Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

Are airports and airlines prepared for cyber threats post COVID-19?

The COVID-19 pandemic has unveiled numerous vulnerabilities and shortcomings in the airline industry. What’s worse for aviation in particular over other industries is how airports have essentially served as the portal for the virus traveling from one country to another across the globe. As a result of severe travel restrictions implemented by nearly every country, airline companies have been hit hard and forced into a dire financial situation.

Continuous Intelligence for Atlassian tools and the DevSecOps Lifecycle (Part 1)

Implementing and operationalizing the best practices and capabilities of DevOps into an organization is a key predictor for increased customer satisfaction, organizational productivity and profitability. Doing so successfully can be a challenging endeavour. Implementing DevOps can be particularly difficult because it oftentimes requires technology changes, process changes and a drastic change in mindset.

The Top Cybersecurity Websites and Blogs of 2020

The information security landscape is constantly evolving, which is why it's so important to stay up to date with the latest trends, threats, and advancements. Given that a Google search for cybersecurity websites produces millions of results, we thought we thought we'd compile a list of the best. Adam Shostack & friends is a group blog on security, liberty, privacy, and economics.

Veriato Vision Intro and Demo

Veriato Vision employee monitoring software lets you record and track all of your employees' activity... so you’ll know if they are working hard or hardly working. Vision gives you granular control over what activities and programs you monitor. Once the Vision software is deployed on the company's PCs, Macs, and Androids, you can remotely monitor by the department, group, or individual. Additionally, you can monitor employees that are off-network or working remotely.

Netwrix Data Classification - Overview

Netwrix Data Classification is a software platform that helps you solve your most critical data security, content optimization and compliance needs, regardless of where your data is located. Every day employees produce tons of data. This skyrocketing data growth causes problems across the organization. Users can’t find the documents they need. Sensitive files get placed on public shares. Data storages reach their limits. It’s harder and harder for you to satisfy requests from your legal and compliance departments. Don’t let this pressure get a hold.

The MITRE ATT&CK Framework: Command and Control

Most malware these days has some level of Command and Control. This can be to exfiltrate data, tell the malware what instructions to execute next, or download encryption keys in the case of ransomware. In each case of command and control, the attacker is accessing the network from a remote location. Having insight into what is happening on the network is going to be crucial in addressing these techniques.

A guide to penetration testing for compliance

In many cases, penetration testing – a type of ethical hacking engagement designed to identify and address security vulnerabilities in networks, systems and applications – is required. Sometimes this requirement is specified directly, while in other cases it is implied by a need to build audit or assessment processes to mitigate cyber risk. This blog identifies some of the most common pen testing standards and regulations and provides guidance about the type of testing required.