Cybersecurity

Malware Analysis
Podcast
Security Operations
Threat Intelligence
Anti Phishing
Company Culture
Engineering
Cybersecurity
Company News
SOAR
Cybersecurity

Securing REST API Endpoints (or 15 Steps to Avoid Another Optus)

Unless you have been living in a cave on Mars with your eyes shut and your fingers in your ears for the past few weeks, you have probably heard something about a data breach at Australian telecommunications giant Optus. At Cosive, we work with organisations every day to prevent data breaches like this from happening. Here, we share 15 actionable steps that organisations to secure their API endpoints and “avoid another Optus”.

Cybersecurity

Watching Them Watching You: Opsec for Security Investigators

This post is about how to protect your identity and cover your tracks when conducting security investigations. The recommendations here are part of on operational security (opsec) approach, conducting investigations in a way that denies your targets information about you and your activities and, ultimately, helps to keep you, and others, safe.

Cybersecurity

Don't Shoot The Messenger: Security.txt and Collaborating Effectively With Security Researchers

Security.txt is an effort to make life easier for security researchers and incident responders, and to increase the likelihood that the right people will get notified about security issues. The premise of the idea is that organisations add a ‘security.txt’ document under the ‘.well-known’ directory of websites so that people concerned about your organisation’s security know who to contact. Generally, this will be coupled with a ‘security@’ email address which goes directly to the person or team responsible for security. Here are reasons why adding a security.txt file to your website is probably a good idea.

Cybersecurity

How to Keep Executives Safe from Malicious Actors with an “Executive Protection Program”

Keeping executives safe can be one of the biggest challenges for CISOs. Without a deep knowledge of security risks, executives may see efforts to keep them safe as onerous rules and restrictions that reduce their efficiency. These rules are often seen as pushing the balance too far in favour of security at the expense of usability and convenience. This can ultimately result in non-compliance which puts the executive, and the organisation, at risk.