Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

Protect Against Netscaler Vulnerability CitrixBleed

CitrixBleed, or CVE-2023-4966, is now an infamous security vulnerability affecting Citrix NetScaler that allows attackers to hijack user sessions by stealing session authentication tokens. Unfortunately, it has affected many NetScaler customers including Xfinity, which lost data for 36 million customers as a result of CitrixBleed. There is no way to protect against CitrixBleed by configuring the NetScaler WAF to detect and block it.

How We Leveraged the Honeycomb Network Agent for Kubernetes to Remediate Our IMDS Security Finding

Picture this: It’s 2 p.m. and you’re sipping on coffee, happily chugging away at your daily routine work. The security team shoots you a message saying the latest pentest or security scan found an issue that needs quick remediation. On the surface, that’s not a problem and can be considered somewhat routine, given the pace of new CVEs coming out. But what if you look at your tooling and find it lacking when you start remediating the issue?

Cybersecurity & Compliance: What the Board needs to know and needs to ask

Vigilance and awareness are critical for compliance and cybersecurity maturity. If board members are not familiar with the key indicators of success for maintaining a resilient business and meeting compliance requirements, they are not fulfilling all their responsibilities. Board members need to understand the principles of their duties to alleviate potential exposure to cyber risk and other outage causing events that could harm the organization’s revenue, and reputation.

Navigating AI in SOC

With notable advancements in Artificial Intelligence (AI) within cybersecurity, the prospect of a fully automated Security Operations Center (SOC) driven by AI is no longer a distant notion. This paradigm shift not only promises accelerated incident response times and a limited blast radius but also transforms the perception of cybersecurity from a deterrent to that of an innovation enabler.

Privacy by default

While companies tout the importance of user privacy, few put their money where their mouth is – or in our case, actually live and breathe the concept the way we do as a company. From how we think about our Product to the way we implement our Marketing, Sentry’s take on privacy is rooted in three key fundamentals: Don’t make me choose, think like your customer, and build for tomorrow today.

Detect Ransomware with Flowmon

Experience Ransomware attack step by step and see how you can leverage Flowmon AI-powered threat detection to detect and stop ransomware attacks, before it reaches your storage and your critical data. Progress® Flowmon® is a network and security monitoring platform with AI-based detection of cyber threats and anomalies, and fast access to actionable insights into network and application performance. The solution supports cloud, on-prem and hybrid environments suitable for company-wide coverage, market’s fastest deployment time and has been recognised by Gartner since 2010.

Unveiling Red Teaming Services

Red teaming is a powerful tool for testing the strength of your organization's cybersecurity program. However, it's easy to think of red teaming services as an expensive luxury that you can't afford. The truth is that these services are essential if you want to be sure that your defenses are up to snuff, and they can be done relatively cheaply. In fact, they're so important that many companies have adopted them as part of their regular operations before they've ever been breached by hackers.