TL;DR for CISOs: Microsoft detailed an attack in which automated operators used a service principal secret exposed in a public Git
The OWASP Top 10 is a ranked list of the ten application security risk categories that OWASP's Top Ten project team judges most critical, based primarily on contributed testing data and, for two of the ten slots, a community practitioner survey. The
ISO 27001 compliance is one of the most recognized international standards for information security management. Organizations worldwide seek certification to protect sensitive data, gain customer trust, and meet regulatory requirements. However, achi
In an insightful panel discussion hosted by the CISO platform, experts converged to delve into the technical challenges and strategies associated with implementing the Digital Personal Data Protection (DPDP) Act. Moderated by Rajiv Nandwani, Global I
Banks face multiple guidelines from various authorities on cybersecurity incident reporting. Consistent, documented procedures (SOPs) are essential for effective response, regardless of timing or personnel involved.
Understanding the common success factors and pitfalls in implementing continuous security validation is crucial for organizations aiming to enhance their cybersecurity posture. In this segment, we explore the key insights derived from observing or
.png)
Security is not a static concept; it's a dynamic process that demands continual attention and evolution. In today's digital landscape, where threats are ever-present and constantly evolving, relying on a single solution or treating security as a o
(this is cross-posted from Anton on Security)
As I am expanding my responsibilities to cover some exciting data security topics (like, say, our cloud data discovery DLP), I wanted to briefly discuss a few broader issues I have noticed related to moder
Progress Till Date :
Key Discussion Points :
RSA conference is one of the leading security conference worldwide. It creates tremendous opportunity for vendors, users and practitioners to innovate, educate and discuss around the current security landscape. WAF is specialized firewall designed
Choosing the right Application Security Testing Service Provider is not always an easy task. By asking the right questions and knowing what answers to look for, you can conduct the thorough evaluation of the various vendors available in the market a
The AppSec How -To:
Visualizing and Effectively Remediating Your Vulnerabilities: The biggest challenge when working with Source Code Analysis (SCA) tools is how to effectively prioritize and fix the numerous results. Developers are quickly overwhel
With Ransomware attacks becoming increasingly frequent, we thought of putting together a list of technologies that can help organizations protect themselves against ransomware attacks. Please note that even though this blog discusses technology meas
For decades, enterprises have been depending on many security technologies to defend their network perimeters from variety of cyber attacks. Amongst those technologies, firewalls are a critical layer in perimeter defense. As cyber threat landscape ha
CISO Platform Annual Summit @ Goa, last week saw over 100+ attendees for over 2 days making the the spirit of knowledge sharing and learning a huge success in the Information Security Executives of India. Here are the highlights of the awesome keynot
The AppSec How -To:Visualizing and Effectively Remediating Your Vulnerabilities: The biggest challenge when working with Source Code Analysis (SCA) tools is how to effectively prioritize and fix the numerous results. Developers are quickly overwhelme
The most important question every CISO or CIO concerns about optimization and efficiency around process with minimal security incident (to make a close to zero). This often leads to comparison with peers on "How are we doing as an organization?”, “Wh
IT Trends and challenges:
World is becoming Instrumental, Interconnected and Intelligent. IT security teams in enterprises are faced with rapidly mutating threats at every possible point of entry. This is fuelled by the fast evolution of threat landsc
There is a common misconception that cyber criminals and hacktivists only target large enterprises to reap a bumper. The reality is actually very different, recently published surveys reveal that
