Tenable

DECEMBER 13, 2022

Improperly evaluating the cybersecurity capabilities of prospective IT service providers and managed service providers (MSPs) can put your organization's data and systems at risk. Privilege account management. Systems management. Patch and vulnerability management. log management processes and policies.

How To 52

How To Compliance Policies Conference 52

Xebia

OCTOBER 27, 2022

As device vendors learned more about securing devices, they were able to patch or mitigate these low hanging fruits on the devices. This usually meant that I was looking at the cloud based backend for managing multiple IoT devices. You can configure and even manage devices from a central point. Here’s a good blog post: [link].

IoT 130

IoT Cloud Software Review Systems Review 130

Tenable

AUGUST 5, 2022

Topics that are top of mind for the week ending Aug. Drive best practices for security hygiene, such as automated vulnerability management, asset inventorying and vulnerability mitigation, as well as secure software development practices. The Impact Of Assessing And Addressing Log4j Installations Proactively ” (Tenable blog).

Development Team Review 52

Development Team Review Software Review Systems Review Technical Review 52

Tenable

JUNE 27, 2023

Read on to learn more about the threat landscape and some tactics to manage the threats. In this blog post, we look at the true nature of vulnerabilities and their fixes on the shop floor. So, vulnerability management it is, then. It is a pretty charged topic in the OT world, but bear with me. So, what is a vulnerability?

Software Review 53

Software Review Firewall Windows Systems Review 53

Tenable

JULY 18, 2019

In part one of our five-part series on Vulnerability Management fundamentals, we explore the four stages of the Cyber Exposure lifecycle. . At Tenable, we are pioneering the discipline of Cyber Exposure to help cybersecurity teams measure and manage their cyber risk. But as with other steps, patching comes with its own challenges.

IoT 75

IoT Infrastructure Programming Analysis 75

Tenable

APRIL 19, 2024

The report, divided into nine chapters, covers topics including research and development; technical performance; responsible AI; and policy and governance. In addition, CIS released brand new Benchmarks for GitLab, Google Chrome Browser Cloud Management and MariaDB. x Benchmark v2.1.0 CIS Cisco IOS XE 17.x x Benchmark v2.1.0

Artificial Inteligence 73

Artificial Inteligence Trends Technical Advisors Analysis 73

Ivanti

AUGUST 28, 2023

In a previous blog post, I discussed the two main areas to audit before the European Union’s updated Network and Information Security Directive (NIS2) becomes ratified law in October 2024. Moreover, when certain conditions are met, persons in management positions could be temporarily suspended ( Article 32-5b ).

Security 67

Security Technical Advisors Technical Review Compliance 67

Tenable

MARCH 20, 2024

In the first and second posts of this three-part blog series, we highlighted key challenges that limit the modern enterprise’s ability to protect its OT and IoT assets. Discover assets and monitor risks OT and IoT environments comprise a diverse range of devices with varying management methods and communication protocols.

IoT 70

IoT How To Network Tools 70

Linux Academy

MARCH 18, 2019

One of the topics you may not often think of as being all that important to security is user accounts on systems. We spend so much time on other things — like managing firewall rules, system patching , analyzing report data, etc. that user accounts are often a neglected topic. Patch Management. Data Backups.

Systems Review 60

Systems Review Infrastructure Linux Firewall 60

Tenable

MARCH 17, 2023

Security Spotlight - Episode 1: The Ransomware Ecosystem (Tenable) How the Nation’s Energy Organizations Can Stand Up to Ransomware Threats (CISA) 2 - FBI shines light on ransomware threat to critical infrastructure And continuing with this topic, we’re also learning from the U.S. VIDEOS Tenable.ot 3 - CISA: Get hip to LockBit 3.0

Infrastructure 52

Infrastructure Groups ChatGPT Generative AI 52

Tenable

JULY 14, 2022

While recognizing that otherwise simple security measures like patching can have impact on operations for OT systems like SCADA systems, neglecting it leaves the door wide open for substantial consequences. For example, patching vulnerabilities in OT systems is challenging because small errors can shut down entire plants and facilities.

Infrastructure 52

Infrastructure Transportation Internet System 52

Tenable

DECEMBER 9, 2022

Ensure you have a full, continuously updated and actively managed IT asset inventory. To get all the details, read the blog “ Are You Ready for the Next Log4Shell? And swing by Tenable’s Log4j resources page , which has links to FAQs, white papers, blogs, plugins, how-to videos, on-demand webinars and more.

