Mailchimp
Not subscribed to OpsMatters Newsletter
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
opsdemon
Latest posts
Humans vs AI: Building a Security Culture That Actually Works with Noora Ahmed-Moshe
As AI reshapes cybersecurity threats, understanding how scams are evolving has never been more critical. Welcome to Razorwire. I'm Jim, and today I'm talking with Noora Ahmed-Moshe, VP of Strategy and Operations at Hoxhunt. We'll explore how AI is transforming cybersecurity threats and what that means for protecting ourselves and our organisations.
What are the consequences of losing Active Directory (AD)?
Did you know that 54% of breaches result from stolen or hacked credentials, according to DHS and CISA? Active Directory (AD) is a prime target for attackers, and compromising it can lead to catastrophic consequences for any organization. In this video, we dive into: Why AD is a prime target: Once compromised, attackers gain "the keys to the kingdom" and access to your entire enterprise. The hidden threat: Attackers can remain undetected in your network for up to 10 days, extracting sensitive information. On average, a data breach costs an organization around $4.4 million.
How Is API Abuse Different from Web Application Attacks by Bots?
API abuse and web application bot attacks are often confused. This is understandable, as both involve automated interactions and are usually executed by bots. Both attack vectors are prevalent; criminals are always eager to disrupt the foundations on which businesses base their operations to achieve their malicious goals and they frequently automate their actions for maximum results.
MLOps Done Right: GitGuardian's Battle-Tested Open-Source Stack
Our stack to go from experimenting to production won't have any more secrets for you.
What is PHI? (Protected Health Information) | TrustTalks - Ep 1 | Security and GRC Podcast
Let's deep dive into PHI (Protected Health Information). Understand it's importance, best practices, legalities, risks, and more.
The Vendor's Survival Guide to Security Questionnaires | TrustTalks Ep 5 | Security and GRC Podcast
Seeking a solution that streamlines vendor risk management and automates security questionnaires? Imagine a tool that offers a comprehensive portal, securely shares information, uses AI to handle responses, and frees up your evenings. It might sound too good to be true, but with TrustShare, it’s a reality. Forget the hassle of maintaining a knowledge base or configuring tools meant for RFPs. TrustShare takes care of everything, from AI-driven responses to seamless information sharing, which leads to faster sales cycles.
What We Know About The SEC's New Cyber Disclosure Rule
As cyber threats escalate in frequency and severity, IT and security teams face increased pressure to maintain transparency. With this in mind, the US Securities and Exchange Commission’s (SEC) Cyber Disclosure Rule, released on 26 July 2023, mandates timely and detailed public disclosures about cyber incidents.
CIS Control 11: Data Recovery
Data loss can be a consequence of a variety of factors from malicious ransomware to hardware failures and even natural disasters. Regardless of the reason for data loss, we need to be able to restore our data. A data recovery plan begins with prioritizing our data, protecting it while it is being stored, and having a plan to recover data.
From Assessment to Implementation: Attack Surface Reduction Guide
An attack surface is the sum total of all the various ways that a cyber threat actor could attack an organization. This includes everything from software vulnerabilities, like SQL injection, to lost and stolen devices to social engineering attacks against the organization’s employees or third-party partners. An organization’s overall attack surface can further be divided into its external and internal attack surfaces.
How 1Password supports SOC 2 compliance
The rapid adoption of cloud technologies and the increasing reliance on distributed workforces have transformed the modern business landscape. However, these shifts come with significant risks, particularly concerning the protection of sensitive data.