Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

October 2024

kroll

DORA vs. NIS2 vs. PSD2: Navigating the Evolving Regulatory Landscape

Oct 30, 2024 By Kroll In Kroll
The legal and regulatory landscape is constantly evolving, continually intensifying the demands placed on organizations. As well as meeting the requirements of existing regulations such as the Payment Services Directive 2 (PSD2), companies must contend with the upcoming introduction of the Network and Information Security Directive or NIS2 (Directive (EU) 2022/2555) and the Digital Operational Resilience Act (DORA).
Read Post
kroll

Magecart Attacks: Prevention Tips and Security Best Practices

Oct 28, 2024 By J. Andrew Valentine In Kroll
Kroll has investigated many different tactics that threat actors use to steal consumer data on e-commerce sites. These types of attacks can be especially damaging for organizations that are responsible for storing customers’ personal and financial information that is collected during transactions.
Read Post

Navigating DORA Compliance: Preparing for the EU's New Digital Operational Resilience Regulation

Oct 25, 2024 By Kroll In Kroll
The European Union’s (EU) new Digital Operational Resilience Act (DORA) is set to reshape how financial institutions handle their cybersecurity and operational risks. With enforcement from January 2025, DORA will impose a range of new standards and requirements. While there is an awareness of DORA in the marketplace, some firms do not fully understand its risks and consequences due to its broad scope. Similar to the introduction of the EU GDPR, many businesses might underestimate the effort needed to achieve compliance.
View Video
kroll

Container Security Best Practices

Oct 21, 2024 By Kroll In Kroll
Containers are transforming how enterprises deploy and use applications - their efficiency and cost-effectiveness making them a cornerstone of modern IT strategies. Compared to traditional virtualization, where the server runs a hypervisor, and then virtual machines with entire guest operating systems and software run on top of the hypervisor, containers allow more versatility since they simplify management and provide faster provisioning of applications and resources.
Read Post
kroll

What Is a Red Team Exercise & Why Should You Conduct One?

Oct 11, 2024 By Kroll In Kroll
While no-one can predict if and when a cyber attack will take place, a red team exercise is as close as an organization can get to understanding its full level of preparedness. Red team exercises conducted by certified ethical hackers are key to uncovering hidden vulnerabilities and addressing them before they impact a company’s cyber resilience.
Read Post

Webinar Replay - AI Security Testing: Prompt Injection Everywhere

Oct 2, 2024 By Kroll In Kroll
Kroll’s LLM penetration testing has seen it analyze data sets of OpenAI models, non-public models and RAG systems. It has used this to produce an anonymized dataset that catalogs vulnerabilities from all LLM engagements. Kroll has found a worrying prevalence of prompt injection attacks in the LLM cases it has investigated and shares its findings in this briefing.
View Video

Copyright © 2024 OpsMatters™. All rights reserved.