Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

Building Cyber Resilience Through Collaboration

As cyber threats grow in sophistication and frequency, organizations worldwide are grappling with the challenge of safeguarding their systems and data while maintaining operational continuity. Cyber resilience, the ability to prepare for, respond to, and recover from cyber incidents, is no longer just a competitive advantage…it’s a critical necessity.

How to make Kosli generic attestations using the kosli-attest-generic command

All but one of the kosli attest commands calculate the true/false compliance value for you based on their type. For example, kosli attest snyk can read the sarif output file produced by a snyk scan. The one that doesn’t is kosli attest generic which is “type-less”. It can attest anything, but Kosli cannot calculate a true/false compliance value for you. Often the tool you are using can generate the true/false value, which is then easy to capture.

Building Next-Generation SIEM Operations for Enterprise Security

Cybersecurity today is not just about defending against attacks. It’s about proactively managing risks in a landscape where threats are growing in volume and sophistication. With data volumes rising by 30% in just the past year and the average cost of a data breach now exceeding $4 million, traditional Security Information and Event Management (SIEM) systems are no longer enough.

Moving to a zero-trust model with Kosli's custom attestations

The Kosli CLI provides several attest commands, such as kosli attest snyk, kosli attest jira, etc. These attestations are “typed” - each one knows how to interpret its own particular kind of input. For example, kosli attest snyk interprets the sarif file produced by a snyk container scan to determine the true/false value for that individual attestation.
Sponsored Post

How to Discover Advanced Persistent Threats in AWS

When it comes to managing AWS cloud security, a growing concern for security operations (SecOps teams) is the increasing sophistication of digital threats. While conventional cyber threats deploy widely known tools and techniques in crude, all-or-nothing attempts to breach enterprise security controls, sophisticated attacks known as Advanced Persistent Threats (APTs) employ more advanced technologies and methods to gain and maintain access to secure systems for long periods of time.

The Four Big Questions of Cybersecurity | Security Insights, Ep. 47

Ivanti's Chris Goettl and Robert Waters take on four big questions facing cybersecurity teams today, namely: Listen in for those questions and a few answers too. Ivanti finds, heals, and protects every device, everywhere – automatically. Whether your team is down the hall or spread around the globe, Ivanti makes it easy and secure for them to do what they do best. Ivanti is IT for the way we work now. Integrated solutions for everything IT touches. So, employees can work better, anywhere, and everywhere.

Cyber Security Risk Management: Frameworks and Best Practices

Cyber threats, since 2020, have become a silent epidemic for enterprises and customers alike. Sounds dramatic? Think again: In 2023, cyberattacks hit enterprises every 39 seconds and burnt through $4.99 million per hit, making security not just an IT checklist but a critical enterprise-wide priority. Fast forward to 2025, and the message is clear: adapt or lose out to your competitors.

Integrating Google SecOps with Bindplane January 2025

Google SecOps (formerly Chronicle) is Google Cloud's security operations platform (SIEM) that helps you detect, investigate, and respond to cybersecurity threats. Integrating Bindplane enables an easy way of standardizing how you efficiently collect, process, and forward security-relevant data to Google SecOps. In this webinar you’ll get a hands-on demo of how to configure log collection with the BindPlane Agent, and best practices for data standardization using open standards and OpenTelemetry. This will let you focus on the important task of investigating threats with Google SecOps instead of configuring telemetry pipelines.