Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

Snyk

Dive into AI and LLM learning with the new Snyk Learn learning path

Sep 18, 2024 By Michael Biocchi In Snyk
Snyk Learn, our developer security education platform, just got better! We have expanded our lesson coverage and created a new learning path that covers the OWASP Top 10 for LLMs and GenAI, and is entirely free! As AI continues to revolutionize industries, ensuring the security of AI-driven systems has never been more critical.
Read Post
sedara

Inside the Cloud: Unintended Privileges

Sep 18, 2024 By Courtney Bell In Sedara
This is the third article in a series about cloud-based attack vectors. Check out our last article about Cloud-Based ransomware! As Identity Access Management (IAM) becomes more complex, it becomes possible for an attacker to exploit the capabilities of legitimate permissions alone or in combination, escalating privileges and gaining potentially devastating levels of access. Because these privileges are legitimate, these attacks can be difficult to detect until the damage is already done.
Read Post
datatrails

Immutable Ledgers: Recording Time-Sensitive Decisions and Knowledge

Sep 18, 2024 By Steve Lasker In DataTrails
In a time when everything said, whether factual, fake, or AI-created, may be recorded and posted on the internet, it’s more important than ever to ensure that what was recorded accurately represents a point in time. When someone claims you said, “I was Smoking on a flight, watching Star Wars, the best special effects movie of all time,” was that a false claim? Did they include the date and the context?
Read Post
knowbe4

North Korean Hackers Target Software Developers With Phony Coding Tests

Sep 18, 2024 By Stu Sjouwerman In KnowBe4
Researchers at ReversingLabs warn that North Korea’s Lazarus Group is targeting software developers with phony job interviews. The threat actors are posing as employees of major financial services firms and send coding assessment tests as part of the interview process. Our team recently recorded a webinar that covers this exact topic, as our cybersecurity experts discuss how we spotted the red flags and stopped it before any damage was done.
Read Post
knowbe4

SANS Releases Guide to Address Rise in Attacks on Manufacturing and Industrial Control Systems

Sep 18, 2024 By Stu Sjouwerman In KnowBe4
Increased ransomware attacks on industrial control systems (ICS), mixed with general ICS insecurity found across the manufacturing sector, has given rise to a guide specifically addressing this risk. Manufacturing has been a target of ransomware for quite some time — I’ve even covered a recent attack focused on credential harvesting.
Read Post
one identity

Active Roles release 8.2: Enhancements for hybrid cloud and Entra ID

Sep 18, 2024 By Vipin Jain In One Identity
You may already be using Active Roles to manage privileged access, identity and Active Directory (AD) from a single pane of glass. But now, you can get more. Active Roles release 8.2 is poised to offer multiple new features that support customers who are migrating to the cloud and applying web-based resources during the continuing market evolution. It also introduces enhancements to management within Entra ID.
Read Post
lookout

Detect and Defend: 5 Tips for Guarding Against Insider Threats

Sep 18, 2024 By Lookout In Lookout
Not every cybersecurity threat originates outside of the organization. External threats tend to receive more attention, but an IBM report shows that a breach caused by an insider threat can carry an even higher cost. In fact, malicious insider attacks cost an average of $4.99 million despite accounting for just 7% of breaches. That makes them the most expensive breach vector in the report.
Read Post
lookout

5 Zero Trust Remote Access Solutions Your IT Team Needs to Know

Sep 18, 2024 By Lookout In Lookout
In the past, organizations could control how, when, and where their employees accessed sensitive data. Now, in the age of hybrid and remote work, employees can connect to company networks from any location over nearly any device. Safeguarding data while granting employees the access they need is a delicate balance. That’s where zero trust remote access solutions come into play.
Read Post
bitsight

CISA KEV performance in the Financial Sector

Sep 18, 2024 By Ben Edwards In BitSight
As a security data nerd I am absolutely spoiled here at Bitsight. So much so that I have to stop myself from doing little projects and requests so I can dive into the “big” stuff1. So it is always refreshing when folks see a piece of research and decide “hey can you give me more information on my little corner of the world.” Then of course and can throw off those notions of “stopping” and just dive back in.
Read Post

Securing Digital Health: Cybersecurity Challenges in Rapid Healthcare Transformation #shorts

Sep 18, 2024 By Rubrik In Rubrik
The healthcare industry, traditionally slow in digital transformation due to stringent regulations, is now experiencing rapid change. As digitization accelerates, vast amounts of personal and professional data are being stored across healthcare systems—making them prime targets for cybercriminals. This sector’s rich data environment, coupled with evolving cybersecurity practices, creates a unique challenge. Unlike the well-established security measures in banking and financial services, healthcare's cyber defenses are still maturing.
View Video

Copyright © 2024 OpsMatters™. All rights reserved.