Is Linux secure?
Meet Pal. Pal is a senior developer working at PalBank. For the next 6 months, Pal will be responsible for leading the development of the bank’s web application client, which will be used daily by millions of customers.
Operations | Monitoring | ITSM | DevOps | Cloud
The Place Where Modern Operations & Technology Come Together
The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.
Weaponized AI vs. AI Driven Security Posture Management: Why the Battle Starts in Misconfigurations
August 5, 2025, Las Vegas Black Hat 2025, Abnormal AI officially launched its Security Posture Management for Microsoft 365. This release marks a critical turning point. In an era where attackers weaponized AI to uncover and exploit misconfigured cloud environments at machine speed, reactive security simply can’t keep pace. Threat actors are now leveraging automated AI to scan systems, identify configuration drift, escalate privileges, and deploy zero‑day exploits in seconds.
Sponsored Post
AI realism (part one)
Emotions are running high about AI technologies. In this 2-parter, I do my best to make a rational case on the reality of AI, and how we can respond to it. This is part one; part two next week. We seem to be struggling to have pragmatic discussions about advancements in Artificial Intelligence. It's hard to hear calmer voices over the detractors and breathless enthusiasts. Today, I want to make a reasoned, evidence-based case for the potential of this technology, glance at present and future applications, and offer some practical examples for implementing AI within an organization.
Mobile Security Isn't a Nice-to-Have - It's an Absolute Must
Mobile Security Isn’t a Nice-to-Have — It’s an Absolute Must According to the Verizon’s 2024 Verizon Mobile Security Index Report, nearly 90% of organizations recognize the urgent need to take mobile security seriously. Are you one of them? From mobile phishing to smishing, vishing, quishing and zero-day threats, the mobile attack surface is bigger and more dangerous than ever. Cybercriminals are relentlessly targeting mobile devices as a gateway to your organization, making mobile security especially critical.
How 1&1 Mail & Media Scaled Kubernetes Networking with eBPF and Calico
“We started in 2017 with Calico and never regretted it!” —Stefan Fudeus, Product Owner/Lead Architect, 1&1 Mail & Media.
Introduction to Puppet Security Compliance Enforcement
Take enterprise compliance to the next level with Puppet Security Compliance Enforcement. This video demonstrates how to shift from reactive to proactive compliance, automating security standards across Puppet Enterprise and Puppet Core environments. Discover how to implement CIS benchmarks with ease, achieve consistent compliance, and reduce risk across your Linux and Windows infrastructure with tailored configurations.
New Feature - Vulnerable System Drivers Monitoring
Vulnerable system drivers continue to be a vector exploited by attackers to compromise systems. In eG Enterprise version 7.5 we added a number of periodic security checks to assist administrators proactively identify weaknesses, including vulnerable system drivers monitoring.This new capability is supported for a Windows OS, when using a VM agent for inside view monitoring and / or when monitoring an Azure Virtual Desktop session host.
Microsoft Office 365 Update and Linux Security Enhancements
Microsoft extends rollback support for Office 365 updates to two months and discloses a vulnerability without zero-day exploits. SQL updates now require specific version and driver fixes. Ivanti releases three security updates addressing 11 CVEs, while a partnership with Tuck Care improves Linux patching. Misconceptions about Linux security are addressed, emphasizing the need for regular updates to mitigate risks from notable CVEs across distributions.
Certificate Pinning in 55 Seconds
Certificate pinning helps your organization avoid connectivity disruptions for users on mobile devices, allowing you to bridge the gap between an expiring certificate and a new one to come.
What Does Proactive Cybersecurity Really Mean? Measures to Protect Your Organization
Ivanti’s 2025 State of Cybersecurity Report found something utterly unsurprising: that organizations report a significant preparedness gap (that is, the gap between the perceived threat level and their degree of preparedness) across every threat vector and vulnerability we asked about. While security teams rightfully devote resources to building resilience so they can swiftly respond to and recover from attacks, closing those preparedness gaps requires proactive cybersecurity measures.