DevOps Security

DevOps Security

Linux Backdoor Infection Scare, Massive Social Security Number Heist

In episode 325, Tom and Kevin discuss a significant backdoor threat that nearly compromised Linux systems globally, stemming from an infiltration into an open-source project called XZ Utils by attackers who gained ...
Seal of the Cybersecurity & Infrastructure Security Agency

Sisense Hacked: CISA Warns Customers at Risk

A hard-coded credential catastrophe: The analytics firm kept big companies’ secrets in an insecure AWS bucket. Government says victims include the “critical infrastructure sector.” ...
Security Boulevard

Backdoor in XZ Utils That Almost Happened

Last week, the internet dodged a major nation-state attack that would have had catastrophic cybersecurity repercussions worldwide. It’s a catastrophe that didn’t happen, so it won’t get much attention—but it should. There’s ...
Managing Secrets Security at any Scale: introducing the GitGuardian Secrets Management Needs Quiz

Managing Secrets Security at any Scale: introducing the GitGuardian Secrets Management Needs Quiz

| | DevSecOps
Leverage our newest quiz to discover the most appropriate approach to managing secrets safely based on where your organization is today and how it will grow in the future ...
™

D3 Security Releases “In the Wild 2024” Report with Analysis and Incident Response Playbooks for the 10 Most Prevalent Cyber Attack Techniques

Vancouver, BC — April 10, 2024 — D3 Security, the leader in smart security orchestration, automation, and response (SOAR), today published In the Wild 2024, the first in a series of reports ...
Annual Security Awards 2024

SE Labs Annual Security Awards 2024

Annual Security Award Winners Announcing the SE Labs Annual Security Awards 2024, where we celebrate security vendors for their exceptional performance in both rigorous testing and real-world feedback from customers. These awards ...

Federal Support for Open-Source Security

In an unexpected move, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced an initiative aimed at bolstering the security posture of open-source software developers. This initiative, as reported by Axios, ...
Continuous ATO: Going from Authority to Operate (ATO) to Ability to Respond

Continuous ATO: Going from Authority to Operate (ATO) to Ability to Respond

This white paper explores best practices designed to help reduce the time and cost of ATOs while improving access to risk data using process automation ...
Reimagined “Just a bill” of Schoolhouse Rock fame

Here Comes the US GDPR: APRA, the American Privacy Rights Act

Enter the lobbyists: A draft federal privacy act has Washington DC buzzing. But it’s just a bill—and it’s a long, long journey before it becomes a law ...
Security Boulevard
]