Software Review 52

Software Review SMB Malware Development Team Review 52

Tenable

OCTOBER 29, 2021

This blog post will explore tactics and vulnerabilities leveraged by attackers and how they compare to the treats of the season. To defend RDP, ensure you’re staying up-to-date and patching or mitigating vulnerabilities like BlueKeep (CVE-2019-0708), which is still a favorite among attackers. Vulnerability Management.

SMB 98

SMB Software Review Minimum Viable Product Systems Review 98

Tenable

OCTOBER 28, 2022

You can also check out Microsoft365DSC , an open source tool for managing Microsoft 365 tenant configurations. How to Choose a Modern CSPM Tool to Reduce Your Cloud Infrastructure Risk ” (Tenable blog). “ How to Choose a Modern CSPM Tool to Reduce Your Cloud Infrastructure Risk ” (Tenable blog). “ Kinda, sorta.

Cloud 52

Cloud Malware Spyware Authentication 52

Linux Academy

MARCH 4, 2019

This month, we’ll discuss some topics that are typically overlooked or taken for granted. This month, we’ll be covering the following topics: Backups. Managing accounts. As we continue through this month’s topics, we’ll take a look at user accounts on our systems. User Accounts. Network Awareness. User accounts?

Infrastructure 60

Infrastructure Backup Systems Review Linux 60

Tenable

SEPTEMBER 9, 2022

Topics that are top of mind for the week ending Sept. Adequate password management policies and practices. Timely patching of the software products they use. The Cloud Security Alliance published its “ Top Threats to Cloud Computing ” report earlier this summer, and every month it zooms in on each threat on its blog.

Security 52

Security IoT Open Source Linux 52

Capgemini

NOVEMBER 14, 2023

Navigating the complexity of enterprise asset management in the energy and utilities sector Mark Hewett Aug 8, 2023 Facebook Twitter Linkedin Enterprise Asset Management (EAM) is a crucial component of any asset-intensive industry and as technology continues to evolve, managing assets effectively and efficiently is becoming increasingly complex.

Energy 52

Energy Enterprise Infrastructure Network 52

Datavail

JULY 21, 2020

Data breaches or data privacy is not surprising topics in today’s world, in the first six months of 2019 alone 4.1 Managing Security Groups: VPC security group are like firewall at the subnet level which controls access to DB instances in VPC. It plays a significant part in managing who all can access RDS instance.

AWS 98

AWS Database Administration Authentication Groups 98

d2iq

AUGUST 27, 2020

This standard is applicable to all Federal agencies that use cryptographic-based security systems to protect sensitive information in computer and telecommunication systems (including voice systems), as defined in Section 5131 of the Information Technology Management Reform Act of 1996, Public Law 104-106.

Government 98

Government Transportation Telecommunications Healthcare 98

Tenable

JUNE 26, 2019

Department of Homeland Security requiring federal agencies to speed up the time it takes to patch critical vulnerabilities from 30 days to 15 days. As with all vulnerabilities, knowing which ones could actually affect your infrastructure can help save time and resources when it comes to patching. DHS Directive: “Patch Faster”.

Research 49

Research Guidelines Analysis Report 49

Tenable

OCTOBER 27, 2023

For several topics, only roughly half of directors noted they were receiving information related to the area — indicating a gap and an opportunity for management,” reads the report, highlighting areas like third-party cybersecurity risk considerations and cyber program maturity assessments.

Artificial Inteligence 63

Artificial Inteligence Artificial Intelligence Technical Review Backup 63

Tenable

SEPTEMBER 29, 2020

Six vulnerabilities in a popular license management product put industrial control systems at risk for remote attacks. CoderMeter is a licensing software produced by Wibu-Systems designed for license management and antipiracy in industrial control systems (ICS). Background. Please note Tenable VPR scores are calculated nightly.

System 55

System Industry Analysis System Design 55

Linux Academy

MARCH 25, 2019

This topic of network awareness is dear to my heart — not because of what it does but because it is network-based and I started out in the IT field as a network engineer, so networking holds a special place for me. Well, off to April and new topics. What do I mean by “network awareness”? See you next week!

Network 96

Network Infrastructure Linux Open Source 96

Linux Academy

MAY 6, 2019

In the past few weeks, we’ve discussed patch management and using vulnerability scanning to see what vulnerabilities are in your infrastructure, and then we dove into the importance of data backups , as well as passwords and policies such as using MFA and proactively identifying compromised passwords to help secure your infrastructure.

Infrastructure 60

Infrastructure Firewall Malware Backup 60

CTOvision

NOVEMBER 4, 2015

The following are some of the hot topics in the federal technology ecosystem (from FedTechTicker.com and TopTechTicker.com ): Fed Tech Ticker. Q&A: Managing the Pentagon's 'Wicked' Problems - Nextgov. Agile training, delivered agilely - FCW.com (blog). Bureau of Reclamation sprinting to patch - FCW.com.

