Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

OAuth security gaps at Grammarly (now remediated)

Oct 24, 2023 By Salt Security In Salt Security
This short video explains how Salt Labs researchers identified several critical security flaws on the popular site - Grammarly. The flaws were found in the site's authentication functionality and could have allowed a malicious attacker to take over user accounts, access profile information, and take actions on behalf of the user. All issues were reported to Grammarly and have been resolved with no evidence of these flaws being actively exploited in the wild. In the research, they also found similar vulnerabilities in Vidio.com and Bukalapak.com.
View Video
trustcloud

The Role of AI in Your Governance, Risk and Compliance Program

Oct 24, 2023 By Frank Kyazze In TrustCloud

In today’s rapidly evolving business landscape, organizations face an ever-increasing array of risks and compliance challenges. As businesses strive to adapt to the digital age, it has become imperative to enhance their Governance, Risk Management, and compliance (GRC) strategies. Fortunately, the fusion of artificial intelligence (AI) and GRC practices presents a transformative opportunity.

Read Post

Falcon Exposure Management Active Asset Scanning: Demo Drill Down

Oct 24, 2023 By CrowdStrike In CrowdStrike
Organizations often grapple with hidden network vulnerabilities akin to navigating an unseen, complex labyrinth. Falcon Exposure Management alleviates this challenge, transforming obscured vulnerabilities into visible, managed, and secured assets through its Active Asset Discovery feature. It employs customizable, non-intrusive scans, ensuring that every asset is mapped without disrupting operations. In this demo, experience the revelation of every network corner, unveiling a fortified defense ready to counter cyber attacks.
View Video

Falcon Cloud Security Kubernetes Admission Controller: Demo Drill Down

Oct 24, 2023 By CrowdStrike In CrowdStrike
Misconfigured containers with root access are commonly deployed in cloud environments, leaving organizations vulnerable to adversaries. See how Falcon Cloud Security Kubernetes Admission Controller provides out of the box policies to prevent misconfigured containers from deploying, ensuring cloud environments are secured and compliant.
View Video
salt security

Oh-Auth - Abusing OAuth to take over millions of accounts

Oct 24, 2023 By Aviad Carmel In Salt Security
OAuth (Open Authorization) is one of the fastest adopted technologies in the AppSec domain. From its first introduction in 2006, as an attempt to introduce a standard authorization protocol, it has become one of the most popular protocols for both user authorization and authentication, and it’s being used by almost every major web service and website today. One of the reasons for its huge popularity is its ease of implementation.
Read Post
tripwire

The growth of APIs attracts Cybercrime: How to prepare against cyber attacks

Oct 24, 2023 By Josh Breaker-Rolfe In Tripwire

Application Programming Interfaces (APIs) have profoundly transformed the internet's fabric. In the pre-API era, digital interactions were limited by siloed systems functioning in isolation. APIs dismantled these barriers by introducing a universal language that diverse applications could comprehend. This linguistic bridge facilitated an unprecedented level of interconnectivity between software entities.

Read Post
netskope

Accelerate Cloud Transformation with Netskope Borderless SD-WAN and AWS Cloud WAN

Oct 24, 2023 By Parag Thakore In Netskope

Navigating complex cloud networks with multiple clouds while ensuring secure and reliable access to workloads can be daunting. That’s why Netskope and AWS have teamed up to simplify this journey and make it a lot easier. Through the integration of Netskope Borderless SD-WAN with AWS Cloud WAN, teams can automate workload access from any remote site and user laptop, deliver a secure, reliable, flexible, and highly available middle-mile network service leveraging the AWS global network.

Read Post
UTMStack

Build a 24/7 Security Operations Center (SOC) with Free and Open Source Technologies

Oct 23, 2023 By cesmng In UTMStack

Welcome to our comprehensive guide on building a 24/7 Security Operations Center (SOC) using free and open-source technologies. In the digital age, protecting your organization’s information assets has never been more important. Cyber threats are constantly evolving, and organizations of all sizes and industries are vulnerable to attacks.

Read Post

Copyright © 2026 OpsMatters™. All rights reserved.