VodafoneIdea Limited, a leading Indian Telecom Operator has successfully achieved SOC2 Attestation. After undergoing a rigorous auditing process, VodafoneIdea achieved SOC2 Attestation from VISTA InfoSec, a well-known Global Cybersecurity Consulting, and Certification organization. The SOC2 Audit and Attestation is an assessment of internal controls and security practices conducted by the independent auditors of VISTA InfoSec.

Audit Policy: Object Access: Certification Services” is a setting in the Windows operating system that controls whether or not the system generates audit events when a certificate is requested or used for authentication purposes.

We continue to innovate quickly to help you improve your compliance and security programs. This past month, we launched our own security awareness training video, along with these exciting platform updates: ‍

APIs are everywhere, enabling businesses to maximize business value. From digital transformation and application modernization to cloud migration and microservices, API-first app architectures are finding their way into every technology touchpoint, giving rise to API sprawl. Consequently, most DevOps and security teams are uncertain about all the active and exposed APIs, and are lacking proper strategies to manage API sprawl.

Audit Policy: Object Access: File System is a setting in the Microsoft Windows operating system that determines whether the system generates audit events when certain actions are taken on files and directories stored on the file system. When this setting is enabled, the system will log events such as when a file or directory is read, written to, or deleted. This can be useful for tracking changes to sensitive files or for troubleshooting issues with file access.

In October 2022, data center construction reached a record high, reflecting our reliance on collecting, storing, and securing data. This reliance permeates businesses across all industries and puts pressure on data centers storing and processing large amounts of data–much of which is sensitive.

I am yet to meet a CISO who has been given unlimited resources to secure the organization, and in almost all cases, there is more work that can be done to improve security. So given infinite time and resources, how to prioritize the next strategic initiative or project? The increasing maturity of security control frameworks such as those developed by NIST and CIS provide a good structure for maturing a cyber security programme, mapped to preventing common tactics, techniques and procedures .

You probably know what a code signing certificate is and why it is needed. But for the uninitiated, a code signing certificate is a digital security certificate used by software developers to sign their apps, drivers, software, executable codes, and others. It provides end-users the surety that the software code they received hasn’t been altered or compromised. A Certificate Authority (CA) will provide you with a code signing certificate after conducting the required validation.

The GitGuardian team is still striving to provide the broadest secrets detection engine, helping you find and fix all sorts of hardcoded secrets! Learn more about the specific and generic detectors our team has released in 2022 in this post.

Attacks targeting the software supply chain are on the rise. Indeed, data from the Mend Open Source Risk Report shows a steady quarterly increase in the number of malicious packages published in 2022, with a significant jump in Q3, which jumped 79 percent from Q2. The European Cybersecurity Agency (ENISA) predicts that supply chain attacks will increase fourfold by 2022.