devices fall under strict compliance rules. Assigning POS devices their own segment helps companies by limiting the cardholder data environment (CDE) and reducing the scope of PCI DSS compliance.

Segmentation also improves network performance by separating traffic. A good example of improving both security and performance is the separation of a public network from private resources. A shopping center or school campus that offers free wireless access to guests would want that traffic separated from the line-of-business applications. This keeps the potential traffic congestion of public wireless access isolated to assigned segments.

Gartner analysts have warned against over-segmentation, which can complicate the management and use of the network. One Gartner study found that over 70% of segmentation projects had to be re-architected because the segmentation made it too difficult for authorized users to access what they needed to perform their work.

“A principle of network segmentation is to group like resources together, to minimize security overhead: Build a fence around the car park, not a fence and gate around every car. ~Gartner”

Barracuda can help you secure your network while making it easier to manage. Visit our website for more information on Barracuda CloudGen Firewall, secure SD-WAN, and other network security solutions.

How network segmentation can help secure your business

Pursuing a SOC 2 audit is a multi-step process. This blog clarifies the SOC 2 audit process and explains the role of SOC 2 auditors and compliance software.

When it comes to cybersecurity, companies need to demonstrate their ability to protect data and information.

Als het om cyberbeveiliging gaat, moeten bedrijven aantonen dat zij in staat zijn gegevens en informatie te beschermen.

Pursuing a SOC 2 audit is a multi-step process, which can seem confusing at first glance given the fact that there are vendors that provide compliance software, and other vendors who are themselves certified SOC 2 auditors. This blog will clarify the SOC 2 audit process, as well as explain the role of SOC 2 auditors and compliance software. When and How to Use SOC 2 Software ToolsThere are multiple steps to completing a SOC 2 audit.

Enter, SOC 2 (Service Organization Control 2), een populaire audit die getuigt van het vermogen van een bedrijf om gegevens en informatie te beschermen. Het nastreven van een SOC 2-audit is een proces dat uit verschillende stappen bestaat, wat op het eerste gezicht verwarrend kan lijken, gezien het feit dat er verkopers zijn die nalevingssoftware leveren, en andere verkopers die zelf gecertificeerde SOC 2-auditors zijn. Wanneer en hoe SOC 2-softwaretools gebruikenEr zijn verschillende stappen om een SOC 2-audit te voltooien.

Data breaches and ransomware attacks continue to dominate the news cycle. To protect data, and position themselves favorably among prospects and customers, companies need to demonstrate a commitment to cybersecurity.

Enter, SOC 2 (Service Organization Control 2), a popular audit that attests to a company’s ability to protect data and information. It’s a strong validator for any company looking to demonstrate its commitment to cybersecurity to partners and customers.

Pursuing a SOC 2 audit is a multi-step process, which can seem confusing at first glance given the fact that there are vendors that provide compliance software, and other vendors who are themselves certified SOC 2 auditors.

This blog will clarify the SOC 2 audit process, as well as explain the role of SOC 2 auditors and compliance software.

When and How to Use SOC 2 Software Tools

There are multiple steps to completing a SOC 2 audit. Many companies start with a readiness/gap assessment, which is the process of reviewing existing controls in place and identifying those that need to be improved or implemented. This process can be executed via an audit consultant, or through specialized software tools that help simplify this process (like A-SCEND).

Compliance software tools typically provide automated workflows and compliance templates, comparing your existing controls against the controls within a selected compliance framework — which, in this case, would be the SOC 2 framework.

Typically, this software allows you to visualize progress toward compliance goals, assign tasks related to evidence collection or policy updates, and collaborate all in one dashboard. Software tools provide a simple way to understand the framework requirements, assess them against your existing policies and procedures, and manage the process of updating policies. While these tools help to better prepare for an audit and streamline the assessment process, an experienced auditor is still a critical component of compliance.

When and How to Use SOC 2 Auditors

Software tools can only take you so far with SOC 2. They can help prepare a company for a SOC 2 audit, but not complete the audit itself. When the actual audit takes place, companies must turn to a SOC auditor.

SOC 2 audits are regulated by the American Institute of Certified Public Accountants (AICPA) and must be completed by an external auditor from a licensed CPA firm. This is the only way a company can receive an official SOC 2 report, whether it’s a Type 1 or Type 2 report.

An official SOC 2 report is valid for one year following the date the report was issued. Future annual audits must also be completed by an external auditor from a licensed CPA firm.

