Cybersecurity Framework

Most failed Security Operations Centers (SOCs) that I’ve seen have not failed due to a technology failure. Lack of executive commitment…

View the executive summary of our free cybersecurity report to learn how businesses can achieve better security outcomes.

Looking for a way to make compliance automation easier? Register now for this free ISACA webinar, worth 1 CPE, 16 December (Noon EST), sponsored by Adobe: bit.ly/3dIbUe6

The New Year is only a few weeks away – do you have your governance goals set for 2022? Read the latest in our ISACA Now Blog series for next year’s top priorities for governance pros. bit.ly/3oFGag1

Pandemic response has been top of mind for cyber leaders these past 18 months, and as Covid-19 turns two, the TechTarget/Computer Weekly IT Priorities 2022 study shows buyers are still focused on h...

Kaspersky’s security operations center head explains his approach to burnout prevention in SOC teams.

When a request comes in to give a #cybersecurity presentation to the board, security leaders should jump at the chance to educate the executives ✍ Check out @Gartner_IT’s guide on delivering a 15-minute cybersecurity presentation to the board. #GartnerSEC

Company News: The benefits of good governance systems are widely acknowledged, but often governance programs in smaller organisations are nonexistent or immature. Small and medium-sized enterprises (S...

What people seem to miss: The #Log4Shell vulnerability isn't just a RCE 0day. It's a vulnerability that causes hundreds and thousands of 0days in all kinds of software products. It's a 0day cluster bomb.

Удаленка - отличный способ оценки зрелости ваших процессов! В период пандемии многие предприятия были вынуждены уйти на удаленную работу. По...

1/ #Log4Shell Status determination # Block Rules / Log-Based Detection There's no effective or rather gapless way to detect attacks that use log4shell due to the many ways to obfuscate the strings. Don't put too much trust in any filter/detection pattern.…

Для начала приношу свои извинения, что затянул с итогами. Мероприятий под конец года навалило... Вы никогда не задумывались, платят вам достаточную зарплату или нет? И насколько вы можете рассчитывать, если решите уехать из своего города в Москву? И сколько…

Operational information regarding the log4shell vulnerabilities in the Log4j logging library. - NCSC-NL/log4shell

🚨⭐TOMORROW ⭐🚨 Join @bettersafetynet @johullrich @bojanz for this EMERGENCY LIVE STREAM on the newly published #RCE vulnerability #log4j Learn what blue teams can do to detect the attack & protect their environments against it. Join: youtu.be/oC2PZB5D3Ys

Мероприятие нового типа. Оригинальные форматы откроют возможности сверхэффективного взаимодействия между участниками, спикерами и партнерами

@Laughing_Mantis #log4j Update: IF YOU WERE DEPENDING ON JAVA VERSIONS TO PROTECT YOU FROM RCE INSTEAD OF DIRECTLY PATCHING LOG4J THAT IS NO LONGER A VIABLE MITIGATION STRATEGY *ALL* VERSIONS OF JAVA CAN NOW TRIGGER FULL RCE DUE TO A BYPASS PATCH LOG4J ASAP…