Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Latest posts
How to secure a Kubernetes cluster
More and more organizations are adopting Kubernetes, but they’re encountering security challenges along the way. In the fall 2020 edition of its “State of Container and Kubernetes Security” report, for instance, StackRox found that nearly 91% of surveyed organizations had adopted Kubernetes, with a majority (75%) of participants revealing that they had deployed the container orchestration platform into their production environments.
IcedID Stealer Man-in-the-browser Banking Trojan
IcedID stealer (Also known as BokBot) was first discovered at the end of 2017, believed to be a resurgence of the NeverQuest banking Trojan. It is a modular banking trojan that uses man-in-the-browser (MitB) attacks to steal banking credentials, payment card information and other financial data. The stealer possesses relatively sophisticated functionality and capabilities such as web injects, a large remote access trojan (RAT) arsenal and a VNC module for remote control.
Calligo acquires Network Integrity Services!
Today Calligo announces it has completed its fourth acquisition of 2020 – and ninth in three years – with the purchase of Network Integrity Services, a UK-wide IT managed services provider specialising in managed IT, cloud and security services with locations in Manchester, Birmingham, Leicester and Hemel Hempstead.
Integrating Security Across Clouds
SEGA Europe – Why SEGA Europe adopted Sumo Logic for Multi-Cloud Security.
Emerging threats: a view from the front lines
In this session we will take a look at the threat landscape in 2020 and discuss the new realities and threats that we face in a post-COVID-19 world. Additionally, this session will focus on how organizations have started to transition to zero trust models and how the threat models have changed.
Securing a Cloud Service with Sumo - From Compliance & Security Analytics to Production App Security
Auth0 – Aggregating diverse data across/in the cloud, integrating into workflows and tooling, accelerating compliance, and expanding into application threat surfaces.
Reviewing Findings in Veracode for VS Code
In this video, you will learn how to: Veracode IDE Scans find potential security issues in your code in seconds so that you can fix the findings directly in your IDE. Veracode for VS Code is an extension to Visual Studio Code, which performs an IDE Scan at the file level. It supports JavaScript, TypeScript, and C#. You can scan either a single file or all files in a selected Visual Studio folder.
How to Protect Your Business From Multi-Platform Malware Systems
The Lazarus Group (also known as Guardians of Peace or Whois) is a notorious cybercrime gang made up of unknown individuals. According to the United States Federal Bureau of Investigations, the group is a North Korean “state-sponsored hacking organization.” However, some believe that their connections to North Korea might be a false flag intending to hide their true origins.
Notable Enhancements to the New Version of NIST SP 800-53
As an infosec professional, you’ve likely heard of the National Institute of Standards and Technology (NIST).
Fact vs. Fiction: Common Data Environment and Interoperability in Construction
A number of software packages offer data storage in the cloud. Convenient? Yes, however, the data resides in its own silo which can make it difficult to manage – from security with a clear audit history, to accessibility to making sure the latest content is available to project stakeholders. A true common data environment (CDE), keeps and protects all that content in a single, secure repository in the cloud with integrations to applications.