Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Analysis of CVE-2023-2868 Exploitation: Campaign Targeting U.S. Entities Using Barracuda Email Security Gateway
CVE-2023-2868, a vulnerability in the Barracuda ESG was announced on May 23. On June 15th, a report surfaced, attributing the exploitation of this vulnerability to a threat actor group tracked as UNC4841, which analysts believe is conducting espionage on behalf of the Chinese government. SecurityScorecard’s STRIKE Team consulted its datasets to identify possibly affected organizations.
Top 5 security concerns for infrastructure as code
Infrastructure as code (IaC) has changed how we deploy and manage our cloud infrastructure. Instead of having to manually configure servers and networks with a large operations team, we can now define our service architecture through code. IaC allows us to automate infrastructure deployment, scale our entire fleet of servers, document a history of changes to our architecture, and test incremental changes to the network.
Tutorial: Wi-Fi Troubleshooting Fundamentals
In this WatchGuard support video, you'll learn Wi-Fi troubleshooting fundamentals.
The Rising Threat of Cyber Warfare: Protecting Nations and Private Companies
Join us as we delve into the alarming reality of the Cyber Wolf, an ongoing phenomenon that extends far beyond the conflict in Ukraine. From nation-state actors to various global players, we are witnessing a significant increase in cyber warfare-related attacks and tests worldwide. In this gripping discussion, we explore the pressing question: it's not a matter of if, but when will this happen to us?
Octiga's New M365 Conditional Access Policy Baselines and Migration Process| Latest Release!
Hey there! In this video, I wanted to update you on the latest release from Octiga. We have introduced new conditional access policy baselines that offer more control over user inclusions, group and role inclusions/exclusions, and the ability to set a generalized template for conditional access policies.
Keeper: Protecting Small Business from Ransomware Attacks
Ransomware is now a multi-billion dollar industry. Weak passwords are responsible for 75% of ransomware attacks, as well as over 80% of data breaches. It's vital that businesses take proactive steps now to prevent ransomware attacks.
Cyberint: The Rise Of Malvertising
In recent months, threat actors have adopted a new technique for driving traffic to phishing sites: malicious advertisements on search engines and social media platforms. Known as "malvertising," this new technique poses major risks for consumers and businesses alike. Join Cyberint for a webinar on malvertising as Threat Intelligence Team Lead Or Shichrur covers the following topics: Cyberint Threat Intelligence Analyst Yehonatan Wiesel will discuss a recent case study of a malicious ad campaign impersonating a Cyberint customer's brand on major search engine advertising platforms.
Sysdig: Strengthen Profitability with Sysdig Cloud Security, Powered by Runtime Insights
Together with our partners, Sysdig helps SecOps and DevOps teams modernize with a comprehensive approach to securing the cloud.
Code Intelligence Finds New Vulnerability in protobufjs: CVE-2023-36665
As part of Code Intelligence's ongoing efforts to improve the security of open-source software it continuously tests open-source projects with its JavaScript fuzzing engine, Jazzer.js, in Google's OSS-Fuzz. Recently Code Intelligence uncovered a new Prototype Pollution vulnerability in protobufjs (CVE-2023-36665) using its newly integrated Prototype Pollution bug detector. The vulnerability puts affected applications at risks of remote code execution and denial of service attacks.
Top Tips: How hackers use emojis to infect your devices
Emojis are now the widely understood language of our digital world.These tiny icons that add color and life to our messages are designed to enhance online interactions by letting us express emotions and thoughts in an easy way. But hackers are seeing them as an opportunity to infect devices and exploit our personal data.