Cloud Security page 3

33 Articles

Cloud SecurityOct 12, 2022·5 min read

Kenna: RISK-BASED VULNERABILITY MANAGEMENT

Why You Should Consider More Than CVSS As previously mentioned, one typical method of sorting and prioritising which vulnerabilities to fix first is patching vulnerabilities that have a CVSS score in

Cloud SecurityOct 8, 2022·2 min read

A Holistic Performance Management Framework for Implementing Cybersecurity Strategies by BCG & STC

The frequency and cost of cyberattacks is accelerating. Globally, the cost of cybercrime is estimated to have risen from $445B in 2015 to over $2.2 trillion today. The frequency and size of data br...

Cloud SecurityOct 8, 2022·3 min read

Best Cloud SaaS Governance Practices from the CSA Cloud Security Alliance

Introduction Infrastructure as Service security is almost always the focus when discussing cloud security. platforms as a service (PaaS) and infrastructure as a service (IaaS). In spite of the fact...

Cloud SecurityOct 7, 2022·6 min read

Security and Privacy Capability Maturity Model (SP-CMM) by SCF, Secure and Privacy by Design Principles Framework

The SP establishes 32 common-sense principles to guide the development and oversight of a modern security and privacy program. The SP is sourced from the Secure Controls Framework (SCF), which is a...

Cloud SecurityOct 5, 2022·9 min read

Campaigns to be Introduced to MITRE ATT&CK V12

Primary Articles [Published ](<https://medium.com/mitre-attack/introducing-attack-campaigns-6b15baa6cbb4)by Matt Malona In [ATT&CK 2022](<https://medium.com/mitre-attack/attack-2022-roadmap-cd5a1a3...

Cloud SecurityOct 3, 2022·9 min read

DevSecOps is not just a technological shift; it is also a cultural one, according to Tenable.cs Cloud Security's whitepaper, "7 Habits of Highly Effective DEVSECOPS Teams."

DecSecOps, which is typically viewed as an integrated team of development, operational, and security practitioners that can securely deliver innovation within a defined scope to market, is an ideal...

Cloud SecuritySep 20, 2022·4 min read

A CyberRisk Alliance Resource, MSSP Alert - TOP 250 MSSPs Services Providers 2022 edition

A succinct summary The Top 250 MSSPs and associated survey respondents continue to expand more quickly than the managed security market as a whole. In fact, respondents to the survey anticipate tha...

Cloud SecuritySep 17, 2022·6 min read

BARK: A PowerShell script was created to aid the BloodHound Enterprise team in locating and regularly validating abuse primitives.

BloodHound Attack Research Kit is referred to as BARK. It is a PowerShell script created to help the BloodHound Enterprise team find and keep track of abuse primitives. At the moment, BARK is conce...

Cloud SecuritySep 17, 2022·4 min read

The Azure Threat Research Matrix is explained

It's typical for the assessment team to cite the MITRE ATT&CK knowledge base when conducting an offensive security assessment so that high-level stakeholders can see visually which techniques were ...

Cloud SecuritySep 7, 2022·9 min read

A Successful Threat-Hunting Program's Foundation

'Threat hunting is the practice of proactively searching for cyber threats that are lurking undetected in a network. Cyber threat hunting digs deep to find malicious actors in your environment tha

Security Digest

Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.