Dig Security

21/03/2024

Please visit Palo Alto Networks for the most updated information. See you there!

16/02/2024

They say every cloud has a silver lining, but there are also darker sides to cloud-based data engines. ⚠️

The cloud offers scalability, affordability, and rapid data transfer. But it also opens up new attack paths for bad actors. ⚔️

In one of our most popular webinars, our security research team discussed the latest developments surrounding database attacks in the cloud and what you can do about them. Watch on-demand below. 👀

What’s covered:
– A closer look at AWS Redshift: Attack surface liabilities.
– Advanced lateral movement and PE techniques.
– A case study on a critical CloudSQL (GCP) vulnerability recently discovered by Dig.

Watch the full video: https://www.dig.security/post/webinar-dark-sides-of-cloud-based-data-engines

Dig researchers discussed CloudSQL vulnerabilities and advanced database attacks in the cloud. Click here for the full webinar!

15/02/2024

Are you using Custom GPTs yet?

Someone in your organization probably is!

And that means exciting new possibilities for threat actors to extract sensitive data or alter model behavior – via uploaded files or interactions with external APIs.

Our research team went down the Custom GPT rabbithole to find out:

→ Which contextual information can we get out of them?

→ Which weird behaviors can we elicit through prompt injection?

→ Can we convince a chatbot to answer every question with a weather joke?

The results are… interesting. 😱

Read the full report here ↘

OpenAI Custom GPTs: Understand the security risks, data leakage concerns, and prompt injection vulnerabilities associated with the advanced features of ChatGPT.

14/02/2024

Context-aware data classification is key to improving your organization’s overall security posture. But with today’s complex digital infrastructures, accurate and effective data classification is easier said than done.

To enable comprehensive, tailored security policies and allow you to level up your cloud security, DSPM tools can classify your data assets in five essential categories:

1️⃣ Data types – your most basic building blocks. Email addresses, SSNs, etc.
2️⃣ Context – metadata (timestamps, format, location) and enrichment from CRM / ERP
3️⃣ Subject – the actual contents of the file in question
4️⃣ Sensitivity – the breadth and depth of the affected data
5️⃣ Labels – organizational tagging systems (such as Microsoft Information Protection)

💡 The more granular and comprehensive your data classification is, the better you can understand and mitigate risk in your cloud environment.

↘ Read our full guide to cloud data classification: https://www.dig.security/post/context-aware-data-classification-for-data-security-posture

13/02/2024

Over 80% of organizations are affected by data breaches due to digital transformation.

Traditional, agent-based data leakage prevention ( ) solutions are only designed to protect on-premise data. The need for a cloud-native, data-centric security solution that adapts DLP principles to today’s complex cloud environments is clearer than ever.

Our comprehensive solution combines data security posture management ( ), real-time data detection and response ( ), and DLP capabilities, providing you with unmatched visibility and control over your cloud data.

Learn more about our agentless, cloud-native DLP solution to prevent data leakage across myriad services: https://www.dig.security/cloud-data-loss-prevention

12/02/2024

You can't protect what you can't see. 🔎

Find and contextualize sensitive data across clouds, data stores, and applications to gain full visibility and control over your security posture with Dig.

✅ Eliminate data blind spots and shadow data
✅ Improve your data risk assessments
✅ Find compliance violations early

Learn more about data discovery and classification with Dig here: https://www.dig.security/products/data-discovery-and-classification

09/02/2024

On-premise DLP solutions were once the go-to for most industries. However, cloud adoption and digital transformation have forced industry experts to reassess, as cyber security teams struggle to deal with an increased volume of data stored in disparate locations. ☁️

Smart companies are regaining control by embracing agentless DLP solutions tailored to address the unique challenges of the public cloud.

What does a cloud DLP solution look like? Check for five capabilities:

✅Agentless data discovery capable of handling fractured data stack and shadow data.
✅Streamlined data classification and inventory processes.
✅Posture and static risk analysis, refocusing attention where it is needed.
✅Critical incident response in real-time with agentless dynamic monitoring.
✅Unified threat models that constantly update for optimized cover.

→ Learn more about the benefits of cloud-native DLP solutions: https://www.dig.security/post/5-essential-components-of-a-cloud-dlp-solution

As DLP for on-premises is not a good fit for modern public clouds, we present an alternative framework for designing cloud DLP, based on five core components.

06/02/2024

With all the benefits of moving data to the cloud, there are also new challenges and risks that can impact your business. ☁️🔓

The growing popularity of cloud infrastructure is driving "lift-and-shift" migrations, where data is moved without considering what's stored within. This creates "shadow data" - untraceable and unmonitored data that hackers can exploit.

Dig helps you gain immediate visibility into your cloud data assets as they migrate, including:

✅Finding customer shadow data in unmanaged databases
✅Discovering and classifying active and shadow data assets in AWS, Azure, GCP, and Snowflake to uncover buried sensitive information
✅Accelerating discovery with automated classifiers for major regulations
✅Defining custom classifiers to find sensitive data across managed and unmanaged assets

Learn more. Check out Dig for Cloud Data Migration ➡️ https://www.dig.security/dig-for-cloud-data-migration

31/01/2024

Robust data classification is crucial for security policies, monitoring, regulations and reducing your attack surface. ☁️

But with data spread across clouds and devices, many organizations struggle to classify effectively. Generic labels like “confidential” fail to capture context.

Common pitfalls include data fragmentation, unstructured data, shadow IT, and mergers and acquisitions.

True protection requires classifying data itself based on type, context, subject and sensitivity. This powers intelligent data security posture management ( ) solutions that discover and safeguard sensitive information automatically across your enterprise.

Learn how our leading platform helps overcome classification barriers with context-aware techniques: https://www.dig.security/post/context-aware-data-classification-for-data-security-posture

30/01/2024

Learn all about data security posture management ( ) in our “Big Guide to DSPM”.

Our guide dives deep on:

⛏️ What is DSPM?
⛏️ What industry trends necessitate DSPM?
⛏️ What are the business drivers for increasing cloud data security?
⛏️ What are the benefits of DSPM?
⛏️ How is it better than existing cloud data security tools?

Check out the guide here ➡️ https://www.dig.security/post/the-big-guide-to-data-security-posture-management-dspm

Why securing your data with DSPM matters more than ever: Uncover the power of Data Security Posture Management with Dig's comprehensive guide

29/01/2024

Why Dig? 🤔

We believe cybersecurity teams, data security teams, and privacy and compliance professionals shouldn't have to struggle to secure their data.

Our leading data security posture management ( ) platform with built-in data detection and response ( ) capabilities was purpose-built to accomplish this, enabling you to:

✅Know what data you have
✅Understand how your data is used
✅Protect your data across all your cloud data stores

-- making data security easy.

⛏️Dig deeper on why Dig, why DSPM, why DDR, and more: https://www.dig.security/why-dig