The introduction of containers and micro-service architectures have changed the way we develop, deploy, and run our applications. Not only has this changed application development, but it’s also created some visibility challenges for application security. Move those applications to the cloud and we only amplify those challenges. How do we architect our cloud services and […]
Today’s columnist, Amos Stern of Siemplify, says while the heyday of SOCs may have passed because of the pandemic, security pros have adjusted and need to focus on the threats at hand: insecure home networks, cloud adoption and phishing.
The MITRE ATT&CK Framework is widely recognized as instrumental in providing a common language and framework for describing attack techniques and effectively sharing information across organizations. However, we’re just starting to see the potential benefits this matrix can provide when integrated directly into security tools. Uptycs recently announced a major release of its product that […]
Today’s columnist, Chris Hoff of ReversingLabs, points out that the SolarWinds attack has caused the industry to forget that most breaches are more like the Target hack, where a little-noticed HVAC system was exploited. Hoff says organizations have to start by improving visibility.
Visa has been a leader in establishing a risk operations center. Today’s columnist, Padraic O’Reilly of CyberSaint, explains why more companies find the need for a ROC to complement its security operations center.