If your organization plans to use software to prepare for an audit, it’s helpful to work with a software partner who can also conduct the official audit (as a certified CPA) because it provides an added layer of convenience throughout the SOC 2 process and results in a reputable report. 



Organizations need to go beyond the data collection by their compliance software tool and conduct further due diligence, such as observations and walkthroughs (conversations) between the audit team and the client. SOC 2 auditors may also find that they need additional data or evidence necessary to validate the design and operating effectiveness of a complete control set. When you use the same company for a technology-enabled audit, and a SOC 2 report, the software is designed to request all audit materials needed, including manually operated controls and supporting evidence. In this convenient scenario, you can save time, resources, and money.

Stephanie Oyler is the Vice President of Attestation Services at A-LIGN focused on overseeing a variation of many assessments within the SOC practice. Stephanie’s responsibilities include managing key service delivery leadership teams, maintaining auditing standards and methodologies, and analyzing business unit metrics. Stephanie has spent several years at A-LIGN in service delivery roles from auditing and managing client engagements to overseeing audit teams and providing quality reviews of reports. Prior to joining A-LIGN, Stephanie worked for CBIZ, the tenth largest accounting firm in the U.S., providing auditing services in the financial accounting spectrum for various industries including automobile, hospitality, not-for-profit, real estate, and cloud architecture. Stephanie graduated from the University of South Florida with a bachelor’s degree of Science in Accounting. During her time at the University of South Florida, Stephanie was an active member of Beta Alpha Psi, an international honor society for Accounting, Finance, and Information Systems students and professionals.

Who Performs a SOC 2 Audit? The Role of SOC 2 Auditors | CSA

By Guy Rosefelt, CPO, Sangfor Technologies NFTs have become very popular with collectors and are more ubiquitous every day.  The idea of owning a one-of-a-kind object even in the digital world is very attractive.  The

In our series of letters from African journalists, novelist and writer Jonathan Marcus looks at how security issues affect crypto-wallets.

In onze reeks brieven van Afrikaanse journalisten bekijkt romanschrijver en schrijver Jonathan Marcus hoe veiligheidskwesties crypto-wallets beïnvloeden.

The idea of owning a one-of-a-kind object even in the digital world is very attractive. But artists and creatives of all types, be it painting and graphics, music, photography, and even video can now create and sell unique works that cannot be replicated. Besides security issues, they are being used by criminals for money laundering of cryptocurrency, and I do not see the value in something that will immediately become worthless when the internet apocalypse happens and your NFT wallet is no longer accessible.

Het idee is niet nieuw, aangezien het kopen van unieke voorwerpen in games al tientallen jaren bestaat. Maar kunstenaars en creatieven van alle soorten, of het nu gaat om schilderen en grafiek, muziek, fotografie, en zelfs video, kunnen nu unieke werken maken en verkopen die niet kunnen worden nagemaakt. Naast beveiligingsproblemen worden ze door criminelen gebruikt voor het witwassen van cryptocurrency, en ik zie de waarde niet in van iets dat onmiddellijk waardeloos wordt als de internetapocalyps gebeurt en je NFT wallet niet meer toegankelijk is.

NFTs have become very popular with collectors and are more ubiquitous every day. The idea of owning a one-of-a-kind object even in the digital world is very attractive. The idea is not new as buying unique items inside games has been around for decades. But artists and creatives of all types, be it painting and graphics, music, photography, and even video can now create and sell unique works that cannot be replicated.

First, I need to disclose I am not a huge fan of Non-Fungible Tokens (NFTs). Besides security issues, they are being used by criminals for money laundering of cryptocurrency, and I do not see the value in something that will immediately become worthless when the internet apocalypse happens and your NFT wallet is no longer accessible. But that is just me. Until that happens let’s talk about the security issues. Security issues include phishing scams to access crypto-wallets and steal NFTs, and selling counterfeit items, but the issue I want to discuss is using NFTs to distribute malware.

VIA, a company that specializes in solutions for infrastructure and government, reported that they discovered instances of malware being injected into NFTs and demonstrated how easy it is. It makes sense as NFTs are normally media files that have historically been used to inject code or embed malicious software that runs when open. All being an NFT does is verify that it is the only file of its kind using blockchain. But it does nothing to verify the safety of the file. VIA has even created an open-source tool to scan NFTs to look for malicious code or software in the file.

