What is Mitre's ATT&CK framework? What red teams need to know

Open source software security challenges persist Email not displaying correctly? View it in your browser.

CSO Update Apr 03, 2018 What is Mitre's ATT&CK framework? What red teams need to know The ATT&CK framework allows security researchers and red teams to better understand hacker threats. Read More ▶ Your Must-Read Stories • Open source software security challenges persist • What is FedRAMP? How cloud providers get authorized to work with the U.S. government • 11 ways ransomware is evolving • Don't rush to deploy 5G if you want IoT security, agency warns • 1.4B stolen passwords are free for the taking: What we know now • Review: Intellicta brings issue tracking to compliance rules White Paper: Digital Shadows Account Takeover: 7 Ways to Mitigate the Growing Risks of Account Takeover Billions of leaked credentials are exposed online every year. Cybercriminals are increasingly turning to credential stuffing tools to automate attempts at account takeover, making these leaked credentials very useful for them. Read More ▶ Open source software security challenges persist Using open source components saves developers time and companies money. In other words, it's here to stay. Here's a look at what it will take to improve open source security. Read More ▶ What is FedRAMP? How cloud providers get authorized to work with the U.S. government The process for getting the FedRAMP seal of approval is complex, but it can ultimately be lucrative for companies that meet the security requirements. Read More ▶ 11 ways ransomware is evolving Ransomware creators are getting more sophisticated in how they infect systems, avoid detection, and foil decryption efforts. Read More ▶ Don't rush to deploy 5G if you want IoT security, agency warns Flaws in 2G, 3G and 4G networks could be repeated in 5G, says EU IT security agency. Read More ▶ 1.4B stolen passwords are free for the taking: What we know now The 2012 LinkedIn breach, along with other old third-party breaches, is still paying dividends for criminals, who now have free access to 1.4 billion previously exposed email addresses and passwords. Read More ▶ Review: Intellicta brings issue tracking to compliance rules The Intellicta Platform from TechDemocracy acts like a security information and event management (SIEM) console, but for compliancy issues. It pulls information from a series of network collectors and correlates that data into a continuously-monitored compliancy dashboard. Read More ▶ White Paper: F5 Networks Automating NetOps: Closing the IT Skills Gap Today that skills gap is around automation, orchestration, and DevOps methodologies-as well as how to apply them to cloud environments. Nearly three in four (74%) of respondents to the F5 State of Application Delivery 2018 survey rate the use of automation in the operation of IT infrastructure to be "somewhat" or "very" important. That holds true across all roles in the organization-including C-level executives and security professionals. Read More ▶ CSO Insider 1. 14 top tools to assess, implement, and maintain GDPR compliance 2. What are the GDPR requirements? 3. Third-party security vetting: Do it before you sign a contract 4. Separation of duties and IT security 5. Review: Bricata adds threat hunting to traditional IPS/IDS Editor's Picks 1. Rogues' gallery: 7 insiders who breached security 2. Why you don't need an RFID-blocking wallet 3. The 6 best password managers 4. 8 hot cyber security trends (and 4 going cold) 5. The 10 Windows group policy settings you need to get right

You are currently subscribed to CSO Update as jonsan98@gmail.com. Unsubscribe from this newsletter | Manage your subscriptions | Subscribe | Privacy Policy Learn more about Copyright © 2018 CSO Online, 492 Old Connecticut Path, Framingham, MA 01701 Please do not reply to this message. To contact someone directly, send an email to newsletters@idg.com.