Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

If you are a part of the DevOps community, you may have heard of DORA metrics. These were introduced to allow organizations to track and measure performance, so that they can further improve their software delivery life cycles. Over the years, the DevOps Research and Assessment (DORA) team proposed four metrics to drive the performance of SDLCs: These four key metrics shall never be disregarded. Remember – DORA metrics measure information regarding your development and operations processes.

Explore how Self-Service Password Reset (SSPR) enhances security, saves costs, and improves productivity across modern hybrid workplaces.

Changing your name? Learn how to do it safely without risking your identity. Discover essential steps to protect personal data and avoid fraud during a name change—plus how Avast Secure Identity can help. Changing your name—whether due to marriage, divorce, or personal choice—is a significant life event. However, this process involves sharing sensitive personal information across various platforms, making it a potential target for identity theft.

APWG's Q4 2024 Phishing Activity Trends Report, published March 19th, revealed that more than eight in ten Business Email Compromise (BEC) attacks last quarter were sent by attackers favoring Google's free webmail service. By comparison, only 10% used Microsoft's free email web app, Outlook.com.

Cyberthreats are evolving, and unpatched vulnerabilities remain one of the biggest security risks for organizations. According to IBM’s 2024 Cost of a Data Breach Report, organizations that fail to patch known vulnerabilities face an average loss of $4.45 million per incident. Cybercriminals actively exploit outdated firmware and misconfigurations in network devices, making network vulnerability scanners an essential security tool.

Year after year, we continue to see increases in phishing and business email compromises (BEC), and the costs associated with these incidents are growing, too. The LevelBlue Security Operations Center (SOC) found that BEC attacks made up 70% of the total incidents investigated during the second half of 2024. Of these incidents, 96% of them involved one or more phished users.

At a recent Sydney luncheon, Trustwave sat down with a room of senior security leaders to dig into the evolving role of red and purple team testing in a modern technical security assurance program. The discussion was led by Trustwave's Craig Searle, Director of Consulting & Professional Services in Pacific at Trustwave and TJ Acton, Director of SpiderLabs Testing, Pacific. More than 20 Sydney-area security professionals attended the event at Restaurant Huberts.