Optiv Blog

Cloud, mobile, social media, IoT and big data have profoundly expanded the attack surface in the latest cyber super cycle, and it’s no surprise....

Most companies have security personnel, but their expertise in the cloud may be limited. To have a team of highly trained AWS security experts on....

While using Azure role-based access controls, Microsoft provides a set of built-in roles to meet the needs of providing least privileges. These roles....

In this day and age we are faced with some hard facts within information security. One of those facts is that breaches are imminent and we must be....

This is the last post in my series on creating an effective AppSec program within your organization. In my last post, we discussed the importance of....

Receiving an email lure designed to trick you into clicking a phishing link and then logging into a fake website has become a common threat. In this....

For information security practitioners, the stored value in security data can reduce both costs and risk. The progression of the treatment of log data....

I talk with IT executives regularly and have noticed a trend across industries that is concerning. While the threat of a data breach looms large on....

While attending one of our technology partner’s security training courses, the instructor presented on their product’s various features and....

Postman is a useful tool used by many developers to document, test and interact with Application Programming Interfaces (APIs). With the ubiquity of....

In my last blog post, I talked about what an application security (AppSec) program is and how an organization would go about building a formal program....

General thought: A breach of trust is different than a breach of security. Trust and security, while related, are very different from each other. In....