Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Watch this office hours where we cover best practices for introducing a blocking/prevention strategy using the CI/CD Integration. Security and engineering teams often fail to find a balance between meeting the necessary security objectives for their organization and ensuring maximum velocity. While security teams view the process of blocking new critical severity vulnerabilities as a basic security best practice, engineering teams often push back out of fear that it will create too much friction for their developers.

In 2022, we scanned a staggering 1.027 billion GitHub commits! How many secrets do you think we found? For the 3rd year in a row, I am excited to share with you the findings of The State of Secrets Sprawl! This report from my team at GitGuardian is the most extensive analysis of secrets exposed in GitHub and beyond!

Manual severity assignment requires a case-by-case examination of your open incidents and can be time-consuming for your teams. GitGuardian's severity scoring feature automates this approach, where and when applicable, to the incidents in your workspace so that you can save time on their triaging and prioritization. Automated severity scoring comes in handy after running a historical scan on your perimeter that surfaces hundreds or thousands of incidents. It can help you focus your remediation efforts on the most critical incidents first!

"Netskope Modern DLP" sounds good. Description: Hybrid work and the upsurge in cloud adoption demand an updated approach to data protection, one that ensures your sensitive data stays protected anywhere it goes with high precision. Netskope modern data loss prevention (DLP) provides the highest degree of data protection efficacy, powered by machine learning, and is delivered from the cloud across all cloud services, all business communications and everywhere your users are.

Burnout in the workplace is a growing concern as more and more employees are feeling overwhelmed and exhausted by the demands of their jobs. Burnout can manifest in a variety of ways, including physical and emotional fatigue, lack of motivation, and difficulty concentrating. It can also lead to decreased productivity, increased absenteeism, and a higher risk of mental health issues, in addition to high costs to the companies these employees work for. Burnout is more common in IT professionals due to a combination of factors, such as a lack of work-life balance, lack of recognition, inadequate compensation, and lack of autonomy.

To safeguard the SQL layer against common SQL-based attacks, including Denial of Service, Brute Force, and SQL injections, and to prevent privilege escalations, hardening the SQL server is of utmost importance. Achieving compliance and satisfying auditors also necessitates SQL hardening. By implementing SQL hardening measures at both the application and operating system levels, the organization can significantly reduce its attack surface and eliminate critical vulnerabilities.

Check out the latest product releases from UpGuard!

Digital Forensics and Incident Response? (DFIR) is the cybersecurity field that defines the process and the best practices to follow in order to deal with a cyber attack or a security breach. Join Miguel, a security expert watching a video about a cyber detective investigating a kubernetes breach, and find out what the culprit was!

Do you remember a time before the internet? It's hard to imagine our lives without it now, but there was a time when people believed it was just a passing fad. In this video, we take a look back at the evolution of the internet and how it went from being a niche technology to a global phenomenon that has changed the way we live, work, and communicate. We explore the early days of the internet when people thought it was just a passing trend, and how it evolved into the complex and ever-evolving system we know today.

Grab a cup of coffee and join Ryan Kovar, Mick Baccio, and Audra Streetman for another episode of Coffee Talk with SURGe. The team from Splunk will discuss the latest security news, including: Mick and Ryan shared their takes on responding to 0day vulnerabilities and the trio also discussed GPT-4 and the future of generative AI.