Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on CyberSecurity for Applications, Services and Infrastructure, and related technologies.

How the Vulnerability Management Lifecycle Runs from Discovery to Verified Fix

Who in your organization can say, without opening three separate systems, whether last month's critical findings are actually closed? A deployment record answers half of that. The other half needs a rescan, and the rescan often never happens. The vulnerability management lifecycle is that question written down as a repeatable process. It runs from knowing what you own through to proving a fix landed, and it restarts the moment it closes.

Optimising IT Operations for Property Management Platforms

The property management industry has undergone a significant transformation, moving from paper-based ledgers and phone calls to sophisticated digital platforms. This shift places immense pressure on IT operations teams to ensure these platforms are reliable, secure and efficient. For modern property management to function effectively, the underlying technology must be reliable and consistently perform well.

What to Save Before Workplace Retaliation Erases Your Access

Picture a worker who reports unpaid wages or a safety concern to human resources. A few days pass, and suddenly the schedule shifts, the manager's tone turns cold, or the HR portal login mysteriously fails. As awareness around workplace retaliation rises in Los Angeles, employees are learning a hard truth about their digital evidence trail. Access to company platforms is only a temporary privilege, and employers control the master switch. Wait until a dispute escalates to save your records, and you may find the proof is already gone.
Sponsored Post

The key to secure transmission: TLS in the Raygun ecosystem

As our lives increasingly move online and data becomes the lifeblood of business, secure data transmission is imperative. From personal conversations to financial transactions, from healthcare records to sensitive business data, nearly everything we do online requires trust that our data is protected. And if you've ever made an HTTPS request, TLS is behind it, providing that trust.

Getting started with Ansible playbooks in CFEngine

Recently, I’ve been playing around with the ansible promise type by Fabio Tranchitella. It’s amazing how easy it is to leverage the benefits of agents with all the existing automation from the ansible community. Hence, I wanted to share it in a blog post, with an emphasis on easy. Let’s start off by creating a new cfbs project in a cfengine-ansible directory. Make sure to answer yes on the prompt to build on top of the default policy set.

VM Migration - What Happens to Your NSX Segments in Kubernetes?

Planning a migration off NSX usually starts with a networking conversation. Segments, VLANs, routing topology and BGP peering are not things that map cleanly to Kubernetes-native constructs the way the NSX distributed firewall maps to Calico’s tiered microsegmentation. NSX virtualizes the network layer in ways that Kubernetes doesn’t replicate by default. There is no native concept of a Layer 2 segment or VLAN, for instance.

What are the Key Features and Evaluation Criteria for Vulnerability Assessment Tools?

How many findings from your last vulnerability scan have been verified as fixed? For most IT functions, the scan report is easy to produce, and the proof of closure takes far longer to assemble. That difference tends to surface at the worst possible moment, usually an audit or a post-incident review. Vulnerability assessment tools are meant to end that uncertainty. They inspect systems, match what they find against public vulnerability databases, and rank each weakness by how dangerous it is.

What Is SOC 2 Compliance? Requirements, Controls, and Evidence

Your largest prospect has asked for your SOC 2 report. The deal sits still until you produce one. Most teams handle the first half of SOC 2 compliance fine. They control access. They run backups. They put changes through approval before anything ships. The second half is what stops them, and that half is proof. Your policy says access gets reviewed every quarter. The auditor wants the dated review, the signature on it, and the same record from eight months ago.

How to Secure Cisco AnyConnect, Fortinet, and Palo Alto VPNs with RADIUS MFA

VPN is the first thing attackers test when they're trying to get inside a network. Not because VPN is technically weak - it's not - but because it's the front door, it's usually internet-facing, and in most organizations it asks for exactly one thing: a username and a password.

What Is the MITRE ATT&CK Framework? A Guide for IT Ops Teams

Most IT operations teams cannot say how much of the MITRE ATT&CK framework they already cover. The framework gets explained in the language of threat hunting and red teams. The parts that belong to infrastructure work are easy to miss. And then, coverage questions get answered with a guess. The mismatch costs time on both sides. Security asks for a coverage answer that ops has no clean way to produce. Yet the controls that stop a large share of those techniques already sit with your team.