Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Security

How the Critical OpenSSL Vulnerability may affect Popular Container Images

The big news this week is that a new CRITICAL OpenSSL vulnerability will be announced on November 1st, 2022. Critical-severity OpenSSL vulnerabilities don’t come along every day – the last was CVE-2016-6309, which ended up only affecting a single version of the software. The more famous vulnerability, known as Heartbleed, came out in 2014. Will this be more like Heartbleed or the vulnerability in 2016? We will soon find out.

Experts warn of critical security vulnerability discovered in OpenSSL

Understand what steps your organization needs to take now to prepare for the upcoming patch to address OpenSSL’s critical security vulnerability on November 1. Security experts are giving organizations advance disclosure of a critical vulnerability discovered in OpenSSL version 3.0 and above, leaving many to speculate about the potential impact to their organization.

It's Cybersecurity Awareness Month-So Let's Talk Automation and Home Security

At this point, anybody in the IT world would have to be living in a cave in the wilderness to not know that October is Cybersecurity Awareness Month. (And since there’s no Wi-Fi in wilderness caves, that scenario is admittedly unlikely.) This week, I wanted to take a closer look at a couple topics, one for work and one at home.

Top Considerations for Building a Lab-to-Cloud Workflow

Since March 2020, cloud adoption has accelerated at an unprecedented rate and across every industry. With the pandemic ushering in the work-from-home era, the ability of organizations to collaborate remotely has become paramount, placing a higher-than-ever premium on cloud technology.

Kintent's Frank Kyazze Takes On Data Connectors Dallas, Identifies Industry Frustration with Security Audits

Recently, we caught up with Frank Kyazze, Privacy Director here at Kintent, to chat about his experience at the Data Connectors conference in Dallas last month. Frank had the opportunity to serve on the “Protecting Against Cyber Attacks” discussion panel while in attendance. Frank took part in the panel, discussing how now more than ever, it is imperative for organizations to be vigilant against bad actors.

Workflow Automation: Intelligent Task Delegation for Groups and Users

We believe compliance should be a team sport. With Workflow Automation, your team can be segmented into “groups”, including DevOps, Engineering, HR, and Legal. TrustOps intelligently delegates tasks, controls, tests, and systems into these groups. Group have owners, who assign each component of your company’s compliance program to the right person within their group.

Workflow Automation: Smart Inventory Management

You can now connect TrustOps to multiple SaaS vendors that you use to run your product and business, and we automatically collect inventory lists from these vendors to satisfy audit requirements. With this new release, TrustOps intelligently creates the following inventory lists for you: Databases in AWS RDS Logs from AWS Cloudwatch Alerts from AWS Cloudwatch Alerts IT assets from Jamf and Duo HR lists from BambooHR and TriNet.

Smart Custom Policies

Kintent policies now offer a new Edit Policy menu option, allowing you to customize existing text, write your own, or bring in the contents of an existing policy by pasting its text. Once in the editor, you will be able to format your policy, choose whether or not (and where) to insert its approval log and related control list, as well as add Kintent control texts. TrustOps also supports Smart Variables — dynamic, auto-updating values representing key attributes of a policy such as its owner, which you can use when composing your policy.