article thumbnail

What We Can Learn from the Log4j Vulnerability

Pure Storage

In December, a critical zero-day vulnerability was reported in the widely used Log4j framework. Log4j is so ubiquitous, in fact, that Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly called this “the most serious vulnerability I have seen in my decades-long career.”. And that’s the key to the vulnerability.

article thumbnail

How to Implement Threat Modeling in Your DevSecOps Process

Pure Storage

How to Implement Threat Modeling in Your DevSecOps Process by Pure Storage Blog This blog on threat modeling was co-authored by Dr. Ratinder Paul Singh Ahuja, CTO for Security and Networking, and Rajan Yadav , Director of Engineering, CNBU (Portworx), Pure Storage. Dr. Ahuja is a renowned name in the field of security and networking.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

A beginner’s guide to implementing zero-trust architecture

Online Computers

According to him, trust is a security vulnerability and verification is a security necessity. You never assume that any user or device is trustworthy, and all access requests are subjected to verification and authorization. Device authorization – Assesses the trustworthiness of devices before granting them access.

article thumbnail

How to Counter AI-Driven Cybersecurity Threats to Physical Security Products

Security Industry Association

Deepfakes can be used to impersonate authorized personnel and gain access to secure areas or to spread misinformation and create chaos. Zero-day attacks : Zero-day attacks are attacks that exploit vulnerabilities in software that the vendor is not aware of.

article thumbnail

Data Protection Techniques

Solutions Review

Access Controls and Authentication: Implementing stringent access controls and authentication mechanisms is crucial for data protection. Implementing a multi-layered approach that combines various data protection techniques provides a comprehensive defense against potential vulnerabilities and risks.

article thumbnail

SIA New Member Profile: Veridas

Security Industry Association

This is the case for Mexican retirees using our voice authentication tool to make the proof of life on a monthly basis, travelers crossing the Zambian border using our patented biometric QR code and the multitude of U.S. Every second, someone authenticates and gets through a Veridas facial recognition terminal worldwide.

article thumbnail

Who’s the Boss? Successful Risk Mitigation Requires Centralized Leadership

MHA Consulting

Successful risk mitigation requires that a central authority supervise controls following a coherent strategy. The culprit in these cases is almost always the same: the lack of a central coordinating authority applying a coherent strategy. A haphazard approach to bolstering tech security can leave a host of vulnerabilities.