Log4j、メモリ攻撃、クラウドセキュリティ、ランサムウェアに関するインサイト
Get the latest on an APT’s Log4Shell exploit; tips to prevent memory attacks; cloud security trends; metaverse security; and more! ...
6 Cloud Security Tips For 3rd-Party Risk
It's critical to understand the security risk that third parties pose to your cloud infrastructure and how managing third-party access using secure practices can help....
OT サイバーセキュリティ対策の推奨事項を取り入れて米国政府のポリシーの成果を向上する
A recent NSTAC report to the president outlined additional strategies to secure the convergence of information technology and operational technology....
サプライチェーンにおけるサイバーセキュリティ対策、雇用、予算、K8、ランサムウェアに関するインサイト
Get the latest on staffing challenges; nation-state assaults on critical infrastructure; supply chain security tips; ransomware weak links; Kubernetes security; and more! ...
CVE-2022-27510: Citrix ADC とゲートウェイ認証バイパスにおける「緊急」の脆弱性
Citrix publishes an advisory to address multiple flaws in its ADC and Gateway products, including a critical vulnerability....
マイクロソフト 2022 年 11 月月例セキュリティ更新プログラム、62 件の CVE (CVE-2022-41073) を修正
Microsoft addresses 62 CVEs including four zero-day vulnerabilities that were exploited in the wild....
シフトレフトは まだ進行中
Experts say “shift left” practices are falling short. Here’s what you need to know and what you can do about it. Researchers are calling on companies to do a better job of educating developers about security after a study shows shift left practices have fallen short. Shifting left is an a...
CYBERSECURITY SNAPSHOT: 給与動向、ランサムウェアサミット、次世代 MFA
Get the latest on salary trends for CISOs and cybersecurity pros; CISA’s call for adopting phishing-resistant MFA; the White House’s ransomware summit; and more!...
How to Improve Your Incident Response in the Cloud
A look at the security best practices and mindset to adopt to better detect and recover from malicious activity in your cloud infrastructure....
Tenable One サイバーリスク管理プラットフォームでデータの力を解き放つ
データエンジニアリングチームが Tenable One の開発任務を与えられた際、自分たちには強力なパートナーが必要であると認識していました。 Here’s how we selected Snowflake to help us deliver on the promise of exposure management....
CVE-2022-3786、CVE-2022-3602: OpenSSL、深刻度の高い 2 つの脆弱性にパッチを適用
OpenSSL has patched two vulnerabilities, pivoting from its earlier announcement, in version 3.0.7....
What You Should Know about the New OpenSSL Vulnerability
How to detect which OpenSSL version you’re running and if your organization is exposed to the critical OpenSSL vulnerabilities - CVE-2022-3602 (Remote Code Execution) and CVE-2022-3786 (Denial of Service) - and what to do about it....
