Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

How Secure and Healthy Are Your Custom SCOM Management Packs?

Thanks for using the NiCE Log File Management Pack. We know it’s a favorite among experts building custom SCOM Management Packs. But here’s a quick question: When was the last time someone checked your custom Management Packs for security vulnerabilities, performance bottlenecks, or health risks?

Zero Trust Starts with Zero Blind Spots

Zero Trust is more than a buzzword in today’s cybersecurity playbook, it’s a strategic imperative. Federal agencies, defense operations, and civilian infrastructure providers are all under mounting pressure to deploy Zero Trust Architecture (ZTA) frameworks that are not only compliant but truly effective. But there’s a problem: Zero Trust can only succeed if it’s built on real-time, actionable insight. That means eliminating blind spots.

Enhancing Vulnerability Management Through Exposure Management

Exposure management improves vulnerability management by integrating various attack surfaces and enhancing asset visibility. It promotes a proactive approach to continuously manage threats and exposures. Organizations define their risk appetite for quicker decision-making on vulnerabilities. A zero day response strategy enables swift action on critical vulnerabilities. Ivanti's approach includes strong asset discovery and prioritization, utilizing threat intelligence for effective risk management.

Seeing the Bigger Picture: Why Security Needs Depth, Not Just Products

A recent BBC article, “Weak password allowed hackers to sink a 158-year-old company,” outlined a serious security lapse. This case reinforces the message that we, at Teneo, advocate every day: true resilience comes from defense in depth, i.e. policy, product and process, not just tools at the edge. In a recent customer engagement, we discussed a transition from VPN to ZTNA. While ZTNA offers enhanced security including continual checking, improved segmentation and a minimized attack surface.

Build. Release. Run. Repeat. But Where's the Control?

In every engineering organization, from fintech unicorns to 20,000-seat global bank, delivery happens in a loop. Code gets built. Releases get pushed. Systems run 24/7. Then it all happens again. This cycle isn’t an opinionated lifecycle dreamed up by a consultant or vendor, it’s just the reality of software delivery today.

Securely query data sources on your Tailscale network using Private Data Source Connect in Grafana Cloud

Balancing security with your observability needs can be a difficult task. We know our users want to leverage platforms like Grafana Cloud to visualize and gain valuable insights into their data, while also keeping their data sources private and secure.

From legacy to security: Ivanti Connect Secure

When I took on leading the Network Security Group (NSG) at Ivanti in October 2024, it was a bit like a homecoming for me. You see, I spent almost two decades overseeing the development of these products before moving on to other responsibilities at Ivanti. NSG is responsible for building and maintaining Ivanti Connect Secure, Policy Secure, and Neurons for ZTNA, among other solutions.

Data Governance and Ethics in Transportation AI

Artificial Intelligence (AI) and big data are fundamentally reshaping transportation, from smart traffic management and logistics optimization to predictive maintenance and autonomous vehicles. However, while the technology evolves at a rapid pace, the non-technical aspects of implementation, such as governance, ethics, privacy, and transparency, often lag behind. To build systems that are not only intelligent but also trustworthy, we must develop frameworks that prioritize secure data sharing, privacy preservation, and explainable AI (XAI).

Payment Orchestration: Leveraging AI for Smarter Payment Routing and Fraud Prevention

The digital payment landscape has undergone a remarkable transformation with the integration of artificial intelligence technologies. Modern businesses face the challenge of managing complex payment ecosystems while maintaining security and customer satisfaction. Payment orchestration emerges as the solution that bridges this gap, creating unified systems from fragmented payment infrastructures.

What's the Difference Between a Vulnerability Scan and a Penetration Test?

You want to secure your systems, that's a good first step. But then you're told you need a vulnerability scan. Or maybe a pen test. Maybe both? They sound similar, but they aren't the same thing. In fact, they serve very different purposes. Understanding the difference could save your team from false confidence, wasted money, or security gaps you never saw coming. If you're trying to figure out what's right for your business, this breakdown should help. And once you're running tests, tools likepentest reporting at Cyver Core help your team stay organized and actually fix what matters.