Tag: cyberattack
Report Surfaces Thousands of Potential Vulnerabilities in GitHub Workflows
An analysis of 2.5 million GitHub Actions workflow files belonging to 553,000 organizations and personal users surfaces thousands of potential vulnerabilities ...
Checkmarx Report Highlights Need for AppSec Collaboration
A research report published by Checkmarx finds the same basic malicious software developed using multiple programming languages as cyberattackers industrialize their malware development processes. Checkmarx, a provider of code scanning tools, shared ...
The New Norm for Modern Apps: Security Observability
Louis Vistola | | automation, cyberattack, machine learning, modern applications, observability, security observability, TraceableObservability has burst onto the scene across all types of operational and security-focused activities. Its need is being driven by increased demands for businesses to be more responsive to changes and more ...
Best Practices for Cloud Incident Response
Cloud computing is now mainstream, with almost all organizations running at least some resources in the public cloud—whether software-as-a-service (SaaS), platform-as-a-service (PaaS) or infrastructure-as-a-service (IaaS). Security teams have been scrambling to adapt ...
Cybersecurity 2021: Are You Really Prepared for a Cyberattack?
Veronica Haggar | | appsec, cyberattack, Cybersecurity, Cybersecurity 2021, devsecops, IAM, identity access management, passwordless, security threatsAs the majority of businesses are increasingly moving to the online world, employees keep working remotely and more cyberattacks keep happening all over the globe, there is no doubt that embracing DevSecOps ...
Meeting the Need for Speed in Cyber Threat Response
contributor | | automation, cyberattack, cyberthreat, data breach, hackers, IT security, security information and event management, security response, SIEMIn the very early days of the internet, hackers most likely were "lone wolves." They might be an unhappy customer, a disgruntled employee or a tech-savvy youth who just wanted to see ...
From a Commodore 64 to DevSecOps
We all know the story: a farm, a kid, a Commodore 64, and a modem maxing out at 300bps. A few unexpected phone bills later, and young Ian Allison is figuring out ...
Elasticsearch Ransomware Attacks Highlight Need for Better Security
Recently, reports surfaced that a large number of Elasticsearch servers fell victim to potential ransomware attacks. Ransomware is the type of malware a company doesn’t want on its systems or network. It ...
Network Resilience and Security from A to Z
contributor | | application behavior, applications, cyberattack, developers, development cycle, security, software bugs, testingAn observer watching a bunker shot by legendary pro golfer Gary Player was heard to say: “I’ve never seen anyone so lucky in my life.” The player retorted: “Yes, and the more ...
The Cost of Not Building with Security in Mind
contributor | | cyberattack, devsecops, rugged devops, security, software defects, software developmentThe unfortunate reality for today’s organizations is the fact that a security breach is bound to happen. Major breaches are happening with alarming frequency and fill the news headlines almost daily. And ...
