A new report released today by the EU Agency for Cybersecurity (ENISA) showcases the product vulnerability management landscape, unveiling challenges faced by sectoral CSIRTs and PSIRTs.

The U.S. Department of Justice is elevating investigations of ransomware attacks to a similar priority as terrorism in the wake of the Colonial Pipeline hack and mounting damage caused by cyber criminals, a senior department official told Reuters.

Get ready for one of the biggest nights at ISACA, to celebrate your colleagues & friends at the FREE 2021 ISACA Awards Virtual Gala🎉- featuring global performances, including pop sensation Rachel Platten! Tag a colleague so they don’t miss out! Sign up: bit.ly/3ie3kY9

Improve your security posture and efficiently manage risk with our new capabilities in Security Command Center Premium. SCC now supports CIS benchmarks for Google Cloud Platform Foundation v1.1 as well as fine-grained access control. Get the details ↓ cl…

The severity and volume of incidents has led insurers to become much tougher with corporate customers

Contribute to d3sre/Other_Presentations development by creating an account on GitHub.

Блог Алексея Лукацкого "Бизнес без опасности"

Google's new tool helps developers discover the dependencies of the open source packages they use and known security vulnerabilities.

EternalPetya has more than 10 different names. Many do not realize that CryptoLocker is long dead. These are not isolated cases but symptoms of a systemic problem: The way we name malware does not work. Why does it happen and how can we solve it?

Guest: , Security Engineering Manager in the Detection and Response team @ Google Topics: What is special about detecting modern threats in modern environments? How does the Google team turn the knowledge of threats into detection logic? Run through an…

Reporting known or suspected security vulnerabilities in digital products is one of the best ways for developers and services to become aware of issues. Formalizing actions to accept, assess, and manage vulnerability disclosure reports can help reduce known…

The European Commission has issued 2 new sets of #StandardContractualClauses that enhance requirements of the #GDPR. These clauses address some of the issues related to the transfer of personal data of EU/EEA citizens. Learn more in our blog: ow.ly/3V1Q50F4UhP

General

The new CIS Benchmarks Configuration Certification enables vendors to develop new products with the CIS Benchmarks built in, tested, and certified.

News about recent CIS Benchmark releases, mappings to Controls v8, and upcoming webinars. Thanks to our community contributors!

Have you heard about the ARM Template Best Practice Analyzer (BPA)? he Template BPA is an ARM template security validator that scans #ARM templates and checks that #security best practices are being followed before deployment. github.com/Azure/template…

The first official release of Open Security Controls Assessment Language (OSCAL) is now available for download! This release marks an important milestone for the OSCAL project & for the earlier adopters/implementers of OSCAL #securityautomation: pages.nist.gov/OSCAL/