Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Log4j: Separating the exploits from the noise

Feb 28, 2022 By Corelight In Corelight
Attackers have already found thousands of potential ways to obfuscate their log4j attacks, which are sweeping the Internet at breakneck speed. SOCs protecting still-vulnerable assets have a duty to chase down every alert for it that pops up - which are coming in at a rate of tens or hundreds of thousands of times a day for larger enterprises. This webcast will covers how a data-driven strategy can automate that insurmountable task into a process that quickly reveals systems that actually responded to the attack - letting teams focus on the alerts that matter the most.
View Video
Featured Post
outpost 24

Solving the CVE puzzle with MITRE ATT&CK and threat intel

Feb 25, 2022 By Simon Roe In Outpost 24
To threat actors, infiltrating an organisation's infrastructure is like a cryptic puzzle they must solve as they seek out vulnerabilities to exploit. By evolving their tactics and techniques, completing the puzzle becomes easier and so does finding common vulnerabilities and exposures (CVEs) to target. As a result, there is a greater call for security teams to go the extra mile with vulnerability remediation efforts by combining threat intelligence with CVE findings and the guidance provided by the MITRE ATT&CK framework to zoom in on the riskiest vulnerabilities.
Read Post
Snyk

Magento security requires additional patch to fix sanitization vulnerability

Feb 24, 2022 By DeveloperSteve In Snyk

As technology folks, we are often under a lot of pressure to fix some deployed code, update an infrastructure component, or patch some code. Often it’s with little notice and needs to be done 5 minutes ago. The gamble with any “zero turnaround” is the rush to fix now vs. taking the time to test and check.

Read Post
CrowdStrike

CrowdStrike Automates Vulnerability Remediation Processes While Enhancing SecOps Visibility

Feb 23, 2022 By Alyssa Ideboen In CrowdStrike

Adversaries are becoming more adept and sophisticated in their attacks. Taking advantage of vulnerabilities present in major software is often an attractive entry point for establishing a campaign within an enterprise environment. The CrowdStrike 2022 Global Threat Report highlights how adversaries continue to shift tradecraft and weaponize vulnerabilities to evade detection and gain access to critical applications and infrastructure.

Read Post

What Is Managed Vulnerability Scanning And Why Do You Need It?

Feb 22, 2022 By Cyphere In Cyphere
Managed Vulnerability Scanning solves the security problem by providing continuous monitoring and protection for your systems, allowing you to keep up-to-date with new threats. In this video, we'll talk about what Managed Vulnerability Testing is, how it works and why you need it!
View Video

Top 8 Uses Of Website Vulnerability Scanners

Feb 22, 2022 By Indusface In Indusface
The average cost of data breaches in 2021 was USD 4.24 million, the highest figure in at least 17 years. So, proactive, accurate, and effective identification of security vulnerabilities is non-negotiable and offers a solid basis for adequate security. By proactively identifying these vulnerabilities, weaknesses, and flaws in the application, website vulnerability scanner tools bring accuracy and efficiency in web application security.
View Video

OWASP Top 10: API Security Threats

Feb 22, 2022 By Indusface In Indusface
It’s no secret that APIs are under attack. Companies are struggling to keep their APIs safe and secure from accidental breaches to malicious hacks. The problem will only worsen as APIs become more complex and more companies rely on them for critical business functions. The security risks increase exponentially. About Indusface: Indusface is a SaaS company that secures critical Web applications of 2000+ global customers using its award-winning platform that integrates Web application scanner, Web application firewall, CDN, and threat information engine.
View Video

4 Best Practices to Reduce Zero Day Exploits

Feb 22, 2022 By Indusface In Indusface
As cybercrime is rising by the hour, security is a huge concern for everyone today. One of the most effective ways to protect the systems from being hacked is detecting and fixing the vulnerabilities. However, now attackers began to take advantage of security flaws known only to them. Zero-day exploits are very difficult to prepare for as they’re quite unpredictable.
View Video
alienvault

What you need to know about Log4Shell

Feb 17, 2022 By Emily Davignon In AT&T Cybersecurity

Photo by ThisIsEngineering from Pexels Considered one of the largest exploitable vulnerabilities in history, Log4Shell affects many as Log4J is one of the most extensively used logging libraries. An issue that has existed for almost a decade but just recently was discovered, Log4Shell leaves companies vulnerable to the full extent of these attacks. AT&T Alien Labs blogged about the vulnerability back in December 2021, with more technical detail.

Read Post

Copyright © 2026 OpsMatters™. All rights reserved.