Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

Part 2: Solving the Top 10 Problems with Vulnerability Management

Once again, we're back with all the answers. Traditional vulnerability management comes with many pitfalls, and we're counting down the solutions to all the problems you might be running into. Ivanti's Chris Goettl and Robert Waters break down the back five on our list: a periodic approach to remediation, poor prioritization, lack of business context, overreliance on patch management, and poor metrics and reporting.

Is Your Attack Surface Growing Faster Than Your Security?

In today's digital-first business environment, the race to adopt new technologies often outpaces the strategies to secure them. From cloud services to remote work tools, organizations are rapidly expanding their digital presence. However, with every new tool, platform, or endpoint comes a new potential vulnerability. This expanding "attack surface" can leave businesses exposed, especially if they don't actively monitor and manage it.

How HTTPS (HTTP) Proxies Differ from SOCKS5: Understanding Protocol Differences

A proxy server functions as a go-between for the client and the destination server. It's commonly used to bypass content restrictions, boost online security, and improve anonymity. There are several types of proxy protocols available, with HTTP and SOCKS being among the most widely used. But how exactly do they differ-and how should you decide which one to use?

OWASP CI/CD Top 10: Inadequate IAM

In the race to ship software faster, many teams have turned to automation, decentralised tools, and powerful pipelines. But lurking under the surface of these streamlined processes is a growing and often invisible Identity and Access Management (IAM) threat vector. — a core vulnerability in modern CI/CD security.

How to Build a Successful SIEM Migration Strategy

At least once a week, a team reaches out to discuss migrating from an established SIEM or analysis platform. This major decision is influenced by several compelling factors, which can create significant work for engineering teams and pose risks to the business. The cost of switching to a new platform, often referred to as displacement costs, can be substantial.

Vulnerability Remediation: Automate VR Workflows with Puppet

Secure and resilient infrastructure is non-negotiable. Puppet Enterprise Advanced automates critical tasks like patching, configuration management, and compliance, strengthening your security posture and bridging the gap between security and operations. Deploy essential updates quickly, minimizing threats and maximizing efficiency.

Generating and Tracking SBOMs with Kosli: Enhancing Software Security and Supply Chain Transparency

Software Bill of Materials (SBOMs) are crucial for maintaining software security and supply chain transparency. They provide a detailed list of all components, libraries, and dependencies within a software application, enabling organizations to identify and address potential vulnerabilities, license compliance issues, and other risks. By generating and tracking SBOMs in Kosli, you can establish a centralized and auditable repository for your software’s supply chain information. This allows you to.

Lifespan of TLS certificates is getting reduced to 47 days

In a pretty significant shift for internet security and subsequently certificate management, the CA/Browser Forum has officially voted to reduce the maximum validity period of TLS certificates to just 47 days by March 15, 2029. This move aims to enhance digital security and trust across the web. But as these changes approach, it'll become increasingly crucial for organizations to understand their implications and prepare accordingly. Automation will likely become mandatory.