Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Outpost 24

Fix now: High risk vulnerabilities at large, July 2020 part 3

In the world of CVEs, we have seen a few interesting ones released in the last couple of weeks since our last risk based vulnerability management blog, including the recent big news SIGRed. Read on for more information on how to prioritize these vulnerabilities for patching to mitigate risk.

Attack surface analysis explained: The 7 deadly vectors for web application attacks

Modern web applications are complex, it is often made up of many layers where potential flaws could appear making it hard to secure. That’s why it’s important to understand the key attack vectors hackers use to spot entry points and map your attack surface during reconnaissance and work back from there to protect your web application footprint.

Fix now: High risk vulnerabilities at large, July 2020 part 2

In the world of CVEs, we have seen a few interesting ones released in the last couple of weeks since our last risk based vulnerability management blog, including the recent big news items affecting F5 BIGIP and Pan-OS. Read on for more information on how to prioritize these vulnerabilities for patching to mitigate risk.

How Outpost24 Secures the SDLC

At Outpost24, we’re committed to providing information security testing solutions to not only fit seamlessly into the SDLC, but also to enhance our customers’ experiences in implementing and maintaining their best practices to ensure their SDLC leads to a strong security posture and comprehensive resiliency around their full stack.

Fix now: High risk vulnerabilities at large, July 2020

In the world of vulnerabilities, we have seen a few interesting ones released in the last couple of weeks since our last Farsight risk-based vulnerability management blog in June, including some recently discovered by Palo Alto affecting D-Link Routers. Read on for more information on how to prioritize these vulnerabilities for patching to mitigate risk.

What are Security Misconfigurations and how to prevent them?

Misconfigurations are often seen as an easy target, as it can be easy to detect on misconfigured web servers, cloud and applications and then becomes exploitable, causing significant harm and leading to catastrophic data leakage issues for enterprises like the 2019 Teletext exposure of 530,000 data files which was caused by an insecurely configured Amazon Web Service (AWS) web server.

Outpost24 webinar: Improve Your Organization's Security With Red Teaming

Security assessments can be performed in many ways, depending on your organization’s maturity level and goals. Whilst vulnerability scanning can help to identify security flaws on a broader scope and penetration testing can conclude the risk level of vulnerabilities discovered, if you need to understand the full picture of your organization’s security awareness and readiness, a scenario-based Red Teaming Assessment (RTA) is the best way to assess the effectiveness of your defence mechanism from a hacker’s view.

Outpost24 webinar - Why security perfection is the enemy of DevSecOps

triving for total security is like searching for the holy grail: the chase is real, but mostly in vain. By spending too much time discovering vulnerabilities and fixing issues, it often leads to the dire consequences of missing delivery deadlines, crippling the development team’s ability to move forward and capture market opportunity.