MP.1.118 Media Destruction - Sanitation (CMMC Level 1)
Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse.
Amazon AWS GuardDuty
Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following data sources: VPC Flow Logs, AWS CloudTrail event logs, and DNS logs.
Amazon AWS Inspector
Amazon Inspector is an automated security assessment service that helps you test the network accessibility of your Amazon EC2 instances and the security state of your applications running on those instances.
Using Docker To Install OpenVAS On CentOS
An interesting post from Gerry Williams at gerrywilliams.net Description: Saw a post on r/sysadmin the other day with a walkthrough on using Docker for the first time. Thought I would take some notes: To Resolve: 1. On the host computer, open up Hyper V and create a new Virtual Machine. Download the Centos7 iso if […]
OpenVAS image for Docker on Ubuntu
A Docker container for OpenVAS on Ubuntu. By default, the latest images includes the OpenVAS Base as well as the NVTs and Certs required to run OpenVAS
A Book Review of “Pentesting Azure Applications” by Matt Burrough
In this book review, I looked at the topic of pentesting cloud-based applications, specifically Microsoft’s Azure. While the focus of the book was for Azure, a lot of the information will be beneficial no matter the cloud environment.
Cloud & The Security Skills Gap
An informative video on cloud and the security skill gap from Darkreading.com F5 Network security evangelist David Holmes offers concrete advice about how cloud outsourcing can help companies with a talent shortfall solve three enterprise security problems: application security, penetration testing, and bug bounties. To look at the video click here:
Apple Discloses Law Enforcement Requests For Cloud Data
A posting from CRN in there Security section: Law enforcement has made as many as 5,000 requests for data about Apple (NSDQ:AAPL) customers since Dec. 1, according to a disclosure Apple issued Monday. "We do not provide any government agency with direct access to our servers, and any government agency requesting customer content must get a court order," […]
What the Cloud means to Enterprise Security
The enterprise security industry is being completely transformed by the emerging world of the mobile, social, BYOD enterprise
CloudFlare security service goes down after router failure
An interesting article from Cnet.com in there security & privacy section: Web security service CloudFlare was offline for about an hour this morning due to a systemwide failure of its edge routers. The outage, which began around 1:47 a.m. PT, removed the security layer for 785,000 Web sites, including 4chan and Wikileaks, according to TechCrunch. […]