Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
DDoS Attacks: What You Need To Know
In the intricate web of digital security threats, one particularly disruptive technique stands out: the Distributed Denial of Service (DDoS) attack. This form of cyber assault involves numerous compromised systems, often referred to as bots or zombies, which are used to overwhelm a target website with an avalanche of requests. The result? Legitimate users find themselves unable to access the site, leading to significant operational disruptions.
Another Year of RATs and Trojan Stealer: Detection Commonalities and Summary
In 2023, Remote Access Trojans (RATs) and Trojan Stealers were some of the most prevalent types of malware in the cybersecurity landscape. RATs and Trojan Stealer malware represent significant cybersecurity threats, as they’re often employed to conduct espionage, surveillance, and data theft, which emphasizes the critical need for robust defenses.
Tutorial: Get Started with WatchGuard Licensing
In this WatchGuard Support video, you'll learn how to activate and renew WatchGuard licenses. To learn more about WatchGuard products, go to.
Trustwave SpiderLabs Uncovers Ov3r_Stealer Malware Spread via Phishing and Facebook Advertising
During an Advanced Continual Threat Hunt (ACTH) investigation that took place in early December 2023, Trustwave SpiderLabs discovered Ov3r_Stealer, an infostealer distributed using Facebook advertising and phishing emails. SpiderLabs’ “Facebook Advertising Spreads Novel Malware Variant,” is an in-depth dive into Ov3r_Stealer, exposing what the Threat Hunt team learned about the threat actors, their techniques, tactics, and procedures and how the malware functions.
Balancing Data Privacy, Regulations and Revenue in Telecom
The need to find the balance between providing a unique and tailored customer experience, ensuring data privacy, and adhering to market regulations has become more critical than ever for Communications Service Providers (CSPs). In a world where customers are more demanding, regulations are more stringent, and attacks are more sophisticated, it’s easy to see how telecom organisations deem balancing act challenging.
5 Card Skimming Methods Every Infosec Pro Needs to Know
Cybercriminals are notoriously adept at evolving their strategies and tactics to defraud individuals and businesses out of their hard-earned money. One perfect example of the evolution of effective and illusive financial fraud is card skimming. But is card skimming still a thing in 2024? Very much so. According to the FBI, card skimming fraud still costs financial institutions and American consumers more than $1 billion yearly—and it’s growing.
GitHub Backup Essentials: Download a Single File from GitHub
When it comes to data management in software development you, as a developer, should know how to efficiently download a single GitHub file. Often, devs and project managers need to download individual files for local testing, archival purposes, version comparison, or any other reason you can make up. It can seem daunting. In this article, we will guide you through various methods to download a single file from the GitHub repository, whether it’s public or private repository.
CSPM vs. CNAPP: Which Solution to Choose?
Protecting cloud-based applications and workloads requires robust security solutions such as CSPM, CIEM and CWPP. CNAPP tries to answer all 3 but how do you know which solution is right for your specific organization? Ava Chawla, AlgoSec’s Global Head of Cloud Security unravels the differences between them and shares her expert opinion on the solution that offers the most value for organizations.
Veracode: State of Software Security 2024: Addressing the Threat of Security Debt
The State of Software Security in 2024 is vastly different to that in years past, largely due to the rise in AI and its impact in software development. The explosion in AI-generated code raises concerns about security debt on a vastly different scale. While AI boosts development productivity, it doesn't inherently enhance code security. In this year's report we examine how organizations accumulate security debt over time and its implications on their security posture. We look at risk associated with open-source libraries and how you can make informed decisions about libraries you choose.
Teleport: Modernizing Access to Mitigate Security Risk and Speed Threat Response
Organizations face increasing risk of data breach, with threat actors taking aim at credentials and standing privileges. So, what can companies do to protect their infrastructure? Join Melinda Marks, Practice Director of Enterprise Strategy Group (ESG), Ev Kontsevoy (CEO), and Aleksandr Klizhentas (CTO) of Teleport to explore.