Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Coffee Talk with SURGe: National Cybersecurity Strategy, CVE-2023-21716, Health Data Extortion
Grab a cup of coffee and join Ryan Kovar, Mick Baccio, and Kirsty Paine for another episode of Coffee Talk with SURGe. The team from Splunk will discuss the latest security news.
Using ggshield Throughout The Software Development Lifecycle - A Developer's View of GitGuardian
Take a tour of how developers commonly use ggshield, the free and open source GitGuardian CLI to find hardcoded secrets. We will also see how developers participate in the remediation process. In this video demo, see: Learn more at docs.gitguardian.com
Metrics that Matter: How the New U.S. Cyber Strategy Can Transform Global Cyber Defense
Today’s release of the White House’s National Cybersecurity Strategy is the result of more than a year of government and industry collaboration that sets new boundaries for the government approach needed to improve global cyber defenses. The strategy clearly represents a shift away from decades-old voluntary compliance regimes to a more aggressive regulatory construct that seeks to shift cyber burdens onto providers/developers and owners and operators of critical infrastructure.
Setting up an efficient Vendor Risk Management Program
In our first Insight Session, our Senior Product Manager Lisa Baldacchino will talk you through the practices on how to set up and optimize your vendor risk management program.
Getting started with Attack Surface Management
In our third Insight Session, our VP of BreachSight Greg Pollock will talk through how to get started with an Attack Surface Management Program, understand what it means to protect your attack surface, why you should invest in it, and the steps to take that will quickly show a return on investment.
Improving vendor relationships through better collaboration
In our second Insight Session, our Senior Product Manager Jess Hooper will teach you how to improve your vendor relationships by shifting your processes from reactive to proactive,using UpGuard’s powerful suite of vendor tools.
UpGuard Product Spotlight Q1 2023
Join UpGuard's Chief Product Officer, Dan Bradbury, as he shines a spotlight on all of the groundbreaking product releases from the last quarter and the exciting releases coming soon.
Traveling with OAuth - Account Takeover on Booking.com
OAuth (Open Authorization) is a modern, open authorization standard designed to allow cross-application access delegation – for example, allowing your application to read data from your Facebook profile. Combined with the proper extensions, OAuth can also be used for authentication – for example, to log into your application using Google credentials. Since its first introduction in 2006, OAuth has gained tremendous popularity.
OAuth security gaps at Booking.com (now remediated)
This short video explains how Salt Labs researchers identified several critical security flaws on the popular travel site Booking.com. The flaws were found in the site's authentication functionality and could have allowed a malicious attacker to take over user accounts, access profile information, and take actions on behalf of the user such as booking or canceling reservations and ordering transportation services.