Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

kroll

Automated Penetration Testing: An Overview

Jun 20, 2024 By Kroll In Kroll
Automated penetration testing, or automated pen testing, is a type of security assessment that uses specialist tools to uncover vulnerabilities. Although it can serve as part of a cohesive security strategy, it also presents some challenges. In this article, we outline the pros and cons of automated pen testing and compare it with manual pen testing.
Read Post
Trustwave

Fare Thee Well ModSecurity: End-of-Life and Last Commercial Rules Update for June 2024

Jun 20, 2024 By Trustwave In Trustwave
In June 2010, Trustwave acquired Breach Security, which brought with it the popular Open-Source Web Application Firewall ModSecurity for Apache. At that time, Trustwave relicensed the code under the Apache license. This relicensing allowed more public participation in the project, and 2012 saw the release of an IIS port from Microsoft and a port for Nginx.
Read Post
CrowdStrike

Unlock Advanced Security Automation for Next-Gen SIEM

Jun 20, 2024 By Paola Miranda In CrowdStrike
According to the CrowdStrike 2024 Global Threat Report, the fastest recorded eCrime breakout time was just 2 minutes and 7 seconds in 2023. This underscores the need to equip security analysts with modern tools that level the playing field and enable them to work more efficiently and effectively.
Read Post
archTIS

Why Artificial Intelligence (AI) Is Neither

Jun 20, 2024 By Doug Boyd In archTIS
Artificial Intelligence (AI) is the buzzword du jour of not just tech, but the entire online world. We see it in the daily headlines of everything from industry stalwarts such as Wired (There’s an AI Candidate Running for Parliament in the UK) through the stiff-collared set at the Wall Street Journal (What the Apple-OpenAI Deal Means for Four Tech Titans). Everyone who is anyone is talking about it, training it, or trying leverage against it.
Read Post
graylog

Destructive Malware: Threat Detection and Incident Response

Jun 20, 2024 By The Graylog Team In Graylog
Imagine that you have a snack you want to eat while watching a movie on a Friday night. You look in your kitchen, only to find the snack missing. Whether a roommate hid the snack or ate it, you no longer have access to it, disrupting your evening plans. This destructive behavior interrupts your weekend objectives, but it’s pretty low stakes overall.
Read Post
mend

Hallucinated Packages, Malicious AI Models, and Insecure AI-Generated Code

Jun 20, 2024 By AJ Starita In Mend
AI promises many advantages when it comes to application development. But it’s also giving threat actors plenty of advantages, too. It’s always important to remember that AI models can produce a lot of garbage that is really convincing—and so can attackers. “Dark” AI models can be used to purposely write malicious code, but in this blog, we’ll discuss three other distinct ways using AI models can lead to attacks.
Read Post
securitysenses

Advocating for Car Accident Victims with Compassion and Expertise

Jun 20, 2024 By SecuritySenses In SecuritySenses
Accidents involving cars are capable of causing injuries to the body and mind as well as financial issues. Unfortunately, these can permanently change a person's life. If you ever find yourself dealing with the consequences of an accident, consider yourself lucky if you have the backing of a law firm like Burger Law located in St. Louis. It could make a world of difference. By showing care and professionalism when supporting those affected by car accidents.
Read Post
Featured Post
ThreatQuotient

Why Manufacturers are in the Crosshairs of Threat Actors

Jun 19, 2024 By Chris Jacob, Vice President, Threat Intelligence Engineering In ThreatQuotient
In today's modern digitised environment, the manufacturing industry faces multiple interwoven challenges that can have a serious impact on their overall performance and sustainability. These challenges include supply chain disruptions, with events such as natural disasters, geopolitical issues, and pandemics disrupting the global supply chain, affecting the timely delivery of raw materials and components. These disruptions put pressure on manufacturing organisations to better plan for potential supply chain uncertainty, while responding quickly to changes in customer demand, and also trying to keep costs low.
Read Post
CalCom

The Complete System Hardening Guide

Jun 19, 2024 By Keren Pollack In CalCom
System hardening involves identifying and addressing security vulnerabilities across hardware, firmware, software, applications, passwords, and processes. Compatibility allows most applications to work smoothly, but securing a system requires additional steps known as system hardening best practices, which are crucial for protection against advanced threats. Microsoft emphasizes server security and provides comprehensive hardening techniques and best practices tailored to various platforms.
Read Post
vista infosec

Data Disaster: Los Angeles Public Health Department Suffers Biggest Data Breach

Jun 19, 2024 By Narendra Sahoo In VISTA InfoSec
On June 17, 2024, the Los Angeles County Department of Public Health (DPH) disclosed a data breach impacting more than 200,000 clients, employees, and other individuals. The stolen data includes personal, medical and financial information. The DPH said the incident took place between February 19-20, 2024, was caused by a gang of cyber criminals who gained access to the log-in credentials of email accounts of 53 employees through a phishing email.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.