TPRM Strategies for India's Digital Personal Data Protection Act

India established a framework for protecting and processing personal data called the Digital Personal Data Protection Bill. After passing both houses of Parliament, this bill evolved into the Digital Personal Data Protection Act (DPDP) in 2023. This act creates a robust and comprehensive framework to protect sensitive information while supporting India's economic growth and digital transformation.

Critical Authentication Bypass Vulnerability in ScreenConnect (CVE-2024-1709)

ConnectWise urges organizations using an on-premises installation of the ScreenConnect remote monitoring and management software (formerly known as ConnectWise Control) to update servers to version 23.9.8 immediately due to a critical remote code execution vulnerability. The ScreenConnect remote desktop product is at risk due to a pair of vulnerabilities: CVE-2024-1709 and CVE-2024-1708.

Harden Cipher Suites for Robust TLS/SSL Encryption

Cipher suites are a set of cryptographic algorithms utilized by the schannel SSP implementation of TLS/SSL protocols. These algorithms are employed to generate keys and encrypt data. Each cipher suite designates specific algorithms for the following functions: In TLS 1.2 and TLS 1.3, the NSA suggests using cryptographic settings that meet the standards in CNSSP 15, known as Commercial National Security Algorithms.

Beat the Clock: Meet the 5/5/5 Detection and Response Benchmark With Sysdig and Tines

10 minutes to pain. When it comes to cloud security, 10 minutes or less is what bad actors need to execute an attack. Does it mean your business could be at risk if you fail to detect and respond to an attack in less than 10 minutes? Absolutely yes. With more and more sophisticated security attacks actively occurring nowadays, security teams need to hold themselves to a modernized benchmark.

Unraveling the Third-Party Supplier Web: Managing Generational Complexity || Razorthorn Security

In this video, we dive into the intricate layers of third-party supplier networks, transcending the immediate concerns of dealing with organizations to confront the complexities of second, third, and even fourth generations of suppliers. Join us as we navigate through the evolving landscape of supplier relationships and explore strategies for managing the labyrinthine "mishmash" of third-party involvement.

Beginners' Guide for Microsoft Hyper-V: How to Troubleshoot Hyper-V VM with No IP address - Part 60

Hyper-V has powerful networking capabilities, allowing virtual machines to communicate with virtual and physical networks. While Hyper-V networking is reliable and contains many features, admins may encounter issues with virtual machines, such as a missing IP address. Let’s look at Hyper-V VM with no IP address for beginners and see how we can troubleshoot it.

Detecting anomalous O365 logins and evasion techniques

Businesses across multiple industries, regardless of size, are at risk of being targeted with Microsoft 365 phishing campaigns. These campaigns trick users into visiting fake Microsoft login page where threat actors capture the user’s credentials. Even accounts with MFA can be victim to these types of attacks. There are several ways in which MFA is being bypassed with these types of campaigns.

Azure Storage Actions - Creating a Storage Task

Azure Storage Actions is a serverless framework that you can use to perform common data operations on millions of objects across multiple storage accounts. Currently, Azure Storage Action service is available in the preview stage in Azure portal. The preview release of Azure Storage Actions represents a significant advancement in cloud storage management and automation within Microsoft’s Azure platform.