New GIAC Cybersecurity Certification
The new GIAC cybersecurity certification shows that you can put modern principles into practice in an automated and repeatable manner
Articles
Everything we have published
463 articles, newest first.
DevSecOps: Why You Should Put “Sec” in DevOps.
It is important to understand the need for security integration in the DevOps environment. Security belongs in the DevOps lifecycle.
iPhones Crashing From Simple Text Messages
The latest Apple mobile OS version iOS 13.4.1 has a text bomb bug that forces iPhones Crashing From Simple Text Messages.
Docker Security Practices
A list of docker security practices for securely configuring your Docker containers and images.
Warning to Apple Users! Possible Device Hack by Just Sending Email
Bugs were found in the Apple mail app which can allow RCE (Remote Code Execution), due to an out-of-bounds write bug and a heap overflow issue.
Personal Data of 267 Million Users Sold by Hackers
Hackers have sold personal data from 267 Million Facebook users causing another major reputation blow on the tech giant.
Zoom Videoconferencing Security Issues Were known to Dropbox
Security vulnerabilities have been unveiled that could allow attackers to covertly control user's computers.
Defense in Depth – The Layered Approach to Cybersecurity
Defense In Depth is a common terminology in modern day cybersecurity practices. It is a strategy that employs a series of mechanisms, to stop an attack on your organization.
Microsoft Offers Free Cybersecurity Service Protection to Healthcare Staff
Recently numerous hospitals became the target of cyber attacks both in Europe and the United States. Microsoft decided to offer its security service AccountGuard for free to healthcare staff as well as human rights and humanitarian organizations.
NIST is Providing Online Cybersecurity Training Resources
The National Institute of Standards and Technology (NIST) has provided information and links to free and low-cost security training content.
All Data Breaches in 2019 & 2020
Many organizations, big and small, have suffered data breaches in 2019 and 2020. The breach details are shown in the table below.
Zoom Usernames and Passwords Compromised and Listed on Dark Web Forum
The Coronavirus crisis has forced many organizations to embrace "work from home". Zoom platform has become increasingly famous due to this, but also for its
Microsoft Exchange Servers Still Unpatched, Leaves them open to Remote Code Execution Vulnerability
Based on a Rapid7 survey more than 357 thousand Exchange Servers are vulnerable to a latest RCE vulnerability which allows an attacker to use an Exchange user