Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

Community Vigilance, Enterprise Response: Addressing CVE-2024-21626 in Rancher

In backend engineering, many days follow a familiar rhythm: coffee, code reviews, maybe deploying a new feature. But occasionally, the routine is interrupted by a message that signals a different kind of challenge, like a Slack notification from the security team: “Hey, we’ve identified a potential issue. Need to sync up.” This post details one such instance—our journey addressing CVE-2024-21626, a privilege escalation vulnerability reported in Rancher.

SentinelOne Outage: Why Early Detection and Independent Monitoring Matter

When SentinelOne, a leader in cybersecurity and endpoint protection, experienced a major outage last week, thousands of organizations were suddenly left in the dark. With SentinelOne down for hours, IT and security teams scrambled for information and updates. But there was a critical missing piece: SentinelOne has no public status page. This gap left customers frustrated, searching for answers on social media, Reddit, and unofficial channels.

Top 7 SOAR Tools (as of 2025)

Security Orchestration, Automation, and Response (SOAR) platforms empower security teams to streamline and accelerate their response to cyber threats. By integrating with existing security tools, automating repetitive tasks, and standardizing incident response workflows, SOAR helps organizations proactively defend against attacks while improving operational efficiency.

Regulation Nation: The what, when, why and how of the new CMMC for MSPs

As the cybersecurity landscape continues to evolve, the U.S. Department of Defense (DoD) is ramping up efforts to ensure that contractors and their vendors adhere to robust security standards. One of the key initiatives driving this transformation is the Cybersecurity Maturity Model Certification (CMMC). But what does CMMC mean for Managed Service Providers (MSPs) and IT shops, and how can you ensure your business is prepared to meet these new compliance requirements?

Michael Donovan, VP of Product at Docker, has a hot take on shift left security

Shift left means improving security at the early stages of software development. Is it the best approach? See the full webinar: https:/cloudsmith.com/webinars Get to know Cloudsmith: About Cloudsmith We offer the world's best cloud-native artifact management platform to control, secure, and distribute everything that flows through your software supply chain. Cloudsmith operates at enterprise scale, reduces risk, and streamlines builds.

AI threat hype: why chasing ghosts leaves real vulnerabilities exposed

With AI at the center of media and industry focus, cybersecurity teams are increasingly putting pressure on themselves to prepare for AI-fueled cyber attacks. According to Ivanti’s 2025 State of Cybersecurity research, half of IT security professionals ranked “yet unknown weaknesses” as a high or critical threat – the same as or higher than compromised credentials, supply chain risks, DDoS attacks and other real-world threats.

System Hardening Explained: Types, Techniques, Examples & Mistakes to Know

The broad umbrella of today's IT security includes standards, tools, technologies, and human practices that reduce risk and protect your systems. System hardening is one conceptual catch-all for those components of IT security — but what does system hardening mean in relation to your actual day-to-day operations? And how do you achieve system hardening without burdening your whole team?

How to Safeguard Healthcare Data in ITSM: Ivanti and Protecto

The healthcare sector, perhaps more than any other, needs to scrutinize the balance between data utility and data privacy. Healthcare organizations must manage large amounts of sensitive data while complying with stringent regulations such as the Health Insurance Portability and Accountability Act (HIPAA). For IT teams seeking to implement AI-augmented service management, that responsibility weighs heavily.
Sponsored Post

Understanding Security Log Analytics vs. SIEM for Midsized Companies Targeted by Cybercriminals

SecOps teams at midsize companies face a unique set of challenges when it comes to managing organizational cybersecurity. Midsize companies (those with 100-999 employees and $50 million-$1 billion in annual revenue, according to Gartner) possess significant financial resources and valuable data that may be targeted by digital adversaries. But, unlike larger enterprise organizations, midsize companies can't always afford to invest heavily in the expensive security tools and dedicated IT security staff needed to prevent cyber attacks.