Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Everything You Need to Know About Card-Not-Present Fraud
Credit and debit cards are vital for online purchases in today’s digital environments, but that doesn’t mean they’re safe from misuse. In 2024, an estimated $10.6 billion was lost due to card-not-present fraud, which accounts for some of the most prevalent scams globally. Card-not-present fraud, or ‘CNP’ fraud, negatively impacts consumers and businesses, causing financial losses and reputational damages.
Cyber Resilience Strategy: How to Build a Strong Framework
Your team is racing against the clock to meet an important deadline. Cybercriminals, however, wait behind the scenes for the right opportunity to attack. It takes a single, well-timed attack to completely disrupt your operations, exposing important data and ruining your brand. With global cybercrime damages projected to hit $10.5 trillion annually by 2025, you must prepare for the worst-case scenario. It’s not enough to just put up walls anymore.
Get the TL;DR: tj-actions/changed-files Supply Chain Attack
The tj-actions/changed-files GitHub Action, which is currently used in over 23,000 repositories, has been compromised, leaking secrets through workflow logs and impacting thousands of CI pipelines. All tagged versions were modified, making tag-based pinning unsafe. Public repositories are at the highest risk, but private repos should also verify their exposure.
Seal Security
Seal Security provides standalone security patches that are fully compatible with existing versions of open source packages, ensuring seamless and predictable fixes for vulnerabilities in both application code and Linux operating systems.
Detecting and Mitigating the "tj-actions/changed-files" Supply Chain Attack (CVE-2025-30066)
On March 14, 2025, StepSecurity uncovered a compromise in the popular GitHub Action tj-actions/changed-files. Tens of thousands of repositories use this action to track file changes, and it is now known to have been tampered with, posing a risk to both public and private projects. A CVE has been created for this issue: CVE-2025-30066.
NAKIVO: Proxmox VE Data Protection & Cybersecurity: Best Practices in Action with NAKIVO
Accidental deletions, data breaches, system failures, disasters-and worst of all, cyberattacks; how fast-or even if-you can recover from this depends on your backups. Do you think Proxmox VE native backup is enough? The reality is, it's not. Register for this live webinar to explore the main loss threats to Proxmox VE and why native tools fall short of fully protecting against data loss. Follow our experts as they walk you through best practices and measures to protect Proxmox VE data with NAKIVO Backup & Replication.
Real-time ATO prevention with Israel Mazin , a Fintrepreneur Podcast Episode.
First appearing on RedCircle, season 4 of Fintrepreneur Podcast kicks off with Memcyco's CEO, Israel Mazin, discussing the important topic of real-time ATO prevention.
Q&A with TGS President Bill Rucker on Trustwave's FedRAMP Authorization
Trustwave's recent completion of the FedRAMP authorization process increases our ability to provide exceptional service to the federal government, the defense industrial base, and those with Cybersecurity Maturity Model Certification (CMMC) requirements, especially with a cloud service offering. Working with the federal government is hardly new for Trustwave.
The Future of Threat Intelligence: Trends, Tools, and Tactics To Watch
In today’s evolving cyber landscape, threat intelligence has become a cornerstone of effective cybersecurity strategies. As cyber threats grow in sophistication and frequency, understanding emerging trends, adopting advanced tools, and implementing proactive tactics are essential for organisations aiming to safeguard their digital assets. Traditionally, threat intelligence has focused on reactive measures, analysing known threats to mitigate potential damage.
Using Document Comparison
Track changes, ensure accuracy, and maintain consistency across document versions or different files using document comparison in Egnyte’s PDF File Handler.