As featured in:
Daily Briefing > V10 Issue 26
February 9, 2021
The CyberWire
John Petrik
Equilibrium Conference | June 24, 2021. Virtually Meet DevSecOps Leaders & Professionals
Register NowMost Recent Articles
Improving Cybersecurity: Impact of the U.S. Executive Order
Last month, the Biden administration signed an Executive Order to improve cybersecurity. One aim of the new order is to regulate what the government considers reasonable security practices.
U.S. Federal Government Agencies: SD Elements Embeds Cybersecurity Training Into DevSecOps
Cybersecurity training programs for developers help build a culture of security in your organization as well as raise awareness about secure coding best practices.
How the Financial Industry Can Prepare for Cyber Threats of the Future
Learn about the latest cybersecurity threats to the financial sector and the importance of implementing new tech with an approach of security by design.
NIST 800-53 Revision 5: Preparing for Transition and Ensuring Compliance
After years of anticipation, the NIST SP 800-53 Rev. 5 was released in 2020. Let's learn how federal information systems can ensure compliance with these security controls.
Building the Next Generation of Cybersecurity Consultants: An Interview with Manny Mand
What does it take to grow the next generation of cybersecurity consultants? Manny Mand discusses his cybersecurity journey and role at Hackers for Change.
Confronting Common Container Security Vulnerabilities
Containers are transforming how businesses deploy and use applications. Find out how you can defend your business against common container security risks.
Penetration Testing at the Speed of Agile
When penetration testing in Agile, yearly is not enough. Learn how continuous penetration testing leads to cost savings, time savings, and more secure software.
SD Elements Meets the U.S. DoD Iron Bank Security Requirements
SD Elements is now available in the U.S. DoD Platform One Iron Bank repository which contains authorized container images hardened to the department’s exacting specifications.
Secure Your Software Build Operations
What secures (or fails to secure) your business does not depend on written policies. It depends on what your development team is doing day in and day out.
TimeGap Theory: Testing for TOCTOU Issues in Web Applications
Your security and development teams should know how to identify and mitigate TOCTOU vulnerabilities. Learn why, and learn how, to test for them in this new book.
How to Build Custom Red Team Testing Tools in C++
A conversation with Steven Patterson about his eBook, which teaches red team testing professionals how to start building Command and Control tools in C++.
The 2021 State of DevSecOps: Challenges and Drivers
In our survey, we found a rising trend toward the adoption of DevSecOps over the last year.
Cloud versus Traditional Security: Protecting Your Data & Systems
To stay secure while embracing the cloud, your organization will need a security program that takes into account the differences between cloud and traditional security.
The Future of Cybersecurity: Five Emerging Trends
2020 upended security strategies and IT roadmaps. Our team identified five cybersecurity trends that will influence security and business priorities moving ahead.
Using Balanced Development Automation to Achieve Both Speed and Security for CMMC
CMMC is a means of unifying cybersecurity standards for the U.S. Department of Defense. Learn how you can achieve compliance with this new standard.
Responding to Ryuk: Healthcare and the Ransomware Threat
Learn how penetration testing can help healthcare providers resist attacks from Ryuk Ransomware, keep patient records secure, and provide uninterrupted care.
API Security Testing: Best Practices & Key Vulnerabilities
Attackers are following the trajectory of software development and have their eyes on APIs. Regularly testing the security of your APIs reduces your risk.
Vulnerability Scanners: Are These Enough for Your Applications?
Security testing has increased considerably over the past decade. But are vulnerability scanners enough to ensure software security?
What to Look for in a Penetration Testing Provider
Ask these five questions to find a penetration testing provider that both satisfies your technical needs and works in harmony with your business.
Moving applications from on-premise to SaaS brings a different set of risks. First among those is the fact that users data is stored in the SaaS provider's data center.