Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What is SCA (Software Composition Analysis) software?

Jan 26, 2024 By GitGuardian In GitGuardian
SCA or Software Composition Analysis is an important security tool that helps you understand how your application is made up. Our software is built from open-source components and these components can have vulnerabilities or simply be malicious. SCA scans our applications to identify these components and lets us know if there are vulnerabilities or issues within it. In this short video we explain what SCA tools are and how they work as well as there role in application and cyber security.
View Video
CalCom

Windows Password Guidelines: Updated Best Practices for 2024

Jan 25, 2024 By Keren Pollack In CalCom
Setting and enforcing a policy for strong passwords should be a top priority for organizations in their cyber hygiene practice. Best practices and recommendations keep being updated since this issue is so critical for attack prevention. In fact, compromised passwords are responsible for 81% of successful attacks.
Read Post
CalCom

Hardening Tools 101

Jan 24, 2024 By Keren Pollack In CalCom
Server hardening refers to the actions performed to reduce the server OS and application attack surface. this is done by changing the default configurations of the system’s components (servers, applications, etc.) and removing unnecessary components. Out of the box, Server OS are more function-oriented rather than for security, which means that unnecessary functions are enabled. Default, insecure configurations reflect a potential attack vector.
Read Post
CalCom

How MITRE Attack Mapping & CIS Control Mapping Fortify Your Network

Jan 23, 2024 By John Gates In CalCom
A correlation between ATT&CK Mitigations and CIS Controls, often termed as a ‘high-level’ mapping, show case the count of mapped ATT&CK (Sub-)Techniques within each ATT&CK Mitigation. Additionally, it provides the total number of ATT&CK (Sub-)Techniques associated with the respective ATT&CK Mitigation. Mitre attack mapping accurately and consistently maps adversary behaviors relevant to ATT&CK techniques as part of cyber threat intelligence (CTI).
Read Post

Store API keys and other secrets securely in python using env variables

Jan 23, 2024 By GitGuardian In GitGuardian
In this Tech Tip Tuesday video we share how to securely store secrets like API keys or other credentials environment variables. To do this we use the python dotenv project to store secrets in a.env file and load them into local memory. Subscribe for more tech tips, on Tuesdays and other days.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.