Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Top Security Threats Worldwide Q2 2024
Join WatchGuard CSO Corey Nachreiner and Director of Security Operations Marc Laliberte as they discuss key findings from the WatchGuard Threat Lab’s Q2 2024 Internet Security Report. You’ll learn about the latest malware trends, like malware volume dropping across all products but evasive “zero day” malware increasing. They’ll cover the top network exploits, like a 2019 Nginx vulnerability that threat actors targeted during the quarter. And they will share the most dangerous phishing and malware sites your users visited, and much more.
Optimizing Kubernetes DNS with NodeLocal DNSCache and Calico eBPF: A Practitioner's Guide
In the world of Kubernetes, optimizing cluster performance and reliability is paramount, especially when it comes to fundamental operations like DNS lookups. NodeLocal DNSCache is one such solution that helps reduce DNS latency by caching responses locally on each node. While this tool is effective in standard Kubernetes setups, complications arise when integrating it with advanced networking solutions such as eBPF-based dataplanes.
ContFRaversy in Ransomland: Tor-based site emerges for new French-speaking RaaS operation "ContFR"
Following the emergence of data-leak sites (DLSs) for extortion groups Kairos, Chort, and Termite, Cyjax has observed the emergence of a Tor-based site belonging to a new French-speaking Ransomware-as-a-Service (RaaS) operation called ’ContFR’. ContFR is potentially referencing well-known ransomware group Conti, whilst incorporating a reference to France.
How to Identify Best Local Cyber Security Company
Did you know that Check Point reported a staggering 38% increase in cyber threats in 2022? This rise in threats makes strong cybersecurity more urgent than ever. Finding a reliable local cyber security company is crucial. Companies like SynchroNet offer more than just security; they understand local needs and respond quickly to emergencies.
Netskope: Transform Your Firewall and Proxy Gateway with Security Service Edge (SSE)
The roles of firewalls and proxy gateways are rapidly evolving with Security Service Edge (SSE) transformations. Traditional firewalls, once focused on perimeter security, are now part of SSE cloud platforms as Firewall-as-a-Service (FWaaS), while VPNs are being replaced by Zero Trust Network Access (ZTNA). Web proxy gateways, previously focused on URL filtering, now decode SaaS applications, applying adaptive access based on content and context.
Seemplicity Selected for Microsoft for Startups Pegasus Program
Company's best-in-class remediations operations platform now available with Microsoft ecosystem.
Vanta Delivers: New Products to Move Compliance Beyond the Standard
Announcing Vanta for Marketplaces, AI-powered chat for Trust Centers and developer-first remediation. Product announcements and demos to be livestreamed at VantaCon 2024 at 9:30am PT / 12:30pm ET.
Netskope One Advanced SSE for Microsoft Entra
Netskope One Advanced SSE for Microsoft Entra combines Netskope and Microsoft into a unified experience that enables the next generation of SSE. The combination of Netskope and Microsoft delivers flexibility with security to make secure access and advanced protection simple and accessible for Microsoft Entra customers.
Emerging Threat: Palo Alto PAN-OS CVE-2024-0012 & CVE-2024-9474
On November 18, 2024, Palo Alto Networks (PAN) fully disclosed two serious vulnerabilities in PAN-OS software that had previously been partially disclosed on November 8th. The first vulnerability, CVE-2024-0012, is a critical severity (9.3) authentication bypass in the PAN-OS management web interface. It allows unauthenticated attackers with network access to gain administrator privileges by bypassing the authentication check entirely, essentially telling the server not to check for authentication at all.
Vanta unveils new product innovations to move compliance beyond the standard
These days, the bar for proving trust keeps getting higher. A SOC 2 report used to signal the end of security reviews—now, it marks the beginning. Security and GRC teams are tasked with monitoring and remediating a growing web of controls, vendors, questionnaires, and risks, which is made even more complex by discerning buyers.