outpost 24

What security lessons can you learn from your attack surface score?

Sep 6, 2024 By Marcus White In Outpost 24
Increasing digitalization and connectivity mean the attack surfaces of most organizations are growing. This means more IT assets to track and manage, plus more potential attack routes for threat actors to target. The threat situation is constantly increasing, especially in the area of vulnerabilities – last year over 30,000 new vulnerabilities were published. So how can you get an accurate view of your attack surface and where it might be open to exploitation?
Read Post
fireblocks

Anatomy of a Centralized Exchanges Attack

Sep 6, 2024 By Fireblocks In Fireblocks
Recently, there have been a number of attacks on high-profile centralized exchanges (CEXs) in the digital asset space. We feel it is critical to highlight some of the most common attack vectors in this area so that, in the future, CEXs can adequately protect themselves, their institutional trading partners, and their retail customers.
Read Post
SecurityScorecard

CISA's Secure By Design: A Year Later

Sep 6, 2024 By SecurityScorecard In SecurityScorecard
In April this year, the CISA Secure By Design initiative turned one. The initiative calls for the public and private sectors to work together to challenge and encourage software manufacturing companies to adopt principles to ensure their software is developed and produced as securely as possible. The initiative tracks seven goals that software manufacturers can pledge to develop and transparently track progress towards those goals.
Read Post
kroll

Secret Leaks: The Predominant Issue in Software Supply Chain Security

Sep 6, 2024 By Kroll In Kroll
In today's rapidly evolving digital landscape, software supply chain security has emerged as a critical concern for organizations worldwide. Among the countless security threats, ‘secret leaks’ stand out as a predominant issue, posing significant risks to the integrity and confidentiality of software systems. This blog post delves into the intricacies of secret leaks, exploring why they are a pervasive problem and what steps can be taken to mitigate this threat.
Read Post

Manage Open Source Dependency Licenses Easier With GitGuardian SCA

Sep 6, 2024 By GitGuardian In GitGuardian
Get better insight into your third-party licenses and easily stay on top of any changes with GitGuardian Software Composition Analysis (SCA), you can now get a thorough view of all the licenses used by your applications' dependencies from a single view. In your dashboard under the SCA Dependencies view you can easily filter by each particular license used by the components in your applications. Easily check for any unexpected entries from the convenience of the GitGuardian workspace.
View Video
Arctic Wolf

Understanding the Schools and Libraries Cybersecurity Pilot Program

Sep 6, 2024 By Arctic Wolf In Arctic Wolf
Schools and libraries often lack the funding and staffing needed to build and maintain a robust cybersecurity program. They are also the exact kind of organizations threat actors prefer— under defended and a storehouse of personally identifiable information (PII). Considering that, in 2024, education was the second-most represented industry in ransomware attacks, and third-most in business email compromise (BEC) attacks, it’s clear that protection is paramount.
Read Post
Arctic Wolf

Critical Vulnerabilities Patched in Veeam Products

Sep 6, 2024 By Andres Ramos In Arctic Wolf
On September 4, 2024, Veeam released a security bulletin announcing that they have fixed several vulnerabilities affecting various Veeam products. Arctic Wolf has highlighted five of these vulnerabilities, which are classified as critical. Arctic Wolf has not observed any exploitation of these vulnerabilities in the wild and has not identified any publicly available proof of concept (PoC) exploit code.
Read Post
Subscribe to Security

Copyright © 2026 OpsMatters™. All rights reserved.