What Is SBOM? Why Software Component Inventory Is Gaining Momentum

Posted on by Dean Lombardo

Momentum Building for Software Bill of Materials (SBOM) Attestation You’ve probably noticed the acronym SBOM popping up a lot recently—headlines and subject lines trying to liven up the subject with the notion of someone or something “dropping the SBOM.” Will software bill of materials (SBOM) become a household word in supply chain security management and […]

Secure Windows 7, RHEL 7, and Other End-of-Life (EOL), Unsupported Software Systems

Posted on by Dean Lombardo

{We explore the issue of unaddressed end of life (EOL) software security vulnerabilities and the compliance requirements that govern EOL systems and components. The article also offers a solution for protecting EOL operating systems (OSs) ranging across RHEL 5, Ubuntu 16, Windows XP, 2003 and 7, CentOS 7, Solaris 11, and others.}  The Need for […]

Atomicorp Announces Live Q&A Series on Open Source Security, Cyberdefense, and Compliance

Posted on by Dean Lombardo

If you prefer videos and virtual discussions over online reading, you’ve come to the right place. Atomicorp will be producing a series of live Q&A webinars, where participants can join us in discussing IT security and compliance challenges and capabilities. In the first session of the series, known as “Charity’s Corner,” we’ll be exploring file […]

Posted in Uncategorized | Comments Off on Atomicorp Announces Live Q&A Series on Open Source Security, Cyberdefense, and Compliance

Is ModSecurity Dead? Absolutely Not

Posted on by Dean Lombardo

 Is ModSecurity Dead? Answering the Question Head On. As with any mature and venerable technology, ModSecurity is facing its “Is It Dead?” stage, with some pundits assuming and proclaiming it dead ever since the Trustwave ModSecurity sunsetting and end of support announcement in 2021. We get asked the question a lot by folks who want […]

Real-Time FIM for Rapid Intrusion Detection and Response

Posted on by Dean Lombardo

Employ real time file integrity monitoring (FIM) to meet always-on security requirements as well as data protection compliance standards such as PCI DSS. Cyberattacks can be sneaky fast, executing their programs, altering your files and source code, and deleting traces of the activity. Many file integrity monitoring (FIM) programs run on a timer based model, […]

Secure Linux and Apps With XDR Plus Compliance

Posted on by Dean Lombardo

Free and open source Linux runs servers, desktop distributions, commercial mobile devices such as Android and Nokia, and virtualized server environments like Kubernetes clusters and containers. Linux even runs supercomputing. Accordingly, Linux skills are in high demand, both for software application development and for API and kernel level security. Whether you’re a do–it-yourself open source […]

Reinforce AIX Endpoint Security With Atomic OSSEC

Posted on by Dean Lombardo

By Scott Shinn (This article and video demonstration show how to orchestrate additional security and compliance controls to your AIX environments.)  AIX is a well-embedded operating system that has persisted 37 years and remains popular today. Technically not a legacy product, AIX is still commercially supported. IBM owns AIX, as well as Red Hat and […]

What’s the Difference Between OSSEC, OSSEC+ and Atomic OSSEC

Posted on by Dean Lombardo

By Scott Shinn What’s the difference between OSSEC, OSSEC+, and Atomic OSSEC? We get asked that a lot. The quick answer is thousands of additional open source security rules, frequent updates and software integrations for real-time endpoint and cloud workload detection, built-in active response beyond HIDS, a graphical user interface (GUI), compliance capabilities, and expert […]

Open Source Security’s 2023 SWOT Analysis

Posted on by Dean Lombardo

By Paul Veeneman Editor’s Note: Paul Veeneman (CISSP, CISM, CRISC, CMMC-RP) is a cybersecurity, risk management, and compliance professional with 27 years of experience providing knowledge and guidance across various verticals and critical infrastructure. The following article is an abstract from his guest presentation at Atomic OSSEC Conference 2023. Why open source software and security?  […]

Attend OSSEC Conference, February 7-10, 2023: Open Source Security, FIM, Malware Detection, and Training

Posted on by Dean Lombardo

Open source software is flexible and free, enabling DevSecOps-oriented IT organizations to get more out of the software without having to wait for commercial vendor developments and updates. Open source software provides the fabric and foundation for Red Hat middleware, Kubernetes container environments, as well as application cluster deployments. It is also commonly used to […]