Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
OpenShift Security: How to Protect Your Kubernetes Environment
Kubernetes and its enterprise-level cousin, Red Hat OpenShift, have secured their spot as the platforms of choice when it comes to managing containerized applications at a large scale. However, these complex environments require maintaining top-level security. According to a recent survey, 80% of companies faced at least one cloud security incident in the past year. As OpenShift clusters grow more complex, the potential for vulnerabilities also increases, increasing the risk of exploitation.
ASPM Best Practices for Secure Success
The days where applications were monoliths built of proprietary code, and releases were set quarterly are no more. Instead, they have been replaced by fast paced development sprints, with software created using plenty of code from open-source repositories. The growing complexities of software development and the associated risks have far exceeded the abilities of traditional application security.
Outpost 24: Agile Web Application Security in 2024
Tom has some fascinating findings to share including some oldie-but-goodies you shouldn't overlook. Plus, we'll take answer your questions live in an "ask the pen tester" format.
1Password: Keep sensitive data secure and improve cross-team productivity - a fireside chat with Pathify
Every business shares secrets. Whether it's internal or external, there's always sensitive information exchanging hands. And in the rush to collaborate and get work done quickly, insecure sharing can sometimes become the default option. This was the case for Pathify - a remote-first company that creates customizable dashboards for higher education institutions. Pathify was growing fast. That was great for business, but it came with the challenge of sharing information both quickly and securely. With 1Password, securing their company came with the added benefit of boosting productivity.
State of IT 2024
2023 was a year of wild transformation, most notably with huge advances in the availability of AI technologies, persistent security threats, and economic uneasiness. But how will this affect IT professionals in the field in 2024? In this edition of the biannual SME IT Trends Report, JumpCloud surveyed 1200+ IT professionals across the U.S., U.K., and India for insights on how the industry is faring, how others working in IT are preparing for 2024, and quantitative data on IT budgets, OS usage, AI adoption, and more.
How to Modernize Your AD Instance
Whether you want to extend your Active Directory instance to support additional capabilities, need to prepare for an eventual migration without replacing your current implementation, or are ready to move away from AD completely, we've built a roadmap for you. Find your path to modernizing Active Directory by following along with the journeys of Tyrone, Kate, and Eric, fictional IT professionals navigating three different real-world situations where AD needs an update. Grab your copy for detailed insights on the different ways you can prepare your organization to modernize AD.
The Value of Continuous Threat Exposure Management in Securing the Evolving Attack Surface
In cybersecurity, current approaches don’t stay current for long. Organizations that fail to adapt accordingly often discover this fact at the cost of their secure network. This is particularly true in the face of complex and increasingly unpatchable attack surfaces and a corresponding reduction in the impact of automated remediation practices. Traditional security approaches are unable to fully address these challenges.
LESLIELOADER - Undocumented Loader Observed
Kroll observed the use of SPARKRAT in conjunction with a previously undocumented loader written in Golang. The loader assists in the initial infection and deployment of the malicious payload, enabling SPARKRAT to execute on a system. This process allows the payload to reach the target system undetected and unquarantined. The loader achieves its goal by decoding and decrypting a secondary payload binary, then injecting it into a notepad.exe instance.
ISO 27001 Audit Explained: Requirements, Key Steps, and Best Practices
Complying with International Organization for Standardization/International Electrotechnical Commission 27001 (ISO/IEC 27001) is crucial for ensuring robust cybersecurity practices within your organization and safeguarding your crucial assets.
PCI DSS Requirement 11 - Changes from v3.2.1 to v4.0 Explained
In the ever-evolving landscape of cybersecurity, staying updated with the latest standards and protocols is crucial. One such standard that has undergone significant changes is the Payment Card Industry Data Security Standard (PCI DSS) Requirement 11. This requirement, focused on the regular testing of security systems and networks, has seen notable updates in its transition from version 3.2.1 to version 4.0.