Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

%term

the cyber helpline

Ultimate Guide to Securing Your Devices: Step-by-Step Tips for Online Safety

Aug 13, 2024 By The Cyber Helpline In The Cyber Helpline
Whether you've experienced a security breach, are setting up new devices, or simply enhancing your current security practices, this guide provides a step-by-step walkthrough to help you get back online securely. We've got you covered, from setting up your phone and laptop to tweaking essential security settings and securing your apps.
Read Post

API Security Testing on Free Swagger collection

Aug 13, 2024 By VISTA InfoSec In VISTA InfoSec
API security is a critical aspect of modern web applications, ensuring that your APIs are robust and secure from potential threats. In our latest video, we dive into API security testing using a free Swagger collection. Swagger, an open-source framework, allows developers to design, build, document, and test their APIs with ease. By leveraging Swagger collections, you can perform comprehensive security testing to identify vulnerabilities such as injection flaws, data exposure, and improper authentication. This proactive approach helps in mitigating risks and protecting your API endpoints from malicious attacks.
View Video
levelblue

The State of Phishing-Resistant MFA

Aug 13, 2024 By Sarah Lefavrais In LevelBlue
In our increasingly interconnected world, the specter of cybercrime looms larger than ever, casting a shadow over people, businesses, and governments alike. Among the slew of cyber threats bombarding entities daily, phishing attacks are a particularly pernicious menace. With each day, bad actors hone their techniques, leveraging the latest tools and psychological tactics to craft sophisticated phishing campaigns that are clever enough to defy all but the closest scrutiny.
Read Post
Forescout

Cybersecurity Teams, It's Time to End the Dept. of 'No'

Aug 13, 2024 By Rik Ferguson In Forescout
In a never-ending effort to do their job and secure their environments, cybersecurity teams often bear the brunt of negative perceptions, labelled as the department of ‘No.’ “No” to admin privileges, “No” to personal devices, and “No” to connecting unapproved technologies. These repeated denials, although done with the best intentions, can stifle innovation and create frustration within organizations. This perception needs to change.
Read Post
Forward Networks

Navigating the New Era of ISO 27001: Insights for IT and Security Leaders

Aug 13, 2024 By Renata Budko In Forward Networks
In our border and perimeter free world, connected infrastructure becomes more and more complex. Security tools need to keep up by adjusting to the new application delivery models and adapting to the shifting threat environment. That's why the recent update to the ISO 27001 compliance standard is so pivotal — it introduces new controls around data security, DevOps, and network security to help future-proof our cybersecurity strategies.
Read Post
splunk

Observability Meets Security: Tracing that Connection

Aug 13, 2024 By James Hodgkinson In Splunk
As outlined in a previous post, OpenTelemetry and Splunk Observability Cloud can provide great visibility when security teams investigate activity in modern environments. In this post, we look at another aspect of this visibility: how you can use traces to see directly into the workings of an application to find a potential threat. Let’s imagine we’re the security analyst, and a message comes across from the Security Operations Center (SOC).
Read Post
splunk

What Is Digital Forensics? The Weapon Against Cybercrime

Aug 13, 2024 By Kayly Lange In Splunk
In 2016, a house in Middle, Ohio, went up in flames. The owner of the home, Ross Compton, claimed he was asleep when the fire broke out, waking just in time to hastily pack a suitcase, smash his bedroom window, and make an escape. However, the very technology keeping Compton alive unraveled his alibi and led to his arrest. Compton had a pacemaker, and the police, suspicious of his account, secured a warrant to access its data.
Read Post
CalCom

MadLicense CVE-2024-38077 RCE Threatens All Windows Servers

Aug 13, 2024 By John Gates In CalCom
The latest CVE-2024-38077 Remote Code Execution vulnerability (RCE) and coined MadLicense has been rated as absolutely critical with a CVSS 3.1 score of 9.8. The Windows Remote Desktop Licensing (RDL) service has a vulnerability that enables network attacks with low complexity, affecting all versions of Windows Server from 2000 to 2025 (all Windows Servers).
Read Post

Copyright © 2024 OpsMatters™. All rights reserved.