Now is the time to step up your security
Learn how Cisco Security Step-Up delivers multi-layered defenses against phishing attacks, credential theft, and malicious web exposures.
Cloud Security
Using just-in-time access to reduce cloud security risk
Excessive privileges are a continuing headache for security professionals. As more organizations migrate assets to the cloud, users with excessive permissions can expand the blast radius of an attack, leaving organizations open to all sorts of maliciou…
IBM launches QRadar Security Suite for accelerated threat detection and response
IBM said the new cybersecurity platform is a unified interface that streamlines analyst response across the full attack lifecycle and includes AI and automation capabilities shown to speed alert triage by 55%.
The post IBM launches QRadar Security Suit…
Misconfigured Registries: Security Researchers Find 250 Million Artifacts Exposed
Development teams are exposing critical data and secrets online. Here’s what to do about it.
The post Misconfigured Registries: Security Researchers Find 250 Million Artifacts Exposed appeared first on eSecurityPlanet.
Investors Place Early $4 Million Bet on Stack Identity
Silicon Valley startup emerges from stealth with $4 million in seed-stage funding and ambitious plans to disrupt the IAM governance market.
The post Investors Place Early $4 Million Bet on Stack Identity appeared first on SecurityWeek.
SPanel: Taking Website Security to the Next Level
SPanel is a web hosting environment that takes website security seriously. Learn more about the platform now.
The post SPanel: Taking Website Security to the Next Level appeared first on eSecurityPlanet.
Attackers Abuse Kubernetes RBAC to Deploy Persistent Backdoor
Threat actors have been observed abusing Kubernetes RBAC to create backdoors and hijack cluster resources for cryptocurrency mining.
The post Attackers Abuse Kubernetes RBAC to Deploy Persistent Backdoor appeared first on SecurityWeek.
How CISOs navigate security and compliance in a multi-cloud world
Due to the increasing importance of multi-cloud and the intricate nature of cloud infrastructure, obtaining a comprehensive understanding of the various cloud workloads operating within your system, and ensuring their security, can be challenging. In t…
Google moves to keep public sector cybersecurity vulnerabilities leashed
Google made a recent move to secure state, local, tribal and territorial governments from cyber attacks.
The post Google moves to keep public sector cybersecurity vulnerabilities leashed appeared first on TechRepublic.
Attackers Continue to Leverage Signed Microsoft Drivers
In December of last year, Microsoft worked with SentinelOne, Mandiant, and Sophos to respond to an issue in which drivers certified by Microsoft’s Windows Hardware Developer Program were being used to validate malware. Unfortunately, the problem hasn’t gone away. In a recent Mastodon post, security expert Kevin Beaumont observed, “Microsoft are still digitally signing malware […]
The post Attackers Continue to Leverage Signed Microsoft Drivers appeared first on eSecurityPlanet.