Blog
Vulnerability Research

ManageEngine

Wed, 01/31/2018
Update March 21, 2018: Added additional vulnerabilities disclosed to ManageEngine that were excluded from the original blog post affecting several additional ManageEngine applications.Multiple vulnerabilities have been identified on various ManageEngine applications discovered by our Vulnerability Research Team (VRT). We commend ManageEngine for their prompt response to the identified flaws and...
Vulnerability Management
Blog

What is a Capacity Management Maturity Model?

By Per Bauer on Sat, 01/20/2018
Demands for services are increasing. High performance and reliability are expected. Yet budgets, labor and floor space are all being constrained. That’s where capacity management comes in. Capacity management can improve efficiency and guarantee reliability of your business systems.
Infrastructure Management
Vulnerability Research

Avamar Zero-Day

Thu, 01/04/2018
Today Digital Defense is disclosing three vulnerabilities identified on Dell EMC Data Protection Suite Family products discovered by the Digital Defense Vulnerability Research Team (VRT). VRT would like to commend Dell EMC for their prompt handling and diligent attention to the issues and their work with Digital Defense engineering staff to understand, resolve and verify the fixes for these...
Vulnerability Management
Blog

Equifax’s Problem and How to Avoid It

Mon, 10/09/2017
Recently, the cause of Equifax’s catastrophic cyber attack was revealed as a hack that exploited a known bug in in Equifax’s web application software, Apache Struts.Since then, the discourse surrounding the event has shifted to two main subjects:The blame game: people want to hold someone responsible. The fallout has claimed the jobs of Equifax’s CSO, CIO, and now, CEO.The preventability of the...
Vulnerability Management
Blog

How to Get Started with NIST 800-171 Compliance

By Kevin Jackson on Fri, 09/22/2017
Are you ready to report your NIST 800-171 compliance status by the end of the year? If you do business with the federal government, you need to comply with SP NIST 800-171 by the end of the year. Now is the time to implement your compliance plan.
Automation
Compliance
Monitoring
Blog

Five Causes of Performance Bottlenecks in IT

Wed, 08/09/2017
As IT infrastructures continue to grow more complex, finding performance bottlenecks gets hard. That’s why it’s absolutely essential that IT teams have the tools, training, and resources necessary to quickly identify causes of poor application performance.
Infrastructure Management
Blog

Network Monitoring Tips for Hybrid IT Environments

By Kevin Jackson on Wed, 07/26/2017
Hybrid IT allows organizations to experiment with the cloud while keeping any equipment or applications on-premises as it makes sense. If you’re the one responsible for day-to-day monitoring, here’s what you need to know to manage the complexity.
Monitoring
Vulnerability Research

Critical Vulnerability Found in Avaya AES Management Console

Wed, 06/21/2017
Vulnerability Identified in the Avaya AES Management Console PlatformToday Digital Defense is publishing a high impact zero-day vulnerability identified in the Avaya Application Enablement Services (AES) Management Console platform discovered by Digital Defense Security Analysts. The Digital Defense Vulnerability Research Team would like to commend Avaya for their prompt handling and diligent...
Vulnerability Management
Secure your FTP or SFTP server with HelpSystems
Blog

10 Essential Tips for Securing FTP and SFTP Servers

Mon, 05/01/2017
Most organizations use FTP or SFTP servers to exchange files and other critical business documents with their trading partners. Unfortunately, these servers have become a primary target for hackers. Learn SFTP security best practices in this blog and webinar.
Data Loss Prevention
Secure File Transfer
Blog

Zero-Day Alert: Four Vulnerabilities Discovered in Riverbed Technology Performance Monitoring Platform Discovered by Digital Defense, Inc.

Mon, 04/10/2017
Digital Defense is publishing multiple application vulnerabilities in the Riverbed SteelCentral portal application today following the client notification by Riverbed Technology. Digital Defense’s Vulnerability Research Team identified the security issues through vulnerability scanning, and brought the flaws to the attention of Riverbed Technology in January 2017 following discovery. Riverbed...
Vulnerability Management