Why MTTR is Bad for SecOps
Kerry Matre, senior director at Mandiant, discusses the appropriate metrics to use to measure SOC and analyst performance, and how MTTR leads to bad behavior.
Cloud Security
5G Security Vulnerabilities Fluster Mobile Operators
A survey from GSMA and Trend Micro shows a concerning lack of security capabilities for private 5G networks (think factories, smart cities, industrial IoT, utilities and more).
PS3 Players Ban: Latest Victims of Surging Attacks on Gaming Industry
Every Sony PlayStation 3 ID out there was compromised, provoking bans of legit players on the network.
A supply-chain attack could have siphoned sensitive information out of Jira, such as security issues on Atlassian cloud, Bitbucket and on-prem products.
These code bombs lurk in the PyPI package repository, waiting to be inadvertently baked into software developers’ applications.
Cleanup in aisle “Oops”: The supermarket chain said that it misconfigured two cloud databases, exposing customer data to public scrutiny.
Approximately 38,000 of RBA’s customers had their embryology data stolen by a ransomware gang.
Troy Gill, manager of security research at Zix, discusses the most common ways sensitive data is scooped up by nefarious sorts.
A vendor exposed the records, which were accessible with no password or other authentication, likely because of a cloud-storage misconfiguration.
An hour-long outage hit airlines, banks and the Hong Kong Stock exchange. It’s thought to have been caused by a DDoS mitigation service.
