Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Cybersecurity Risk Management: Introduction to Security Analytics
It’s mid-morning. You’re scanning the daily news while enjoying a coffee break. You come across yet another headline broadcasting a supply chain data breach. Your heart skips a quick, almost undetectable, beat. You have the technology in the headline in your stack. You set aside your coffee and begin furiously scanning through the overwhelming number of alerts triggered across all your technologies.
Article 28 - General Data Protection Regulation Act
The General Data Protection Regulation Act (GDPR) requires Data Controllers to establish a written agreement with the Data Processor stating the terms and conditions for the data processing activity. So, before getting into a contract with the Data Processor, a Data Processing Agreement must be signed between both parties regarding the conduct of processing personal data.
Today's Crypto Storage Solutions & Wallets for Institutions
What secure, enterprise-grade crypto storage solutions (wallets) currently exist on the market? Fireblocks' Head of APAC & Vice President, Product Strategy and Business Solutions, Stephen Richardson, explains. There are two types of enterprise-grade crypto storage solutions (wallets) exist in the market: Multisig wallets (ex: Bitgo, Coinbase, Gemini, Paxos) and MPC wallets (Ex: Unbound, SharpX, Fireblocks).
Tigera: Auditing cloud-native applications for security risks and misconfigurations
According to the NSA, misconfiguration is the most common cloud security vulnerability. Misconfigurations of environments and images are one of the top concerns for security and DevOps teams. Cloud-native misconfigurations occur when resources have not been configured properly, versions are mismatched, tech stack is not updated leaving your application vulnerable to attack. Simply knowing what configuration requires security teams attention can help mitigate threats.
Tigera: AWS Dev Days: Hands-on EKS workshop: Configuration Security and Compliance
In this EKS-focused workshop, you will work with AWS and Calico experts to learn how to design and deploy best practices to secure your Kubernetes environment and achieve compliance with regulatory frameworks including but not limited to PCI, SOC2 and GDPR. This 90-minute hands-on lab comes with your own provisioned EKS and Calico Cloud environment.
Formulating proper data destruction policies to reduce data breach risks
As Morgan Stanley Bank now knows, ignoring certified data destruction policies can be disastrous. The bank made news in 2020 when it was fined over $60 million for not using proper oversight when decommissioning two of its data centers. Regulators found that the organization had not addressed the risks associated with decommissioning hardware effectively.
SIEM Use Cases for Compliance with GDPR
The era we live in requires the digitalization of all subjects interacting with people, from giant companies to small-scale organizations. It is unquestionable that this trend has made significant contributions to the data collection process. But the larger the volume of data collected, the greater the risk of a security breach. For this reason, it is essential to control the security and transparency of personal data.
This Month in Datadog: March 2022 (Episode 9)
Datadog is constantly elevating the approach to cloud monitoring and security. This Month in Datadog updates you on our newest product features, announcements, resources, and events. This month we put the Spotlight on Azure Security and Compliance with Datadog..
Five Steps to Protect Your Organization against Phishing Attacks
The rise in cybercrime has accelerated 600% over the last three years, and shows no signs of slowing down. Even though the pandemic accelerated online services, data, and particularly vulnerable home networks, the truth is that cybercriminals are caught only 0.03 percent of the time. That rate, combined with the fact that the average cost of a data breach stands at $3.86 million makes for an attractive calculation for cybercriminals.
Threat Update DoubleZero Destructor
The Splunk Threat Research Team is actively monitoring the emergence of new threats in the cyber domain of ongoing geopolitical events. As we have shown previously in several releases, including HermeticWiper and CaddyWiper, actors in this campaign are deploying, updating, and modifying stealthier malicious payloads. On March 17th, 2022, the Ukraine CERT discovered a new malicious payload named DoubleZero Destructor (CERT-UA #4243).