Security Operations

Business Operations | News, how-tos, features, reviews, and videos

8 associations that women in cybersecurity should follow or join

Still a minority in the profession, female cybersecurity professionals can expand their career development and get support from their peers by joining women-only groups.

Feb 27, 2024 12 mins

CSO and CISO Diversity and Inclusion Human Resources

SolarWinds calls SEC charges unfounded and inexplicable, files for dismissal

The SolarWinds court filing demands that SEC charges be dropped for lacking foundation, material proof, or scope of indictment.

Jan 30, 2024 4 mins

Legal

Zero-day, supply-chain attacks drove data breach high for 2023

Zero-day exploits, supply chain attacks fuel 72% increase over previous record for incidents of compromise. Another increase is expected for 2024.

Jan 26, 2024 4 mins

Cyberattacks Cybercrime Zero-Day Vulnerabilities

Researchers demo new CI/CD attack techniques in PyTorch supply-chain

The proof of concept shows it's possible to upload malicious PyTorch releases to GitHub by exploiting insecure misconfigurations in GitHub Actions.

Jan 12, 2024 11 mins

Supply Chain Vulnerabilities

Roundup: Global software supply chain security guidance and regulations

Software suppliers and consumers alike will increasingly need to be familiar with global requirements and regulations designed to mitigate software supply chain attacks.

Jan 8, 2024 8 mins

Government Security Practices Supply Chain

How the new Instegogram threat creates liability for organizations

Organizations might be at risk of liability for images containing malicious code they post on social media even if they were unaware of it.

Dec 26, 2023 4 mins

Legal Risk Management Threat and Vulnerability Management

Google expands minimum security guidelines for third-party vendors

Google's updated Minimum Viable Secure Product (MVSP) program offers advice for working with researchers and warns against vendors charging extra for basic security features.

Dec 8, 2023 4 mins

Application Security Supply Chain

Almost all developers are using AI despite security concerns, survey suggests

About 96% of developers are using AI tools and nearly eight out of 10 coders are bypassing security policies to use them, while placing unfounded trust into AI’s competence and security, according to the report by Snyk.

Nov 29, 2023 4 mins

Development Tools Security Practices Supply Chain

Understanding OWASP’s Bill of Material Maturity Model: Not all SBOMs are created equal

The push to create more detailed, reliable, and mature BOMs with sufficient detail and depth to counter supply chain attacks continues to advance with the latest OWASP model.

Nov 15, 2023 9 mins

DevSecOps Devops Security Practices

Major Australian ports shut down following cyber incident

DP World Australia restricted port operations for two days following the discovery of a cyber incident.

Nov 12, 2023 2 mins

Cyberattacks Cybercrime Supply Chain