Collaborate Disseminate
The Most Valuable Resource of All: Time This post was authored by Paul Asadoorian, CEO and founder of Security Weekly. Over the last twenty years we have witnessed dramatic changes in the way companies write and ship code. First there was Waterfall, fo… Continue reading The Age of DevOps
I’m studying for the CCSP exam and one of the BC/DR terms that is referenced in my study material is “Maximum Allowable Downtime”. The definition for it is:
MAD (Maxium Allowable Downtime) How long it would take for an … Continue reading Is there a difference between "Maximum Tolerable Downtime" and "Maximum Allowed Downtime"?
I’m reviewing security frameworks to adopt for a startup. We need the framework to be light, hit the highest risk areas first, works well with HIPAA and HITRUST and be able to morph over time as our organization matures. We … Continue reading Most applicable CSF
Kaspersky Lab founder and CEO Eugene Kaspersky says he’s figured out why the U.S. government hates his company. According to Kaspersky, his company’s research into a sophisticated, international cyber espionage operation that targeted government entities in Russia, Iran and Rwanda represents why the Russian anti-virus maker has become a bogeyman for the U.S. government. This reasoning came during public comments Kaspersky made Tuesday during a small event in London. His comments are the most detailed effort among Kaspersky’s multiple attempts to defend his company from allegations the Moscow-based company acts as an intelligence collection tool for Russian spies. Kaspersky talked about his company’s discovery of U.S. intelligence related hacking operations, including those of the NSA-linked “Equation Group” and CIA-linked “Lamberts,” being the reason for the recent firestorm. He specifically emphasized the unveiling of one particular campaign — known as ProjectSauron or Strider — as a driving factor while also implying U.S. involvement with […]
The post Why Eugene Kaspersky keeps talking about ‘Project Sauron’ appeared first on Cyberscoop.
Continue reading Why Eugene Kaspersky keeps talking about ‘Project Sauron’
I was researching about what job position is related with ethical hacking. I found something like SOC and NOC, but I got a little bit confused.
I know SOC tier 1 does programming tasks and information gathering, tier 2 is t… Continue reading Is penetration testing included in the job of a NOC?
SAP announced a new tool today called the Leonardo IoT Bridge designed to help bridge the gap between data coming from sensors in the field and business systems operating inside a firm.
The manufacturing sector is in the middle of a massive shift where machines are being equipped with sensors that transmit torrents of data about their health, and the environment around them, over the… Read More Continue reading SAP wants to bridge the gap between IoT and business data
Can someone please explain to me how the Cipher Feedback Mode works? From what I have read some examples have a shift register in its explanation but some examples don’t. Is there two versions of CFB and what is the differenc… Continue reading Cipher feedback mode with shift registrers
Remote management is essential if you have to run more than three network devices, and is supported by all commercial firewall products. For example:
Palo Alto Networks:
In addition to control and security capability, o… Continue reading Do any open-source firewalls support remote management? [closed]
Capital One is a huge organization with lots of compliance issues related to being a financial services company. It also happens to be an Amazon Web Services customer and it needed a tool to set rules and policies in an efficient way around AWS usage. Last July it started developing the tool that would become Cloud Custodian and today it announced at an AWS event in Chicago that it was… Read More Continue reading Capital One open sources Cloud Custodian AWS resource management tool
I am looking for resources and details on establishing a security operation center (SoC) or network operation center (NoC) based on ITIL or any other applicable regulations. Where can I find good details or experiences of others except for… Continue reading Security Operation Center (SOC) [closed]