Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How to de-risk patching third party software packages

There are several steps your organization must take to protect itself from potentially exploitable packages. First, you’ll need to carefully review and triage the package vulnerabilities that present risk to your organization, then you’ll need to patch each one. Patching a package may sound easy, but doing so without breaking your product can be tricky. ‍ Before patching, you may review the changelog between versions. Opening the changelog, however, could further the patch dread.

IP Address Alert Investigations: Correlating and Mapping with MITRE ATT&CK

An Internet Protocol (IP) address is the digital equivalent of your home address. Your home has a unique identification number that gives information about your physical geographic location, like road, city, state, and country. An IP address provides similar information about the people and devices connected to a network.

10 Dimensions of Python Static Analysis

Python static analysis, also known as "linting", is a crucial aspect of software development. It involves inspecting your Python code without running it to identify potential bugs, programming errors, stylistic issues, or non-adhering patterns to predefined coding standards. It also helps identify vulnerabilities early in the development process, reducing the chances of deploying insecure code into production.

DEX Updates - Digital Employee Experience - Tanium Tech Talks #96

Today we look at enhancements in the Digital Employee Experience. Tanium's newer modules, Performance and Engage, have been getting rave reviews from customers. Monitor endpoint performance. Survey users for last mile visibility. This falls under the umbrella called "Digital Employee Experience". Check out these new enhancements: Performance Engage Automate repetitive support tasks, deflect helpdesk calls, easily broadcast notifications, send performance alerts, and more. See demos of these in-demand features in today's episode.

What To Know About the CDK Global Ransomware Attack

The CDK Global ransomware attack was first reported in June 2024. Ransomware infected CDK Global, a software vendor that serves thousands of North American car dealerships. This ransomware attack affected over 10,000 U.S. car dealerships, their employees and their customers.

The 11 Best Encrypted Cloud Storage Solutions 2024

No matter what information is being transmitted online, whether you send files, text messages, or upload files to back up in the cloud, the only way to guarantee secure data transmission is by using encrypted services. Encrypted cloud storage is the best method to store your files securely. However, not all cloud services offer the same levels of encryption, resulting in a less private storage method.

Cases: A Year in Review

When we launched cases in early 2023, we saw how teams combined automation with their established processes to respond to known threats. And we realized we were missing a place for security teams to address those new or unknown threats. Enter cases, our solution to case management. Over the past year, our cases feature has become a place where teams can collaborate, track, and report on new and existing workflows.