So, the next time you spend thousands of dollars on an NFT, make sure, even if it comes from a reputable vendor, to scan it before opening it and hope there is a return policy if you find something unexpected. Otherwise, your crypto wallet might have a surprise for you once the internet apocalypse ends.

Guy is Chief Product Officer for Sangfor Technologies. He has over 20 years experience (though some say it is one year’s experience twenty times) in application and network security, kicking it off with 10 years in the U.S. Air Force, reaching rank of captain. After his time in the USAF building the first fiber to the desktop LAN and other things you would find in Tom Clancy novels, Guy worked at NGAF, SIEM, WAF and CASB startups as well as big-name brands like Imperva and Citrix. He has spoken at numerous conferences around the world and in people’s living rooms, written articles about the coming Internet Apocalypse, and even managed to occasionally lead teams that designed and built security stuff. Guy is thrilled to be in his current position at Sangfor — partly because he was promised there would always be Coke Zero in the breakroom. His favorite cake is German Chocolate.

Guy can be reached online at guy.rosefelt@sangfor.com or on Twitter at @otto38dd and at our company website www.sangfor.com.

FAIR USE NOTICE: Under the "fair use" act, another author may make limited use of the original author's work without asking permission. Pursuant to 17 U.S. Code § 107, certain uses of copyrighted material "for purposes such as criticism, comment, news reporting, teaching (including multiple copies for classroom use), scholarship, or research, is not an infringement of copyright." As a matter of policy, fair use is based on the belief that the public is entitled to freely use portions of copyrighted materials for purposes of commentary and criticism. The fair use privilege is perhaps the most significant limitation on a copyright owner's exclusive rights. Cyber Defense Media Group is a news reporting company, reporting cyber news, events, information and much more at no charge at our website Cyber Defense Magazine. All images and reporting are done exclusively under the Fair Use of the US copyright act.

NFTS Are Cool but Dangerous

By Randy Reiter CEO of Don’t Be Breached April, 2022 Microsoft reported that vulnerabilities in its Azure Database for PostgreSQL could have let Hackers gain access to other customers' databases after bypassing authentication. "By exploiting

Hackers could have exploited a vulnerability in Microsoft’s databases, according to researchers.

Hackers hebben volgens onderzoekers misbruik kunnen maken van een kwetsbaarheid in de databases van Microsoft.

By Randy Reiter CEO of Don’t Be BreachedApril, 2022 Microsoft reported that vulnerabilities in its Azure Database for PostgreSQL could have let Hackers gain access to other customers’ databases after bypassing authentication. Microsoft said its analysis showed no evidence of attackers having exploited the vulnerabilities to access customer data. Wiz said Microsoft awarded its researchers a $40,000 bug bounty — the amount can be viewed as confirmation of the vulnerability’s severity.

Door Randy Reiter CEO van Don't Be BreachedIn april 2022 meldde Microsoft dat kwetsbaarheden in zijn Azure Database voor PostgreSQL hackers toegang konden verschaffen tot de databases van andere klanten nadat ze de authenticatie hadden omzeild. Volgens Microsoft heeft zijn analyse geen aanwijzingen opgeleverd dat aanvallers de kwetsbaarheden hebben misbruikt om toegang te krijgen tot klantengegevens. Wiz zei dat Microsoft zijn onderzoekers een bounty van 40.000 dollar heeft toegekend - het bedrag kan worden gezien als een bevestiging van de ernst van de kwetsbaarheid.

By Randy Reiter CEO of Don’t Be Breached

April, 2022 Microsoft reported that vulnerabilities in its Azure Database for PostgreSQL could have let Hackers gain access to other customers’ databases after bypassing authentication. “By exploiting an elevated permissions bug in the Flexible Server authentication process for a replication user, a malicious user could leverage an improperly anchored regular expression to bypass authentication to gain access to other customers’ databases” the Microsoft Security Response Center reported.

The cloud security firm Wiz’s research team discovered the security vulnerabilities. An attacker could create a full copy of a target database in Azure PostgreSQL [Flexible Server], essentially exfiltrating all the information stored in the database, says Ami Luttwak, co-founder and CTO at Wiz.

Microsoft said it mitigated the issue on Jan. 13, 2022, less than 48 hours after Wiz had notified it of the issue. Microsoft said its analysis showed no evidence of attackers having exploited the vulnerabilities to access customer data. Wiz said Microsoft awarded its researchers a $40,000 bug bounty — the amount can be viewed as confirmation of the vulnerability’s severity.

