Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
ManageEngine: Simplify identity management with workflow-driven automation
On average, an IT admin spends about 20-30 minutes provisioning an identity, and close to 60% of companies worldwide still manage their identities manually. Many believe identity automation to be a costly affair that might even require a certain level of expertise to carry out. In this webinar, we will learn.
ManageEngine: 5 best practices to thwart identity-based attacks in 2023
Identity-based cyberattacks increased steadily in 2022. An alarming 84% of organizations experienced an identity-related breach in 2022, according to a recent survey*. Since identity sprawl will continue to be a major security concern in 2023, this number is expected to grow. Identities are the keys to our kingdoms and cyberattackers will continue to wage sophisticated identity-based attacks to gain access to critical resources in an organization. Join this free webinar to learn how to protect identities in the challenging times ahead.
Westcon-Comstor Expands Partnership with Juniper Networks Further into EMEA
Global technology provider and specialist distributor extends Juniper Networks partnership into Benelux, Cyprus, Greece, Italy and Malta.
A Noteworthy Threat: How Cybercriminals are Abusing OneNote - Part 2
In part one, we examined how threat actors abuse a OneNote document to install an infostealer. Part 2 of this series discusses an AsyncRAT infection chain while detailing important parts of the code. We’ll also quickly analyze other notable malware strains such as Qakbot and RemcosRAT.
A Noteworthy Threat: How Cybercriminals are Abusing OneNote - Part 1
Threat actors are taking advantage of Microsoft OneNote's ability to embed files and use social engineering techniques, such as phishing emails and lures inside the OneNote document, to get unsuspecting users to download and open malicious files. Once clicked, an attacker can use the embedded code for various malicious purposes, such as stealing data or installing ransomware on victims' systems.
Comparing Node.js web frameworks: Which is most secure?
JavaScript is the world’s most popular programming language, providing many web frameworks that help developers build secure, reliable Node.js web applications. Each framework has unique features, and which framework is right for you depends on your preference and the type of application you intend to create. With so many frameworks available, you need a way to assess their security.
Webinar - Secure your IaC, infastrucutre as code best practices for security
The cloud revolution has taken the world, and programming languages, by storm! In 2022, HCL, the HashiCorp Configuration Language, driven by the popularity of Terraform and Infrastructure-as-Code practices, became the #1 fastest-growing language on GitHub! Who would’ve expected that ten years ago?!
Android apps in the PlayStore are leaking their credentials and secrets
How many android applications on the play store are leaking their credentials and secrets! The answer comes from independent research conducted by Cybernews which shows nearly half of all applications on the Play Store are leaking secrets. Vincentas Baubonis, a security researcher from CyberNews joined GitGuardian on a Webinar to detail some research they conducted exploring how android applications are leaking secrets.
Stranger Danger: Your JavaScript Attack Surface Just Got Bigger
Building JavaScript applications today means that we take a step further from writing code. We use open-source dependencies, create a Dockerfile to deploy containers to the cloud, and orchestrate this infrastructure with Kubernetes. Welcome - you're a cloud native application developer! As developers, our responsibility has broadened, and more software means more software security concerns for us to address.
Proof-of-Concept Exploit Released for Critical Vulnerability in Microsoft Word (CVE-2023-21716)
On February 14, 2023, Microsoft released a security advisory for CVE-2023-21716, a critical remote code execution vulnerability in Microsoft Word. While CVE-2023-21716 was deemed to be of critical severity, Microsoft assessed at the time of publication that the vulnerability was “less likely” to be exploited, and no proof-of-concept exploit was available. Microsoft also noted that the vulnerability may be exploited through the Preview Pane in Microsoft Outlook.