Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

tripwire

WordPress Plugin and Theme Developers Told They Must Use 2FA

Sep 12, 2024 By Graham Cluley In Tripwire
Developers of plugins and themes for WordPress.org have been told they are required to enable two-factor authentication (2FA) from October 1st. The move is intended to enhance security, helping prevent hackers from gaining access to accounts through which malicious code could be injected into code used by millions of websites running the self-hosted version of WordPress.
Read Post
1Password

1Password deepens partnership with CrowdStrike to streamline and simplify business cybersecurity

Sep 12, 2024 By Matt O'Leary In 1Password
Together, CrowdStrike and 1Password are working to ensure every identity, application, and device is protected from threats. Now, you can get the combined power of 1Password and CrowdStrike for less when you bundle 1Password Extended Access Management and CrowdStrike Falcon Go.
Read Post
armo

CEL and Kubescape: transforming Kubernetes admission control

Sep 12, 2024 By Oshrat Nir In ARMO
Admission control is a crucial part of the Kubernetes security, enabling the approval or modification of API objects as they are submitted to the server. It allows administrators to enforce business logic or policies on what objects can be admitted into a cluster. Kubernetes RBAC is a scalable authorization mechanism, but lacks the fine grained control over different Kubernetes objects. This creates the need for another layer of control which is Admission Policies.
Read Post
protecto

Why AI Guardrails Need Session-Level Monitoring: Stopping Threats That Slip Through the Cracks

Sep 12, 2024 By Amar Kanagaraj In Protecto
AI guardrails are vital for ensuring the safe and responsible use of AI/large language models (LLMs). However, focusing solely on single prompt-level checks can leave organizations vulnerable to sophisticated threats. Many company policy violations and security risks can be cleverly split across multiple, seemingly innocent queries. To effectively protect against these threats, a more comprehensive approach is needed — session-level monitoring.
Read Post
protecto

Gen AI Guardrails: 5 Risks to Your Business and How to Avoid Them

Sep 12, 2024 By Amar Kanagaraj In Protecto
As businesses increasingly adopt Generative AI (Gen AI) to enhance operations, customer engagement, and innovation, the need for robust AI guardrails has never been more critical. While Gen AI offers transformative potential, it also introduces significant risks that can jeopardize your business if not properly managed. Below, we explore five critical risks associated with Gen AI and provide strategies to avoid them.
Read Post
bitsight

Continuing to Evolve Next-Gen Asset Attribution Through Service Provider Collaboration

Sep 12, 2024 By Miguel Reis In BitSight
One of the primary reasons that the Bitsight Security Rating is widely respected and closely correlated with real-world security outcomes is the scale and sophistication of our asset attribution capabilities. In a recent post, my colleague Francisco Ferreira shared an update on the momentum building with Bitsight Graph of Internet Assets (GIA), the AI-powered engine we use to map assets to organizations and build our Ratings Trees.
Read Post

Hunting with the LimaCharlie Query Console - Webinar

Sep 12, 2024 By LimaCharlie In LimaCharlie
Managing various data sources and retaining data can be a hassle for SecOps teams. LimaCharlie removes this headache by providing one-year of telemetry storage for any data type - EDR, cloud provider logs, authentication logs, and many more. This allows your organization to preserve a valuable source for threat hunting and anomaly detection. Watch this webinar where we explore LimaCharlie’s Query Console, and learn how you can structure queries to quickly hunt through any historical data set, find value, and uncover hidden gems.
View Video

Copyright © 2024 OpsMatters™. All rights reserved.