New infosec products of the week​: October 26, 2018

Data Theorem introduces automated API discovery and security inspection solution Data Theorem introduced the industry’s first automated API discovery and security inspection solution aimed at addressing API security threats introduced by today’s enterp… Continue reading New infosec products of the week​: October 26, 2018

Tripwire for DevOps offers security configuration assessment of containers

Tripwire unveiled that Tripwire for DevOps now offers security configuration assessment. Made generally available earlier this year as a software-as-a-service (SaaS) solution, Tripwire for DevOps now gives a view of security and compliance risk within … Continue reading Tripwire for DevOps offers security configuration assessment of containers

Tripwire For DevOps External Registry And Alert Capability

Although many organizations are shifting security to the left and embracing the integration of security tools into their continuous integration / continuous delivery pipelines, there are others who have different wants and needs. Private Registries One… Continue reading Tripwire For DevOps External Registry And Alert Capability

The Sky Is Falling! No Wait, That’s Just Our Data in the Cloud!

Back in the good old days, we used to have to order physical servers to run our applications. When servers became too expensive, we found efficiency in virtualization. Why have one box running one server when I could have 10 or more on a single box? Wh… Continue reading The Sky Is Falling! No Wait, That’s Just Our Data in the Cloud!

Cyber hygiene: Where do organizations fall behind on basics?

Tripwire released its State of Cyber Hygiene report, which examined how organisations are implementing security controls that the Center for Internet Security (CIS) refers to as cyber hygiene. The survey found that almost two-thirds of the organisation… Continue reading Cyber hygiene: Where do organizations fall behind on basics?

The MITRE ATT&CK Framework: What You Need to Know

The MITRE ATT&CK Framework has gained a lot of popularity in the security industry over the past year. I have spent a lot of time researching the hundreds of techniques, writing content to support the techniques, and talking about the value to anyo… Continue reading The MITRE ATT&CK Framework: What You Need to Know

Tripwire’s IP360 vulnerability management solution features agent-based scanning

Tripwire announced that agent-based vulnerability scanning is available in the latest version of Tripwire IP360. With the addition of agent-based capabilities, Tripwire IP360 9.0 provides a view of vulnerability risks across hybrid environments, includ… Continue reading Tripwire’s IP360 vulnerability management solution features agent-based scanning

Google to Fix Location Data Leak in Google Home, Chromecast

Google in the coming weeks is expected to fix a location privacy leak in two of its most popular consumer products. New research shows that Web sites can run a simple script in the background that collects precise location data on people who have a Google Home or Chromecast device installed anywhere on their local network. Continue reading Google to Fix Location Data Leak in Google Home, Chromecast