Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

AI - The Good, Bad, and Scary

AI and machine learning (ML) optimizes processes by making recommendations for optimizing productivity, reducing cycles, and maximizing efficiency. AI also optimizes human capital by performing mundane & repetitive tasks 24x7 without the need for rest and minimizing human errors. There are numerous benefits as to how AI can benefit society. As much as AI can propel human progress forward, it can be consequential to our own detriment without proper guidance.

Securing CI/CD Runners through eBPF

During the Open Security Summit 2024, Yahoo! Principal Security Engineer Mert Coskuner and Kondukto CEO & Co-Founder Cenk Kalpakoglu delved into the intriguing topic of securing CI Runners through eBPF agents. Although the title might seem unconventional, it reflects their creative approach to solving security challenges in continuous integration environments. With the rapid digital transformation of businesses, there has been an increasing focus on supply chain attacks and their impact on security.

Microsoft Azure Red Hat OpenShift (ARO) and Trilio Data Protection: Uniting Cloud-Native Excellence

With the exponential growth of cloud adoption and the widespread shift to Kubernetes as the de facto orchestration platform, Red Hat OpenShift emerges as a leading solution. Coupled with the robust cloud infrastructure of Microsoft Azure, Red Hat OpenShift on Azure (ARO) is a managed service that offers OpenShift clusters on Microsoft Azure. It is jointly engineered and operated by Microsoft and Red Hat with an integrated support experience.

Trustwave Embarks on an Extended Partnership with Microsoft Copilot for Security

Trustwave today announced it will offer clients expert guidance on implementing and fully leveraging the just-released Microsoft Copilot for Security, a generative AI-powered security solution that helps increase the efficiency and capabilities of defenders to improve security outcomes.

Security in the Digital Age: How Fax Apps Ensure Confidentiality and Compliance

Where data breaches and privacy concerns are rampant, ensuring the confidentiality and compliance of sensitive information is paramount. From healthcare to finance, legal to government sectors, organizations grapple with the challenge of safeguarding data while adhering to regulatory requirements. Amidst the plethora of communication tools available, fax applications emerge as stalwart guardians of security, offering a robust solution for transmitting sensitive information securely. In this article, we delve into the world of fax apps, exploring how they bolster confidentiality and compliance in the digital age.

The XZ Backdoor CVE-2024-3094

Unveiled on the 29th of March 2024 is the high-stakes investment and prolonged campaign by a malicious actor to plant a backdoor in the Linux software library liblzma to gain access to multiple operating systems via Linux distributions, which arguably worked out successfully. That is until a curious engineer noticed a glitch. Currently known affected upstream software and proposed mitigation.

CVE-2024-3094 XZ Backdoor: All you need to know

On March 29th, it was reported that malicious code enabling unauthorized remote SSH access has been detected within XZ Utils, a widely used package present in major Linux distributions (The GitHub project originally hosted here is now suspended). Fortunately, the malicious code was discovered quickly by the OSS community and managed to infect only two of the most recent versions of the package, 5.6.0 and 5.6.1, which were released within the past month.