CTO Coach 82

CTO Coach Energy Guidelines Agile 82

Tenable

JANUARY 19, 2024

Navigating an exceptionally complex landscape, CISOs are having to do more with less and risk personal legal exposure,” reads a blog post about the report. “The Mitigation recommendations include: Keep all operating systems, software and firmware updated, and prioritize patching known exploited vulnerabilities in internet-facing systems.

Infrastructure 71

Infrastructure Malware Government Technical Review 71

CTOvision

MARCH 18, 2016

The following are some of the hot topics we are tracking in the technology ecosystem: Technology Ticker. Carahsoft's Evan Slack: Automatic Security Patches Key to Better Cybersecurity - ExecutiveBiz (blog). GeekWire Deals: Learn to manage IT environments with this discounted certification course. Katie Kennedy.

Small Business 60

Small Business Budget Games Video 60

Tenable

OCTOBER 20, 2021

Pam Phillip, senior public relations manager, spent her early career in psychology, and Maria Tabiou, an award-winning security engineer, has her degree in business. Not everyone was like Giuliana Carullo, senior research manager, who knew at age eight that she wanted to work in information technology (IT). .

Industry 98

Industry Software Engineering Quality Assurance Engineering 98

Xebia

JANUARY 5, 2022

In this blog we discuss 6 pointers on application logging to help you on your way! There are many security topics that are relevant if it comes to logging data. The recent events with Log4J show that we should ensure that our logging infrastructure is patched, hardened, and monitored. But what makes an application log “Good”?

Applications 130

Applications Software Review Systems Review Course 130

Xebia

JANUARY 5, 2022

In this blog we discuss 6 pointers on application logging to help you on your way! There are many security topics that are relevant if it comes to logging data. The recent events with Log4J show that we should ensure that our logging infrastructure is patched, hardened, and monitored. But what makes an application log “Good”?

Applications 130

Applications Software Review Systems Review Course 130

Tenable

SEPTEMBER 2, 2022

Topics that are top of mind for the week ending Sept. As an NCSC data science researcher explains in a blog post , to test software for vulnerabilities and weaknesses, one must understand how it works, but this is often difficult with ML, for a variety of reasons. . IT managers started in non-IT roles. And much more!

Security 52

Security Software Review Artificial Inteligence Technical Review 52

Palo Alto Networks

APRIL 2, 2024

manager, Threat and Detection of Palo Alto Networks, discussing the challenges and solutions related to incorporating AI into cybersecurity products. This is particularly evident in the integration of artificial intelligence into cybersecurity products, a topic explored in-depth during this interview.

Artificial Inteligence 68

Artificial Inteligence Weak Development Team Artificial Intelligence Technical Advisors 68

Linux Academy

JUNE 24, 2019

A few years ago when I started in the world of Security Information and Event Management (SIEM), I found that I was missing data that I thought should be there. We expect them to happen while performing patching and updates, but not during normal functions, so it may point out nefarious activities!

Windows 60

Windows Infrastructure Linux Policies 60

Cloudera

JULY 24, 2023

The following sections explain in detail the five major activities involved in managing and operating a custom open source distribution: Development of custom platform 1. for Workload Management, Log Search), increasing, as a result, the total cost of ownership for the custom platform.

Open Source 66

Open Source Analytics Software Review Metrics 66

Tenable

AUGUST 26, 2022

Topics that are top of mind for the week ending Aug. A roundup of patches, trends and incidents to keep an eye on. Moreover, 84% of respondents said they’re either acting on or closely monitoring policy areas related to cybersecurity, while 79% are revising or enhancing their cyber risk management. Budgeting guidance for CISOs.

Weak Development Team 52

Weak Development Team Software Review Technical Review Budget 52

Infinidat

DECEMBER 9, 2020

In defining upgrades, we're specifically discussing within-system upgrades which include issues like firmware and software upgrades, applying software patches, and various types of hardware upgrades where relevant (e.g. That is the focus of my next blog on the topic of de-risking upgrades. . controllers, storage devices, etc.).

Storage 52

Storage Enterprise Hardware Operating System 52

Infinidat

DECEMBER 9, 2020

In defining upgrades, we're specifically discussing within-system upgrades which include issues like firmware and software upgrades, applying software patches, and various types of hardware upgrades where relevant (e.g. That is the focus of my next blog on the topic of de-risking upgrades. . controllers, storage devices, etc.).

Storage 52

Storage Enterprise Hardware Operating System 52