Dark Reading
2 years, 11 months ago
Graylog Acquires Resurface.io's API Security Solution
Strengthens threat detection and incident response portfolio to address growing API threats.
Security news aggregator
Latest coverage for Incident
Incident coverage examines breaches, outages, and response failures to explain how security events affect systems, data, and organizations.
5
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
An incident is a suspected or confirmed event that threatens the confidentiality, integrity, or availability of information or systems, or violates a security policy. Examples include unauthorized access, malware execution, exposed credentials, data loss, and disruptive attacks. Not every alert is an incident: triage determines whether an event is credible, its scope, and the assets or data involved.
Incident handling requires timely detection, analysis, containment, eradication, and recovery. Practitioners must preserve relevant evidence, identify affected accounts and systems, assess whether data was accessed or altered, and prevent recurrence. Clear escalation and documentation support privacy or regulatory notifications when applicable. Findings should feed security improvements such as closing exploited vulnerabilities, strengthening access controls, and updating detection and response procedures.
Showing 5 most recent headlines
Filtered view
The Hacker News
3 years ago
VirusTotal Data Leak Exposes Some Registered Customers' Details
Data associated with a subset of registered customers of VirusTotal, including their names and email addresses, have leaked on the internet
The Hacker News
3 years ago
JumpCloud Blames 'Sophisticated Nation-State' Actor for Security Breach
A little over a week after JumpCloud reset API keys of customers impacted by a security incident, the company said the intrusion was the work of a sophisticated nation-state actor
The Register
3 years ago
Cybercrime – big in Asia Pacific
SANS first DFIR Summit in Asia gives organizations in Asia Pacific an opportunity to build their cyber security expertise Sponsored Post Kroll's latest State of Incident Response: APAC report suggests that over half of all organizations in Asia Pacific (59 percent) have experienced a cyber incident, of which a third (32 percent) have suffered multiple incidents.…
Dark Reading
3 years ago
Microsoft 'Logging Tax' Hinders Incident Response, Experts Warn
A recent email compromise by Chinese APT group Storm-0558 highlights a lack of access to security logging by many Microsoft 365 license holders, prompting calls from researchers to abolish it.