Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Using 1Password Service Accounts with CircleCI and Docker
In this demo, see how you can secure your infrastructure secrets in 1Password then load them directly into CircleCI jobs to publish a Docker image using 1Password Service Accounts and CLI.
Using 1Password Service Accounts with CircleCI and PyPI
In this demo, see how you can secure your infrastructure secrets in 1Password then load them directly into CircleCI jobs to publish a Python package to PyPI using 1Password Service Accounts and CLI.
Using 1Password Service Accounts with GitHub actions
In this demo, see how you can secure your infrastructure secrets in 1Password then load them directly into GitHub Actions to publish a Docker image using 1Password Service Accounts and CLI.
Using 1Password to protect your API keys
Learn how to use 1Password Developer Tools to secure your API keys and avoid sharing them directly in your code.
MDR in 2023: Managed Detection & Response Solutions Today
In an ideal world, organizations should have round-the-clock protection for their corner of cyberspace, and prompt response to cyber-attacks. For this to happen, you’llneed top talent, equipped with sophisticated tools and knowledge of up-to-date security practices. But this is hardly the case for most organizations, meaning most are left vulnerable and seeking security solutions from third parties offering MDR services.
Cloud Threats Memo: A Recent Campaign Exploiting Digital Trust Through Github
The weaponization of digital trust involves exploiting an application or tool we use in our daily digital life to perform our business or personal tasks for malicious purposes. It is a technique increasingly used by the threat actors to carry out malicious actions such as the delivery of malware or links to phishing pages.
A Guide to Digital Forensics and Incident Response (DFIR)
When you engage in a security incident investigation, you need to quickly sift through vast quantities of data. In that moment, tracking your attacker, containing the attack, and identifying the root cause are the activities that matter most. However, in an attack’s aftermath, the digital recovery process and post-incident paperwork becomes your new nightmare.
Preparing for CMMC Compliance: Tips and Best Practices
The Cybersecurity Maturity Model Certification (CMMC) is a cyber program and security framework used by the US Department of Defense (DoD) to measure firms’ cybersecurity maturity. All DoD contractors working with the federal government must comply with this program by 2025. CMMC compliance demands that DOD contractors pass an external CMMC assessment carried out by an approved CMMC Third Party Assessment Organization (C3PAO) for all but the lowest level of CMMC certification.
What is a Third-Party Breach? Definition & Tips for Reducing Risk
A third-party data breach refers to a data breach that has occurred through a third-party company. In a third-party data breach, the vendor or supplier’s system has been compromised and used to steal data that belongs to you. A third party can be defined as an organization with which your organization has entered into a business relationship to provide goods, access, or services for your use.
CrowdStrike Takes On Spyboy's "Terminator"
On May 21, 2023, a new threat actor named Spyboy emerged, advertising a tool known as “Terminator” in a Russian-language forum, claiming the software could bypass over 20 common AV and EDR controls. CrowdStrike automatically blocked this executable, categorizing this as a high-severity detection, enabled by our AI-powered indicators of attack.