Author: Asad Yaseen

As a risk professional, when I look across the various organisations that I have worked with, one thing is clear: Risk is either embraced and used to drive smart decision making, or it is seen as a huge blocker for progress that must be avoided at all costs!  When risk management is understood, it can really be used to drive a technology department into the future, and at progressive speed.  Appetite vs. tolerance vs. threshold –…

SonicWall releases a patch after researchers confirm exploitation of a zero-day vulnerability in SonicWall Secure Mobile Access Background On January 22, SonicWall published a product notification regarding a “coordinated attack on its internal systems” conducted by “highly sophisticated threat actors.” SonicWall believed the attackers had exploited “probable zero-day vulnerabilities” in specific SonicWall products used for remote access. As they continued with their investigation, they provided additional updates into the root cause of the attack, primarily…

America’s National Cyber Investigative Joint Task Force (NCIJTF) has released a new joint-seal fact sheet in a bid to raise public awareness about ransomware. The sheet was created to publicize both the current threat posed by this particular type of malware and detail the United States government’s response. In addition, the document describes common infection vectors, tools for attack prevention, and who to contact in the event of a ransomware attack. To produce the sheet, the NCIJTF…

Original blog posted on Feb 1st, 2021 Oracle Cloud VMware Solution eases enterprise cloud migration. Read the latest blog featuring Clay Magouryk, Executive Vice President of Oracle Cloud Infrastructure to find out why expediting cloud migration is great for business.  Large companies are always torn between preserving their investments in key information technology and adopting the latest-and-greatest advancements. Oftentimes moving to the latest thing means leaving the old latest thing behind despite  the huge value it…

“The direct gateway to organizations’ most critical data and assets” is an attractive target for hackers, Salt Security found in a new report. Image: iStock/sdecoret Cybersecurity company Salt Security has put together a new report centered around the security of APIs, which help back most of the apps used throughout the day.  Experts have long worried about the security risks associated with the widespread use of APIs, with Gartner writing in a report that by…

This blog is part of our SOCwise series where we’ll be digging into all things related to SecOps from a practitioner’s point of view, helping us enable defenders to both build context and confidence in what they do.  Although there’s been a lot of chatter about supply chain attacks, we’re going to bring you a slightly different perspective. Instead of talking about the technique, let’s talk about what it means to a SOC and more importantly focusing…