Cybersecurity Awareness Month: 2020 in Retrospect

For cyber defenders worldwide, 2020 has been unprecedented year. CISOs and their security teams have battled increased attack volumes and data breaches as malicious actors seized the opportunity to exploit the disruption caused by the global pandemic. Cybercriminals are now deploying a wide range...

Helium: Read-only user can delete higher privileged members using open DELETE /api/memberships/<membershipID> endpoint

Summary The /api/memberships/membershipID endpoint on console.helium.com is open to anyone, including read-only users in an organization. This means that a read-only member can kick a manager, administrator, or even the owner out of an organization using this vulnerability. Steps to Reproduce: 1...

CISO Advisory: Security Architecture

Security architecture and design is a vital function of a healthy enterprise. This function is fundamentally, about understanding IT architecture relationships, and ensuring security is a vital element of its implementation. This is the second paper within the series of CISO Advisories, in this...

Simplifying SSH keys and SSL Certs Management across the Enterprise using Key Manager Plus

With rapidly growing web-based services and widely expanding locations, organizations are using more and more SSL certificates as well as SSH keys than ever. From authentication, confidentiality, and integrity to preventing the organization from industrial espionage, SSL certificates play an...

change fontset 'icons' to html entities to improve security compliance

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-38988. panel It seems that the icons in Confluence are currently rendered using fontset. This can be an issue for organization...