Cloud Security page 2

36 Articles

Cloud SecurityOct 14, 2022·2 min read

The Microsoft Threat Modeling Tool (TMT)

A crucial component of the Microsoft Security Development Lifecycle is the Threat Modeling Tool (SDL). Early detection and mitigation of potential security issues, when they are still manageable an...

Cloud SecurityOct 13, 2022·3 min read

IriusRisk Threat Modeling for Security Teams

Threat modelling: what is it? Basics of Threat Modeling Threat modeling's fundamental tenet is the identification, disclosure, and management of security flaws. This is accomplished by being aware of

Cloud SecurityOct 13, 2022·3 min read

Threat Modeling: Choosing the Right Method

Why Threat Modeling Is Important and What It Is Identifying and evaluating threats that an attacker (threat) could exploit is done through the exercise of threat modelling. Consider a threat model ...

Cloud SecurityOct 12, 2022·5 min read

Kenna: RISK-BASED VULNERABILITY MANAGEMENT

Why You Should Consider More Than CVSS As previously mentioned, one typical method of sorting and prioritising which vulnerabilities to fix first is patching vulnerabilities that have a CVSS score in

Cloud SecurityOct 8, 2022·2 min read

BCG & STC: Cybersecurity Performance Framework

The frequency and cost of cyberattacks is accelerating. Globally, the cost of cybercrime is estimated to have risen from $445B in 2015 to over $2.2 trillion today. The frequency and size of data br...

Cloud SecurityOct 8, 2022·3 min read

Best Cloud SaaS Governance Practices from CSA

Introduction Infrastructure as Service security is almost always the focus when discussing cloud security. platforms as a service (PaaS) and infrastructure as a service (IaaS). In spite of the fact...

Cloud SecurityOct 7, 2022·6 min read

SP-CMM: Security & Privacy Maturity Model by SCF

The SP establishes 32 common-sense principles to guide the development and oversight of a modern security and privacy program. The SP is sourced from the Secure Controls Framework (SCF), which is a...

Cloud SecurityOct 5, 2022·10 min read

Campaigns to be Introduced to MITRE ATT&CK V12

Primary Articles [Published ](<https://medium.com/mitre-attack/introducing-attack-campaigns-6b15baa6cbb4)by Matt Malona In [ATT&CK 2022](<https://medium.com/mitre-attack/attack-2022-roadmap-cd5a1a3...

Cloud SecurityOct 3, 2022·9 min read

DevSecOps: Cultural Shift, Not Just Tech

DecSecOps, which is typically viewed as an integrated team of development, operational, and security practitioners that can securely deliver innovation within a defined scope to market, is an ideal...

Cloud SecuritySep 20, 2022·4 min read

MSSP Alert Top 250 MSSPs 2022 Edition Released

A succinct summary The Top 250 MSSPs and associated survey respondents continue to expand more quickly than the managed security market as a whole. In fact, respondents to the survey anticipate tha...

Cloud SecuritySep 17, 2022·6 min read

BARK: BloodHound Abuse Validator

BloodHound Attack Research Kit is referred to as BARK. It is a PowerShell script created to help the BloodHound Enterprise team find and keep track of abuse primitives. At the moment, BARK is conce...

Cloud SecuritySep 17, 2022·4 min read

The Azure Threat Research Matrix is explained

It's typical for the assessment team to cite the MITRE ATT&CK knowledge base when conducting an offensive security assessment so that high-level stakeholders can see visually which techniques were ...

Cloud SecuritySep 7, 2022·9 min read

A Successful Threat-Hunting Program's Foundation

'Threat hunting is the practice of proactively searching for cyber threats that are lurking undetected in a network. Cyber threat hunting digs deep to find malicious actors in your environment tha

Cloud SecuritySep 6, 2022·3 min read

Feds & npm Issue Supply Chain Security Guidance

Faster development times, innovation, and a thriving open-source community have all been made possible by the ability to use another developer's project as a dependency. With many JavaScript projects

Cloud SecurityJan 4, 2022·2 min read

Gartner EDRs are not perfect, fail against common attacks

A study testing endpoint detection and response (EDR) products from 18 vendors finds state-of-the-art EDRs fail to prevent or log the bulk of common attacks.

Cloud SecurityJul 4, 2021·2 min read

NSA Releases D3FEND Framework for Cyber Defenses

Recently a Framework was Released by NSA named D3FEND which is based on and Complementary to MITRE ATT&CK Framework. It gave a Technical Knowledge base to create Defensive Countermeasure against Co...

Security Digest

Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.