Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Cybersecurity Measures Every Project Manager Should Know About
Online projects could be easy prey for cybercriminals due to the involvement of critical security information (emails, different platforms' login passwords, bank accounts, etc.) and multiple people. A simple phishing email requesting new login credentials or bank account details could be effective on negligent team members and could put everybody at risk. In other words, any breach of information by a project team member could lead to a disaster for the parties involved.
Tigera: Auditing cloud-native applications for security risks and misconfigurations
According to the NSA, misconfiguration is the most common cloud security vulnerability. Misconfigurations of environments and images are one of the top concerns for security and DevOps teams. Cloud-native misconfigurations occur when resources have not been configured properly, versions are mismatched, tech stack is not updated leaving your application vulnerable to attack. Simply knowing what configuration requires security teams attention can help mitigate threats.
Featured Post
Port scanners and open ports: What you should know
When it comes to securing your network from intrusion or attacks, one of the most commonly followed security measures is to regularly scan your network ports and close all open ports. This is because open ports can expose your network to several security vulnerabilities. To tackle the risks introduced by open ports, network admins rely on port scanners. Port scanners help you identify, inspect, and analyze network ports, and aid in reducing your network's attack surface by closing open ports. This makes port scanners an indispensable tool to ensure network security. In this post, we discuss what open ports are, their vulnerabilities, and how you can defend your network with port scanners.
Monitor Content Security Policy violations with Datadog
Content Security Policy (CSP) is a W3C standard that helps defend web applications against cross-site scripting (XSS), clickjacking, and other code injection attacks. CSP is often deployed by using an HTTP header (or, less commonly, a element) to specify which types of resources are allowed to load on your site and where those resources can come from.
How to stay ahead of the Cybersecurity labor crisis and keep growing your business
Cybersecurity is a complex task that is never complete. It’s an ongoing proactive practice of securing, monitoring, and mitigating threats. It’s a constant cycle where threats and vulnerabilities are detected, teams investigate and mitigate any issues, then network cybersecurity systems are reinforced to combat the next potential threat. Business operations increasingly rely on numerous devices and digital tools to accomplish daily tasks.
Regulatory Compliance in the Cloud: What you Need to Know
Anyone reading this post will have at least dipped their toes into the world of cloud services. As a result of this massive growth, the world of compliance has spent much of the last decade catching up with the implications of cloud services.
KnowBe4's Dylan White: How to use automation to remove mundane manual security tasks and make your team 5x more effective
In our fifth episode of the Future of Security Operations Podcast, Thomas speaks with Dylan White, an Information Security Engineer at KnowBe4 — a leading security awareness training platform.
How to Stop Insider Threats With UEBA
As the digital transformation continues at full speed, the majority of humanity's routine activities have begun to be carried out through digital channels. As the world digitizes, the potential loot in the lap of hackers grows. That's why we witness the development of new cyber threats every day. This requires all organizations, from the smallest to the largest, to be prepared for advanced cyber attacks.
The New RansomHouse on The Block
As new ransomware groups emerge by the day, most of them operate the same business model and same techniques. And as we all know, one of the main techniques of ransomware groups is to encrypt valuable assets belonging to the victim. Over the past weeks, a new and slightly odd ransomware group has emerged named RansomHouse. At glance, it looks like any other ransomware group, but claims to be something other than what we are used to seeing.
How to Automate Intune Device Reports with Torq
Whether for managing remote teams, supporting ‘bring your own device’ (BYOD) policies, or simply another layer in a data protection strategy, services like Microsoft Intune offer greater control over the devices on your network. But using the data from these services often requires tedious prep work, and this process is likely repeated multiple times a week, if not daily. Tedious, repetitive, structured: these are all signs that a process can and should be automated.