Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
Data Security Requirements for Federal Contractors
Federal contractors are private entities that fulfill governmental needs. As such, they are trusted with sensitive, private federal information which makes them obvious targets for cyber attacks. The government has recently ramped up data security requirements for federal contractors, demanding more software, hardware and accountability from them.
Bypassing and exploiting Bucket Upload Policies and Signed URLs
TL;DR Bucket upload policies are a convenient way to upload data to a bucket directly from the client. Going through the rules in upload policies and the logic related to some file-access scenarios we show how full bucket object listings were exposed with the ability to also modify or delete existing files in the bucket.
Application Discovery and Inventory with ImmuniWeb
ImmuniWeb® Discovery is a part of the ImmuniWeb Application Security Testing Platform. Leveraging big data and a non-intrusive OSINT reconnaissance technology, it quickly builds a comprehensive list of your external web and mobile apps for actionable inventory, continuous monitoring, risk and compliance management.
ImmuniWeb AI Application Security Testing Platform Overview
ImmuniWeb® Platform is The Turnkey Service for Application Security Testing. ImmuniWeb® Platform leverages Machine Learning and AI for intelligent automation and acceleration of Application Security Testing (AST). Complemented by scalable and cost-effective manual testing, it detects the most sophisticated vulnerabilities and comes with a zero false-positives SLA.
ITIL, the Change Management Process and Tripwire Enterprise
When I speak with clients about their approach to managing their IT services, many organisations mention ITIL practices as a cornerstone to their approach. This is hardly surprising since the ITIL framework describes a sensible methodology for IT management, looking at the use of technology through the lens of what the business needs.
CaixaBank Accelerates and Secures Digital Transformation with Devo
Cambridge, MA, August 1, 2018 – Devo Technology, formerly Logtrust, today announced that CaixaBank, a leader in retail banking in Spain, is using the Devo Data Operations Platform to secure its Digital Transformation efforts.
Beginner's Guide to Open Source Intrusion Detection Tools
This whitepaper provides an overview of Open Source IDS and the various IDS tools available today. Whether you need to monitor hosts or the networks connecting them to identify the latest threats, these are some of the best open source intrusion detection (IDS) tools available to you.
Data Protecton - A Comprehensive Guide to GDPR
This white paper will provide you with a high-level understanding of GDPR's strategic aims and the challenges these present to UK businesses. In addition, we'll present helpful tips for interpreting, implementing and maintaining the new legislation and your approach to managing personal data.
How To Monitor Kubernetes Effectively
Monitoring Kubernetes requires you to rethink your monitoring strategies, especially if you are used to monitoring traditional hosts such as VMs or physical machines. This guide prepares you to effectively approach Kubernetes monitoring in light of its significant operational differences.
Five Essential Elements of Cloud Security: Understanding The Risks And Requirements To Deploy Secure File Services In The Cloud
Understand the five essential elements for securing data in the cloud. This white-paper provides a checklist for CSOs to ensure secure data migration to the cloud.