Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Reading, understanding, and tracking alerts and log sources within the context of the MITRE ATT&CK framework is now possible in Devo with the MITRE ATT&CK Adviser application.

This week on the podcast we cover a supply chain attack of sorts against Minecraft gamers. After that, we cover a vulnerability in MOVEit Transfer that threat actors are exploiting in the wild to steal data and deploy ransomware. Finally, we wne with our review of the latest Verizon Data Breach Investigations Report (DBIR).

Root cause analysis plays an important role in web applications, IT operations, security, and industrial OT. This video series explains general approaches to root cause analysis and how Elastic accelerates the process with visualizations and dashboards, machine learning to detect anomalies and classify conditions, and interactive tools that empower analysts to drill into additional information that lead to root cause of potential system issues and security incidents.

In this video a panel of experts discuss how to create an effective secrets management program and what are the challenges large organisations face when trying to combat security issues like secrets sprawl. The discussion is with between: Mackenzie Jackson from GitGuardian James Governor, Co-founder & Analyst at RedMonk Andrei Predoiu, DevOps Engineer at Bestseller Mike Carey, Senior Product Manager at 1Password.

Explore the core principles behind these baselines, including risk management, threat identification, and control selection. Gain insights into the latest updates and revisions, ensuring you stay up-to-date with the best practices and industry standards.

Join us as we dive into the intense race for AI dominance and the complex dynamics at play. Without global consensus, some regions have already taken a stance on AI development, while others struggle to catch up. The issue with Europe lies in the lack of cohesive action, allowing others to gain a competitive edge. While the UK government's efforts are commendable, this is a moonshot project that requires collaboration and extensive data.

Explore the tech industry's pivotal role in driving growth in the field of information security (infosec). With numerous new projects on the horizon, including the remarkable advancements in AI, the landscape is evolving rapidly. AI, which once seemed distant, is now gaining traction with substantial investments pouring in. Governments, like the UK, are legislating grants and support for AI development, recognizing its potential alongside clean energy solutions.

KeeperPAM was created to fully protect perimeterless and multi-cloud environments with just the features you need. Keeper's patented PAM solution enables organizations to achieve complete visibility, security, control and reporting across every privileged user on every device in your organization. The platform enables zero-trust and zero-knowledge security and compliance by unifying three integral products into one SaaS platform with limited IT staff required.

Learn about Snyk's three key sources of security intelligence: Snyk Vulnerability Database, the Snyk Code knowledge base, and the Snyk IaC unified policy engine.