Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
How MSSPs can consolidate security tools, reduce costs, and increase revenue.
The Managed Security Services Provider (MSSP) market is poised for exponential growth. Researchers estimate that the global managed security services market will generate revenue of approximately $53.2 billion by the end of 2031, a 264% growth rate for 2021 with a 14.2% compound annual growth rate (CAGR).
Detecting Malicious Packages and How They Obfuscate Their Malicious Code
Wow! We made it to the last post in our Malicious Packages series. While parting is such sweet sorrow, we hope blogs one, two, and three provide insights into the havoc malicious packages cause throughout your DevOps and DevSecOps pipelines. In the prior posts: Now let’s get to know attackers’ other, more discreet interests when creating a malicious package: hiding malicious code, and finally showing how malicious packages can be detected and prevented.
Advanced IntelliJ debugger features you're missing out on
I recently finished writing my debugging book and a debugging course. And as a result, I frequently get asked about my favorite debugging features. Debugging is much more than the IDE debugger. In fact, only the first chapter in the book deals with that aspect. But when we think about debugging, tour mind gravitates to the IDE. However, there are still many nooks and crannies to discover inside these amazing tools. The core reason for this is simple — we never learned to debug.
Future of Security Operations - Using GitHub for Automated Case Management
Material Security gives a presentation on how their security program is automating case management using GitHub and Tines at The Future of Security Operations: San Francisco 2023.
The 443 Episode 227 - CISA Warns of Weaponized RMM Software
On today's episode, we cover a recent Department of Justice operation that resulted in taking down a major ransomware organization. After that, we cover two recent publications from CISA, the first on malicious use of legitimate RRM software and the second giving guidance to K-12 on how to address cybersecurity concerns. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.
The Simply Cyber Report: January 30, 2023
Microsoft has started blocking the execution of XLL add-ins downloaded from the Internet. The hacking group DragonSpark is leveraging Golang source code interpretation to evade detection. Threat actors are turning to Sliver to replace more popular frameworks Cobalt Strike and Metasploit. Over 4,500 WordPress sites have been hacked and Emote malware makes a comeback.
Future of Security Operations: Showing The Value of Automation
Tines gives a presentation on showing the value of automation by using the Automation Capability Matrix at The Future of Security Operations: San Francisco 2023.
ThreatSpike
ThreatSpike Labs provides the first end-to-end fully managed security service for companies of all sizes.
Q4 2022 Product Roundup - find and fix hardcoded secrets
Learn more about the challenges awaiting organizations of hundreds to thousands of developers deploying secrets detection and how we're addressing them with our latest feature releases.