Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

opsdemon

Latest posts

Cyber Resilience Act: What Does It Mean For Your Digital Business?

Software developers push thousands of lines of code every day, helping enterprises shape the tools and applications we all rely on, starting from banking to entertainment. However, we shouldn’t forget that behind every successful deployment lies a hidden challenge – what cyber security measures should be taken to protect the source code, hardware and software products, and critical company and customer data?

Why Monitoring Your Windows Defender Firewall State is Critical for Security

In today's world of cybersecurity, where risks change so quickly, it's more important than ever to keep your defenses strong. The Windows Defender Firewall is an important line of defense because it keeps your system safe from hackers and people who aren't supposed to be there. But turning on this firewall isn't enough; it needs to be regularly checked for state and setup changes to make sure it's working properly.

Researching Illicit Streaming Devices with Graylog

In February 2024, I discovered a whisper campaign targeting folks in critical infrastructure with a pirate streaming box. While Illicit streaming devices are not new, this one is particularly ""chatty"". When I discovered it was communicating to qqcom, I knew I needed to start ingesting logs and needed a SIEM. I was able to quickly deploy Graylog and collect and correlate logs to understand behavior of the device.

26 AWS Security Best Practices to Adopt in Production

One of the most important pillars of a well-architected framework is security. Thus, it is important to follow these AWS security best practices, organized by service, to prevent unnecessary security situations. So, you’ve got a problem to solve and turned to AWS to build and host your solution. You create your account and now you’re all set up to brew some coffee and sit down at your workstation to architect, code, build, and deploy. Except, you aren’t.

Stay ahead of cybercrime and ransomware with Zerto 10's encryption detection

In the time it takes you to finish this post — perhaps even this sentence — it is more than likely that ransomware will disrupt yet another business, causing extensive delays and irrevocable damage. Across the globe, ransomware attacks continue to increase in frequency, sophistication, and consequence, littering headlines with cautionary tales and sobering statistics. Over the next decade, Cybersecurity Ventures predicts that global ransomware damage will grow by 30 percent annually.

Understanding TellYouThePass Ransomware: A Growing Threat in 2024

TellYouThePass ransomware, first seen in 2019, is once again in the spotlight due to its recent activity. This ransomware has been found exploiting critical vulnerabilities in PHP, specifically the CVE-2024-4577 flaw, putting both Windows and Linux systems at risk. The malware uses advanced techniques like web shells and fileless malware to gain entry, highlighting the need for robust cybersecurity measures.

Achieving Operational Resilience in an Increasingly Uncertain World

The EU’s Network and Information Systems Directive 2 (NIS2) for cybersecurity resilience entered full enforcement in October 2024, and compliance with its requirements presents major challenges for many companies, particularly those in the financial services sector. And while most IT leaders are confident of achieving NIS2 compliance, they also acknowledge that this cybersecurity directive has exacerbated existing challenges such as resource constraints and skills gaps.

Email Security Limitations of Microsoft 365 Defender

We probably do not need to cover this, but we’ll provide a quick overview – M365 has a host of advantages, including scalability and convenience. Because the platform is cloud-based, businesses can effortlessly access their data and applications and shift to fully remote or hybrid working models without the common challenges of such a transition.

The Cyber Helpline Report: The UK Justice System is Failing Cybercrime Victims

Cybercrime and online harms are rapidly evolving, impacting millions annually in England and Wales alone. Recognising the complexity and urgency of these issues, The Cyber Helpline has undertaken a thorough analysis to examine the critical gaps in the processes of reporting, investigation, and prosecution faced by victims. Drawing on our data and insights from across England and Wales, we explore the journey of victims from the initial impact through to potential prosecution.

Breakdown of Takedown: An Overview of Tackling Phishing Threats

Every year, more and more companies are confronted with website and email spoofing worldwide. Cyber criminals use fake websites and fake email accounts for phishing, spear phishing and social engineering attacks to commit fraud, redirect web traffic, or manipulate search engine rankings. The disarming, or takedown, of these fake domains is a real challenge for more and more security teams. This is because cyber criminals are becoming increasingly professional in their spoofing activities.