Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

March 2024

securitysenses

Greening the Digital Frontier: Sustainable Practices for Modern Businesses

Mar 1, 2024 By SecuritySenses In SecuritySenses
The push towards digital transformation has significantly improved efficiency, productivity, and accessibility for businesses globally. However, the environmental footprint of digital operations has increasingly become a focus for concern. As companies continue to leverage digital technologies, the need for integrating sustainable practices into their operations has never been more critical. This article delves into the environmental impact of digitalisation and outlines practical strategies for businesses aiming to achieve sustainability in the digital age.
Read Post
cyjax

The Cybersecurity and Geopolitical Discussion - Broken China? - Episode 20

Mar 1, 2024 By Cymon In CYJAX
To find out, check out Episode 20 of the Cyjax Geopolitical and Cybersecurity Podcast. Here’s a summary of what’s on the table… In the latest episode of the Cybersecurity & Geopolitical Discussion, the hosts Ian Thornton-Trump CD, CISO for Cyjax, Lisa Forte of Red Goat Security and Philip Ingram MBE of Grey Hare Media, delve into the complexities of China’s image from an outsider’s perspective.
Read Post
ignyte Team

FAQ: What Are the DoD Requirements for Wiping Data?

Mar 1, 2024 By Max Aulakh In Ignyte
In today’s digital age, destroying data is not as easy as it once was. Before the advent of computers, if you needed to destroy sensitive government information to prevent it from falling into the wrong hands, all you often needed to do was light some papers on fire. With computers, you might think that it’s a simple matter. After all, if you’ve ever accidentally deleted a file or had a hard disk crash, you’ve probably lost data and haven’t been able to recover it.
Read Post
jumpcloud

How to Install PostgreSQL 16 on RHEL 9

Mar 1, 2024 By David Worthington In JumpCloud
PostgreSQL is one of the leading and widely used open source relational database management systems (RDBMS) that stores structured data in tables, just like MySQL. It is used by developers in their tech stacks and even by large enterprises and corporations to store website and application data. PostgreSQL uses SQL query language to store and manipulate data and also provides JSON support.
Read Post
CalCom

LAN Manager authentication level best practices

Mar 1, 2024 By John Gates In CalCom
LAN Manager (LM) authentication level is a security setting that determines how Windows systems authenticate network connections. It is a legacy authentication protocol developed by Microsoft for use in older versions of Windows network operations. There are three main protocols involved in LAN Manager Authentication: The LAN Manager Authentication Level setting allows you to choose which protocols your system will use or accept for authentication.
Read Post
ThreatQuotient

Exploring Cybersecurity in the Financial Sector: The Role of DORA and ThreatQ

Mar 1, 2024 By Guest Blog In ThreatQuotient
As the Principal Threat Intelligence Services Engineer and Trainer at ThreatQuotient, my role puts me in front of a diverse range of clients and partners across various industries, offering me a unique perspective on the impact of regulatory frameworks on cybersecurity. Through our European Union (EU) based clients and partners, I have seen the emergence of the need to be compliant with the Digital Operational Resilience Act (DORA).
Read Post
Trustwave

Hunting For Integer Overflows In Web Servers

Mar 1, 2024 By Trustwave In Trustwave
Allow me to set the scene and start proceedings off with a definition of an integer overflow, according to Wikipedia: To be inclusive of all audiences here, in software security we’ve got sources (typically user input) and sinks – where that input (the data) ends up. In order to overflow something (e.g. an integer overflow) we clearly need some way to be able to do that (think pouring water from a kettle into a cup), and that’s the source (us using the kettle) to overflow the cup.
Read Post
Trustwave

Mining Operations: Critical Cybersecurity Threats & Trends Revealed

Mar 1, 2024 By Trustwave In Trustwave
Cybersecurity professionals often point out that threat actors do not differentiate when choosing a victim. To an attacker, a hospital is as useful a target as a law firm or even a mining operation. After all, a mining company has the same attributes that make it as interesting as any other target: proprietary data and customer information, and it must stay in operation. All of which an attacker can exploit for financial gain.
Read Post
datadog

Meet EO 14028 requirements with Datadog Log Management, Cloud Workload Security, and Cloud SIEM

Mar 1, 2024 By Thomas Sobolik In Datadog
As of August 2023, only 3 out of 23 US government agencies were compliant with Office of Management and Budget (OMB) requirements for log management and security observability. These requirements are outlined in M-21-31, a 2021 memorandum that was issued following Executive Order 14028 on improving national cybersecurity. Until all of these agencies implement the new requirements, the federal government’s ability to fully detect, investigate, and remediate cybersecurity threats will be constrained.
Read Post

Copyright © 2024 OpsMatters™. All rights reserved.