cyberark

Securing Remote Access: Best Practices for Third-Party Risk Management

Nov 27, 2024 By Ryne Laster In CyberArk
The physical location of users has become less and less important in conducting business, with the drawback that it creates new, persistent threats to organizations. You know that. You may not know that remote access to IT and business-critical systems is not a new concept. It’s been around since the late 1980s.
Read Post
stripe olt

From Discounts to Data Breaches

Nov 27, 2024 By Stripe OLT In Stripe OLT
‘Black Friday’ is an event every savvy shopper eagerly awaits as the holiday season approaches. However, it’s no longer just a single day of deals. Black Friday has evolved into a weeks-long sales event, and in some cases, it spans the entire month of November. While this extended shopping period offers consumers more time and flexibility to grab bargains, it also significantly increases opportunities for cybercriminals to exploit unsuspecting shoppers.
Read Post
Trustwave

CVE-2024-11477: 7-Zip Flaw Allows Remote Code Execution

Nov 27, 2024 By Pauline Bolaños In Trustwave
On November 20th, 2024, Zero Day Initiative (ZDI) researchers disclosed a critical flaw in 7-Zip. This widely used open-source file archiving software enables remote actors to perform remote code execution (RCE) on vulnerable 7-Zip versions. This vulnerability was originally discovered earlier this year and was reported to 7-Zip in June 2024.
Read Post
tripwire

What We Know About The SEC's New Cyber Disclosure Rule

Nov 27, 2024 By Jeff Moline In Tripwire
As cyber threats escalate in frequency and severity, IT and security teams face increased pressure to maintain transparency. With this in mind, the US Securities and Exchange Commission’s (SEC) Cyber Disclosure Rule, released on 26 July 2023, mandates timely and detailed public disclosures about cyber incidents.
Read Post
ionix

From Assessment to Implementation: Attack Surface Reduction Guide

Nov 27, 2024 By Amit Sheps In IONIX
An attack surface is the sum total of all the various ways that a cyber threat actor could attack an organization. This includes everything from software vulnerabilities, like SQL injection, to lost and stolen devices to social engineering attacks against the organization’s employees or third-party partners. An organization’s overall attack surface can further be divided into its external and internal attack surfaces.
Read Post

[Podcast] ChattinCyber's Unmasking Cyber Threats: The Rise of Spoofing + Phishing with Gideon Hazam

Nov 27, 2024 By Memcyco In Memcyco
Marc Schein is chattin’ with Memcyco's Gideon Hazam in ChattinCyber's latest episode. The conversation provides valuable insights into the challenges posed by spoofing and phishing attacks, the connection between the two, and the need for robust authentication measures to protect against these threats. The discussion highlights the importance of detecting attacks quickly, identifying at-risk users, and implementing effective protection measures to safeguard organizations and their customers.
View Video
Subscribe to Security

Copyright © 2026 OpsMatters™. All rights reserved.