How to Have Exploited the Database Vulnerability

As explained by Microsoft, the Wiz researchers went through the following steps to gain elevated privileges and remote code execution, which allowed them to bypass cross-account authentication using a forged certificate and access other customers’ databases:
• Retrieve the target’s common name from the Certificate Transparency feed.
• Find the target’s Azure region by resolving the database domain name and matching it to one of Azure’s public IP ranges.
• Create an attacker-controlled database in the target’s Azure region.
• Exploit vulnerability #1 on the attacker-controlled instance to escalate privileges and gain code execution.
• Scan the subnet for the target instance and exploit vulnerability #2 to gain read access!

How to Prevent Data Exfiltration and Data Breaches in Todays Complex Environment

Multiple layers of data protection are required today to prevent Data Exfiltration and Data Breaches. In 2020 the DHS, Department of State, U.S. Marine Corps and the Missile Defense Agency recognized this and all issued requests for proposals (RFP) for network full packet data capture for Deep Packet Inspection analysis (DPI) of network traffic. This is an important step forward protecting confidential database data and organization information.

Zero-day vulnerabilities that allow hackers to gain system privileges are a major threat to all organizations encrypted and unencrypted confidential data. Confidential data includes: credit card, tax ID, medical, social media, corporate, manufacturing, trade secrets, law enforcement, defense, homeland security, power grid and public utility data. This confidential data is almost always stored in DB2, Informix, MariaDB, Microsoft SQL Server, MySQL, Oracle, PostgreSQL and SAP Sybase databases.

How to Stop Data Exfiltration and Data Breaches with Deep Packet Inspection

Protecting encrypted and unencrypted confidential database data is much more than securing databases, operating systems, applications and the network perimeter against Hackers, Rogue Insiders and Supply Chain Attacks.

Non-intrusive network sniffing technology can perform a real-time Deep Packet Inspection (DPI) of 100% the database activity from a network tap or proxy server with no impact on the database servers. The database SQL activity is very predictable. Database servers servicing 1,000 to 10,000 end-users typically process daily 2,000 to 10,000 unique queries or SQL commands that run millions of times a day. Deep Packet Analysis does not require logging into the monitored networks, servers or databases. This approach can provide CISOs with what they can rarely achieve. Total visibility into the database activity 24×7 and 100% protection of confidential database data.

Advanced SQL Behavioral Analysis of 100% of the real-time database SQL packets can learn what the normal database activity is. Now the database query and SQL activity can be non-intrusively monitored in real-time with DPI and non-normal SQL activity immediately pinpointed. This approach is inexpensive to setup and has a low cost of operation. Now non-normal database activity from Hackers, Rogue Insiders or and Supply Chain Attacks can be detected in a few milli seconds. The Security Team can be immediately notified and the Hacker session terminated so that confidential database data is not stolen, ransomed or sold on the Dark Web.

Reiter is the CEO of Don’t Be Breached a Sql Power Tools company. He is the architect of the Database Cyber Security Guard product, a database Data Breach prevention product for DB2, Informix, MariaDB, Microsoft SQL Server, MySQL, Oracle, PostgreSQL, and SAP Sybase databases. He has a Master’s Degree in Computer Science and has worked extensively over the past 25 years with real-time network sniffing and database security. Randy can be reached online at rreiter@DontBeBreached.com, www.DontBeBreached.com and www.SqlPower.com/Cyber-Attacks.

FAIR USE NOTICE: Under the "fair use" act, another author may make limited use of the original author's work without asking permission. Pursuant to 17 U.S. Code § 107, certain uses of copyrighted material "for purposes such as criticism, comment, news reporting, teaching (including multiple copies for classroom use), scholarship, or research, is not an infringement of copyright." As a matter of policy, fair use is based on the belief that the public is entitled to freely use portions of copyrighted materials for purposes of commentary and criticism. The fair use privilege is perhaps the most significant limitation on a copyright owner's exclusive rights. Cyber Defense Media Group is a news reporting company, reporting cyber news, events, information and much more at no charge at our website Cyber Defense Magazine. All images and reporting are done exclusively under the Fair Use of the US copyright act.

Azure PostgreSQL User Databases Were Exposed Due to Critical Vulnerabilities

Sea-Doo maker BRP Inc. says work at its factories remains at a standstill following a cyberattack it reported Monday. Spokeswoman Biliana Necheva says in

A Canadian manufacturing company says it has been forced to freeze its operations following a cyber attack.

