Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Episode 5: Exploring PAM360's certificate lifecycle management (CLM) capabilities

In the fifth episode of the PAM Masterclass training series, we will learn how to manage the entire lifecycle of certificates within ManageEngine PAM360. We will cover topics such as certificate deployment, renewal, and expiration, providing practical strategies for maintaining a certificate-secure IT infrastructure. By the end of the session, you will gain knowledge about the process needed to effectively optimize your certificate management processes using PAM360's native certificate life cycle management module.

Custom Frameworks

TrustCloud supports several standards and frameworks out of the box, including SOC 2, CMMC, and ISO 9001, to name a few. The best part is that TrustCloud is constantly adding new frameworks to expand the TrustCloud Common Control Framework (TCCCF). Organizations, regulations, and business needs are constantly evolving, and therefore, you might need certain frameworks that are currently not supported by the TrustCloud platform. To enable you to meet your ever-evolving framework needs, TrustCloud now offers the flexibility of creating your own custom frameworks and standards.

Inventory - What is it? How can you use it as evidence?

An inventory is a specific list of data that is gathered to provide information about a certain part of the business. The inventory is inspected by an automated test or by a human to determine if one or more controls are satisfied and to analyze the results of the inventory. Examples of inventories are users, security incidents, devices, servers, databases, logs, etc.

Polyfill Supply Chain Attack Injects 100,000+ Websites with Malware via CDN Assets

Polyfill.js is a Javascript library that helps old browsers run new modern features which these old browsers do not support natively. The library is popular among developers for helping them offer consistent user experience regardless of the browser environment the user is using. In February 2024, a Chinese company bought the domain polyfill.io and the Github account associated with it. Since then, they’ve been serving malware via cdn.polyfill.io as pointed by the team at Sansec.

Jira Project Recovery Guide: How To Restore Deleted Jira Project

If you lose a Jira project it can seem like a terrifying experience, but there are ways to restore those deleted projects. Whether it’s an unintentional or purposeful deletion that has to be reversed, if you understand Jira’s restore functionality and the value of backup solutions, it may save a lot of your time, money, and work.

New MOVEit Bug Actively Exploited Within Hours of Public Disclosure

A high-severity security flaw in Progress Software's MOVEit Transfer platform is being exploited in the wild just hours after its disclosure. This vulnerability, identified as CVE-2024-5806, allows attackers to bypass authentication mechanisms and pose as any valid user, thereby gaining access to sensitive files.

Chinese APT Groups Use Ransomware for Espionage and Diversion

Cyberespionage groups are increasingly using ransomware not just for financial gain but also as a tactic to complicate attack attribution, distract defenders, or serve as a secondary objective to data theft. A recent report highlights the activities of ChamelGang, a suspected Chinese advanced persistent threat (APT) group, which uses the CatB ransomware strain to target high-profile organizations globally.

BDRSuite Overview | Backup and Disaster Recovery Solutions by Vembu

In this video, we'll provide an in-depth overview of BDRSuite by Vembu, a comprehensive and cost-effective backup and disaster recovery solution. BDRSuite is designed to protect a wide range of IT workloads, including VMs (VMware, Hyper-V, KVM, Proxmox VE, oVirt), Servers & Endpoints (Windows, Linux, Mac), SaaS Applications (Microsoft 365, Google Workspace), Cloud VMs (AWS, Azure), NAS/File Shares and Databases & Applications (Microsoft Exchange Server, SQL Server, SharePoint Server, PostgreSQL, MySQL).