Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
What is a trusted advisor? ...and why do I need one?
Organizations today, even those not related to "tech", all have a need for cybersecurity. Regardless of your industry vertical, if you have email, a website, a phone system, or even just have people using computers, cybersecurity is needed at some level or another to protect your ability to do business.
Biden's Cybersecurity Executive Order Focuses on Supply Chain Attacks
“The United States faces persistent and increasingly sophisticated malicious cyber campaigns that threaten the public sector, the private sector, and ultimately the American people’s security and privacy. The Federal Government must improve its efforts to identify, deter, protect against, detect, and respond to these actions and actors.”
Avaddon Ransomware Attack Hits AXA Philippines, Malaysia, Thailand and Hong Kong
The AXA Group has been targeted by Ransomware and the threat actors have publicly announced this incident. AXA Group’s IT Operations were affected regionally in the Philippines, Thailand, Malaysia and Hong Kong. The hostaged data, amounting to approximately 3 terabytes, consisted of customers’ personally identifiable information, health records, medical claims, patients’ personal health conditions, photos of IDs and passports, bank documents, and hospital invoices.
Does Your Threat Intelligence Solution Have These Essential Features?
Threat intelligence solutions provide security teams with critical context on cybersecurity vulnerabilities and the threat actors seeking to exploit them. This helps organizations to respond proactively and efficiently to threats. Yet while all threat intelligence tools offer the core feature of basic information about cybersecurity threats, they vary significantly in the ways they make available that data.
What does a penetration testing report look like? Why are reports so important?
The importance of pen test reports can't be undermined on the customer side. Moreso because makes the base for risk remediation activity that is a much bigger job than a pen test. Therefore, it is very important that pen test reports reflect the output of testing addressing different audiences (business and technical). What should a penetration test tell you? What is a pentest report? What to expect from a Penetration test report?
Testing for PHP Composer security vulnerabilities with Snyk
PHP is used extensively to power websites. From blogging to ecommerce, it’s embedded in our everyday lives and powers much of the internet we use today. According to a Wappalyzer report on top programming languages of 2020, PHP has a 79% market share of backend languages used on the internet today. One of the biggest challenges with PHP libraries over the years has been package management. There have been a few ways to easily install and maintain libraries including PECL, CPAN.
Arctic Wolf Managed Security Awareness
Organizations spend a lot of effort enhancing their cybersecurity, building defenses that cyberthreats can’t penetrate. Yet despite all the preparation, many attackers sidestep them all together, through social engineering and targeting busy employees, who if left unprepared, can be tricked into opening a side-door, bypassing the defences your IT team has constructed. Frustrating responders as the volume of attacks increase.
Kroll
Kroll is the world’s premier provider of services and digital products related to governance, risk and transparency.
Data Security & Governance for the Way You Work Today
The old cybersecurity stack is being pushed to the brink and no longer meets the needs of modern distributed workforces. It’s time for data security to adapt to the way we work today by putting data at the center of the security strategy. Learn how Egnyte is reimagining data governance and cloud security by delivering centralized visibility and control over your most sensitive content, wherever it’s accessed.
Hardened Access - Dual Authorization for Roles & Per-session MFA with Yubikeys
This webinar is a deep dive into how companies can harden access to Teleport with two new features in Teleport 6.1 These include creating dual & multi Authorization rules, requiring multiple team members to approve role escalation. This is an important FedRAMP control ( AC-3 ) and increasing the visibility and audibility for access. We’ll show how you can enforce per session MFA with the aid of hardware tokens; reducing the scope and risk related to certificate exfiltration.