Een Canadees productiebedrijf zegt dat het gedwongen is zijn activiteiten te bevriezen na een cyberaanval.

Sea-Doo maker BRP Inc. says work at its factories remains at a standstill following a cyberattack it reported Monday. Spokeswoman Biliana Necheva says in an email operations have not resumed more than 48 hours after they were halted as a cautionary measure. It comes at a tough time for BRP, as supply chain woes weighed on sales in its first quarter, with more input obstacles expected on the powersport vehicle maker’s path for the rest of the year.

Woordvoerster Biliana Necheva zegt in een e-mail dat de operaties meer dan 48 uur nadat ze uit voorzorg waren stopgezet, nog niet zijn hervat. Dit komt op een moeilijk moment voor BRP, aangezien de problemen met de toeleveringsketen de verkoop in het eerste kwartaal hebben gedrukt. Voor de rest van het jaar worden nog meer invoerbelemmeringen verwacht voor de fabrikant van motorvoertuigen.

Sea-Doo maker BRP Inc. says work at its factories remains at a standstill following a cyberattack it reported Monday.

Spokeswoman Biliana Necheva says in an email operations have not resumed more than 48 hours after they were halted as a cautionary measure.

The Quebec-based company, which manufactures Ski-Doos and off-road vehicles, announced Monday morning it was the target of “malicious cybersecurity activity” and took “immediate measures to contain the situation.”

Deploying its own information technology staff, BRP also said it hired cybersecurity experts to help secure its systems and support an internal investigation.

The company said its freeze on operations could delay some transactions with customers and suppliers.

It comes at a tough time for BRP, as supply chain woes weighed on sales in its first quarter, with more input obstacles expected on the powersport vehicle maker’s path for the rest of the year.

Spun off from Bombardier Inc. in 2003, BRP employs nearly 20,000 workers, mainly at manufacturing and distribution sites in Mexico, Canada, Austria, the United States, Finland and Australia. Its products are sold in more than 120 countries.

This report by The Canadian Press was first published Aug. 11, 2022.

BRP operations remain frozen more than two days after cyberattack

A 39-year-old Saskatchewan man accused of stabbing someone in a hospital is facing an elevated charge of second-degree murder. Police were called to

Two men have been charged with murder after a fatal stabbing in Saskatoon.

Twee mannen zijn aangeklaagd voor moord na een dodelijke steekpartij in Saskatoon.

Police were called to Saskatoon’s Royal University Hospital in June after a 55-year-old man was stabbed. The suspect was initially charged with attempted murder, but police say the charge was upgraded after the man recently succumbed to his injuries in hospital. Police did not identify the two men in the case.

De politie werd in juni opgeroepen naar het Royal University Hospital in Saskatoon nadat een 55-jarige man was neergestoken. De verdachte werd aanvankelijk poging tot moord ten laste gelegd, maar de politie zegt dat de aanklacht werd opgewaardeerd nadat de man onlangs in het ziekenhuis aan zijn verwondingen was bezweken. De politie heeft de twee mannen in de zaak niet geïdentificeerd.

A 39-year-old Saskatchewan man accused of stabbing someone in a hospital is facing an elevated charge of second-degree murder.

Police were called to Saskatoon’s Royal University Hospital in June after a 55-year-old man was stabbed.

The suspect was initially charged with attempted murder, but police say the charge was upgraded after the man recently succumbed to his injuries in hospital.

Police did not identify the two men in the case.

They say the accused is in custody and scheduled to appear in court today.

It’s the seventh homicide in Saskatoon so far this year.

This report by The Canadian Press was first published Aug. 11, 2022.

Solitaire Spark - kaartspel - Android Kaartspel

Vergelijkbare publicaties

Hoe netwerksegmentatie uw bedrijf kan beveiligen

Wie voert een SOC 2-audit uit? De rol van SOC 2 auditors | CSA

NFTS zijn cool maar gevaarlijk

Azure PostgreSQL gebruikersdatabases werden blootgesteld als gevolg van kritieke kwetsbaarheden

Verrichtingen BRP blijven meer dan twee dagen na cyberaanval bevroren

Aanklacht tegen man van steekpartij in ziekenhuis Saskatoon is verhoogd na overlijden slachtoffer

Gevonden topics

API-beveiligingsbedrijf Traceable AI strijkt $60 miljoen op in Serie B

7 Beste Metaverse Crypto Coins om te kopen in 2022

Na de Russische invasie in Oekraïne, is het tijd om je schuil te houden