Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Security

ssl2buy

What is Spear Phishing: How It Works and How to Stay Safe?

Dec 19, 2024 By SSL2BUY In SSL2BUY
Spear phishing plays a significant role in causing data breaches and cyberattacks. It costs businesses and individuals millions of dollars each year. Spear phishing is different from traditional phishing, which covers a broad spectrum. It targets specific individuals or organizations and uses tricks to make the victim reveal some sensitive information. This article explores spear phishing. It covers its unique traits and offers expert tips to identify and stop such attacks.
Read Post
SecurityScorecard

Day in the Life of a CISO: A Vendor Breach: Assessing Our Exposure

Dec 19, 2024 By SecurityScorecard In SecurityScorecard
It’s 10:47 PM, and I’m halfway through binge-watching the latest must-see series when my phone buzzes. A notification from SecurityScorecard has my attention instantly: one of our critical vendors has just reported a breach. I hit pause, grab my laptop, and dive straight in. As much as I’d love to ignore it for a few hours, cyber risks don’t come with snooze buttons. Before panic sets in, I’m logging into the SecurityScorecard platform.
Read Post
riscosity

DPDP, India's Privacy Law

Dec 19, 2024 By Anirban Banerjee In Riscosity
India's Digital Personal Data Protection (DPDP) law, enacted in 2023, represents a pivotal step in safeguarding personal data privacy while fostering accountability among entities handling such data. As businesses grapple with its requirements, understanding its core mandates, applicability, timeline, and implications is critical for compliance and operational efficiency.
Read Post
Egress

First ever Magic Quadrant for Email Security Platforms by Gartner

Dec 19, 2024 By Egress In Egress
In cybersecurity, email has always been a critical concern. However, we feel the new 2024 Gartner Magic Quadrant for Email Security Platforms has signaled a shift in how we approach email protection. We believe this new Magic Quadrant encompasses a broader spectrum of email security providers to reflect the evolving threat landscape and the need for more integrated solutions.
Read Post
avast

This year's resolution: remove nosey apps from your device

Dec 19, 2024 By Emma McGowan In Avast
Some apps are plain greedy—like a stranger you invite for a meal who insists on ordering everything expensive on the menu. Except instead of a rib eye, pasta, and chocolate soufflé, it’s your data they’re collecting. Here’s what you can do to set some boundaries and reclaim your privacy in 2025.
Read Post
neosystems

How (and Why) Cyber Attacks are Exploiting the Supply Chain

Dec 19, 2024 By Stuart Itkin In NeoSystems
Your business is a link in one or more supply chains. Your business depends on those who supply to you, and in turn those you supply to (and their customers and their customers’ customers) depend on you. Any disruption at any point affects the flow of goods, services, and information affecting others in the supply chain. It’s important that we understand the risk in our supply chain and the potential risk we pose to our customers, especially cyber-related risk. Why?
Read Post
cycognito

Emerging Threat: Apache Struts CVE-2024-53677

Dec 19, 2024 By Emma Zaballos In CyCognito
CVE-2024-53677 is a critical (9.5) remote code execution (RCE) vulnerability affecting Apache Struts, an open-source framework for building Java-based web apps. This vulnerability affects the framework’s file upload logic, allowing attackers to enable paths traversal and perform remote code execution using malicious files.
Read Post
Corelight

Cooking up a year of faster, smarter, and tastier security

Dec 19, 2024 By Vijit Nair In Corelight
If there’s one thing I love more than delivering great products, it’s delivering great food. The holidays are my time to channel my inner celebrity chef: I’ll burn a few cookies, over-spice a roast, and then miraculously pull it all together for a meal that leaves everyone asking for seconds (or at least not asking for the takeout menu).
Read Post

Nailing a Security Compliance Audit with Teleport with George Chamales & Jason Shropshire

Dec 19, 2024 By Teleport In Teleport
Join Jason Shire (COO of Infusion Points) and George Tal (Secure Systems Architect) as they share valuable insights on implementing security compliance with Teleport. Learn why traditional DIY approaches to compliance often fall short and how Teleport can streamline your compliance journey, from FedRAMP to SOC 2. This talk covers practical solutions for common compliance challenges, including access controls, audit logging, session management, and FIPS requirements. Perfect for security professionals, compliance officers, and engineering teams looking to simplify their compliance implementations.
View Video

Copyright © 2024 OpsMatters™. All rights reserved.