Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Striving for 100% Completion Rates: Getting Compliance on Your Compliance Training
Anything but 100% completion on your employee compliance training is often more than simply frustrating. Compliance audits and regulatory requirements can make anything less than 100% feel like a failure. But, getting compliance on your compliance training is possible! Organizations have struggled for years with getting everyone to complete their required compliance training. This puts organizations at risk of more incidents occurring, fines or reputational damage if an employee is non-compliant.
Download Your 12+ Ways to Hack Multi-Factor Authentication
All multi-factor authentication (MFA) mechanisms can be compromised, and in some cases, it's as simple as sending a traditional phishing email. Want to know how to defend against MFA hacks? This eBook covers over a dozen different ways to hack various types of MFA and how to defend against those attacks.
API Security Best Practices Guide
API security has emerged as a key priority for protecting vital data and services. It's also an area where many companies lack expertise. Salt Security has compiled this list of API security best practices, drawn from field experience and customer feedback, to help guide you on your API security journey. These API security best practices fall into multiple focus areas, including: Download this guide to obtain a comprehensive list of best practices and guidance to secure your APIs throughout their lifecycle.
API Security Evaluation Guide
With API attacks on the rise, and existing security technology proving to be ineffective at stopping API attacks, organizations need to take a new approach. API security offerings must provide a range of functionality to be useful to organizations, including: Download this white paper to improve awareness of what it takes to adequately secure APIs, how to evaluate a given API security offering, and what API security capabilities are necessary to protect your business.
LimaCharlie: Introducing the LimaCharlie Query Language (LCQL)
The team at LimaCharlie is excited to be introducing a new and powerful capability: LimaCharlie Query Language (LCQL) LCQL allows you to query through your data in the LimaCharlie retention more easily and flexibly. It also enables several new useful features.
Tigera: Build and secure multi-cluster CockroachDB environments in Kubernetes with Calico cluster mesh
Organizations are adopting multi-region databases such as CockroachDB for various reasons, including disaster recovery, regional data protection regulations or latency reduction. Unfortunately, Kubernetes's single cluster architecture doesn't scale with multi-region and multi-cluster database deployments. Calico cluster mesh addresses this Kubernetes shortcoming by providing consistent networking and security policies for CockroachDB and similar architecture databases and prevents drift for multi-region CockroachDB in Kubernetes.
Tigera: Microsoft Azure: Hands-on AKS workshop: Kubernetes configuration security and compliance
In this AKS-focused security workshop, you will work with Microsoft Azure and Calico experts to learn how to design and deploy best practices to secure your Kubernetes environment and achieve compliance with regulatory frameworks, including but not limited to PCI, SOC 2 and GDPR. This 90-minute hands-on lab comes with your own provisioned Calico Cloud and a sample app environment.
Multivariate Anomaly Detection: Safeguarding Organizations from Internal Threats
The term “internal threat” refers to the risk that somebody from inside a company could exploit a system to cause damage or steal data. Internal threats are particularly troubling, as employees may abuse extended privileges, leading to massive losses for the organization. One such infamous case is of an ex-Google employee who was charged with theft of trade secrets from Google for a ride-hailing start-up Uber.
Healthcare under attack: an overview
In this blog post, we briefly outline these findings and what organisations can do to defend themselves.
Corelight Investigator introduces new Machine Learning Models
Corelight Investigator furthers its commitment to delivering next-level analytics through the expansion of its machine learning models. Security teams are now enabled with additional supervised and deep learning models, including: We continue to provide complete transparency behind our evidence -- showing the logic behind our machine learning models and detections, allowing analysts to quickly and easily validate the alerts.