Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
BERT Embeddings: A Modern Machine-learning Approach for Detecting Malware from Command Lines (Part 2 of 2)
CrowdStrike data science researchers recently explored and experimented with the use of Bidirectional Encoder Representation from Transformers (BERT) for embedding command lines, focusing on anomaly detection, but without detailing the model itself. Diving deeper into that research, CrowdStrike researchers explain the reasons for using BERT for command line representation and how to train the model and assess its performance.
How Does Infrastructure as Code on AWS work?
Imagine having to manually provision and configure every device in a large corporation. Then visualize the upgrade process. How about patching? Then, picture ensuring conformity on every device. Next, add some enterprise-wide IT governance changes that must be implemented. The process would be daunting, to say the least, every time.
CI Fuzz Demo | Security Testing Made for Developers
Debug your software in a few clicks. Combine the advantages of both static and dynamic code analysis, with instrumented fuzz testing to ship secure software, and run automated security checks to achieve maximum code coverage without false positives.
Boost Your Information Security to Meet ITAR Compliance
The U.S. Government requires all manufacturers, importers, exporters, and brokers of defence articles, defence services or related technical information to meet International Traffic in Arms Regulations (ITAR) compliance. Applying these regulations to your business and to those within the greater supply chain introduces additional costs, rigor, and complexity into your processes. This whitepaper introduces 5 essential checkpoints of ITAR and provides strategies to assist with compliance and cyber resilience.
Mind the gap: The state of secrets scanning in 2021
Consuming secrets is a cornerstone for connectivity between applications and infrastructure. Whether it be cloud identity-based secrets such as IAM role keys from AWS, or FTP accessibility credentials - secrets such as these are often discovered by malicious users. The common culprit is usually in a public space such as public repositories on GitHub. While it's easy to think "that will never happen to us", it only takes one misplaced key pushed to the wrong repository for your entire infrastructure, application, and databases to be compromised and exposed.
The DevOps Guide To Vulnerability Management Tools In 2021
Imagine you are in charge of maintaining data for some of the most secretive government offices and powerful business entities globally. You have a significant investment in your security apparatuses protecting that knowledge. For years you haven't had a single blip or incident to cause any suspicion. Then the unthinkable happens, and from a single weak point, your entire network is compromised by malicious code hidden in an innocuous update.
Netwrix: Modern Endpoint Management for Wherever Work Gets Done
In today's hybrid work environment, employees access their desktops and laptops at the office, at home, while travelling and through kiosks. Keeping everything up to date and secure can be a challenge because most tools are not designed for modern management scenarios. With the Netwrix PolicyPak platform, you can simplify management and enhance security across your hybrid or remote workforce.
Netwrix: How To Implement A CIS Hardened Build Standard
Commercial and open source system configurations generally lack all the necessary security measures needed before deploying into production. These configurations will often times have features and functionalities enabled by default, making them less secure and a prime target for today's cyber criminals. Implementing a CIS hardened build standard can help you address this issue by disabling and removing unnecessary functionalities and features, allowing your security team to proactively minimize system vulnerabilities, enhance system integrity, achieve compliance, and reduce your attack surface.
Cyberint: A Glimpse into the Dark Web
We all know that the dark web is a haven for malicious activity. This is the place where cybercriminals coordinate attacks and distribute malware and phishing kits. But do you know how these things might affect you? Join our webinar to get a glimpse into the dark web and learn how you can prepare yourself against attacks originated there! Our speaker, Jacob Silutin, one of Cyberint's top security experts, has extensive experience with the dark web from his former position at the Israeli Security Agency.
4 golden reasons for equipping your SOC with ManageEngine Log360
Cyberattacks are fast becoming a part of our daily lives. Multiple sources such as Norton Security and Forbes suggest that since the pandemic, attacks are not only increasing in number, but they are becoming more targeted and sophisticated. The attackers using Ransomware as a Service and double extortion techniques are prime examples of how sophisticated attacks are becoming these days. Norton Security states that there are more than 2,200 cyberattacks on a daily basis.