Month: April 2023
11 posts
Weekly Top Ten Cybersecurity Stories – 4.28.2023
Critical vulnerabilities in PaperCut print management software, Cisco XSS zero-day in server management tool, new Apache Superset vulnerability, and 7 more stories...
ChatGPT From A Pen Tester’s Point Of View
ChatGPT has significant potential to transform the landscape of penetration testing by playing the role of comprehensive assistant, but this powerful resource is not without risk.
Weekly Top Ten Cybersecurity Stories – 4.21.2023
Fortra shares findings on GoAnywhere MFT zero-day attacks, Google Chrome hit by another zero-day attack, Docker privilege escalation vulnerability, and 7 more...
The Future Of Endpoint Monitoring: SIEM, EDR, XDR, and Data Collectors
The endpoint monitoring space has evolved through a number of stages to arrive where it currently is today. Novacoast's Adam Gray shares his perspective on how the space is moving forward but in many ways is still spinning its wheels.
The Future of Identity
Identity and Access Management veteran Jim Gerken of Novacoast provides some insight on the past, present, and future of this cornerstone space in cybersecurity.
Weekly Top Ten Cybersecurity Stories – 4.14.2023
Microsoft Patch Tuesday rolls out fixes for 97 flaws, Nokoyawa ransomware attacks with Windows Zero-Day, detecting BlackLotus, and 7 more stories in cybersecurity!
AI Danger: Aligning Cyber and Policy Experts
For cybersecurity experts and policymakers, the GPT-4 System Card is one of the most important documents to be released since the initial announcement of ChatGPT.
Defending Against Cobalt Strike-Based Malware In Your Environment
While the comprehensive attack framework Cobalt Strike has proven invaluable to legitimate red teams and pen test efforts…
FTC Safeguards Rule Changes 2023 | What You Need to Know
The FTC has announced changes to its Safeguards Rule that go into effect this June to enhance requirements for information security programs.
Weekly Top Ten Cybersecurity Stories – 4.7.2023
Defender's guide to the 3CX supply chain attack, Western Digital network breach, IRS eFile.com serving JS malware, and 7 more stories...