Cybersecurity

Attack surface, penetration testing, incident response.

2,991 topics · 44,743 messages

New topic

Latest topics

TopicReplyViewsLast post

Does PCI DSS Level 1 apply to us — which level fits our transaction volume?

Nazlı Ş***·6 months ago#pci dss level 1 #payment security #credit card #virtual pos

42replies

10.2Kviews

İlker K*** · 5 months ago

Tried doing a security code review on our own codebase and hit a wall — what are the common traps?

Ebru K***·7 months ago#secure code review #software security #code analysis #cybersecurity

42replies

13.6Kviews

Cansu K*** · 5 months ago

Should accounting and the manager encrypt accounts and passwords or keep them in plain text? How does the dual-signature rule ensure security?

Zehra T***·7 months ago#password #internal control #procedure

44replies

10.3Kviews

Nuri U*** · 5 months ago

What is a ransomware attack — and what precautions are actually essential at our scale?

Orhan Z***·6 months ago#ransomware #cybersecurity #backup #small business

34replies

127.7Kviews

Beyza T*** · 5 months ago

I want to run a network security audit internally before an external review, where should I start?

Sultan Ö***·7 months ago#network security testing #penetration test #security vulnerability #port scanning

36replies

15.2Kviews

Yasemin B*** · 5 months ago

our accountant almost gave business data to someone over the phone, what can be done against such things

Gürkan K***·6 months ago#phishing #phone #process

31replies

104.4Kviews

Aleyna S*** · 5 months ago

When is digital forensics required: How should the process work for a suspicious employee computer?

Musa·7 months ago#digital forensics #data breach #digital evidence #cybercrime

33replies

5.4Kviews

Ülkü K*** · 5 months ago

How many years can I keep customer data? Can I just trash it? What does KVKK say?

İlker A***·7 months ago#data #kvkk #compliance

26replies

10.8Kviews

Beyza D*** · 5 months ago

I want to hire a security consultant, what criteria should I use to choose, what's the price, how do I find a good one

Tolga K***·7 months ago#consultant #expert #sourcing

32replies

14.2Kviews

Nazlı S*** · 5 months ago

Someone pitched us a honeypot — what is it, and does it make sense for an SMB with two servers?

Nazlı P***·6 months ago#network security #smb it #cybersecurity #server protection

30replies

6.4Kviews

Zafer K*** · 5 months ago

Payment gateway requires PCI DSS compliance — is SAQ-A enough, or do we need an audit?

Kübra Ö***·7 months ago#pci dss compliance #payment systems #e-commerce security #credit card

42replies

14Kviews

Vildan Ş*** · 5 months ago

ISO 27001 requires 'vulnerability management' — what is the exact process and which tools should we use?

Serdar K***·6 months ago#vulnerability management #iso 27001 #information security #security scan

32replies

52Kviews

Yağmur E*** · 5 months ago

Amazon seller account hacked and orders altered, what should we do in the first hour?

Uğur·7 months ago#marketplace security #account recovery #payment security #cyberattack

39replies

14.6Kviews

Cansu V*** · 5 months ago

Incident response plan for a 10-person company: What should it include without turning into binders of paperwork?

Burcu A***·7 months ago#incident response plan #cybersecurity #information security #crisis management

42replies

8.8Kviews

KORİ · 5 months ago

They're trying to sell deception tech and honeypots to our 15-person office. Is this overkill or actually useful?

Gökhan G***·7 months ago#deception technology #honeypot #network security #cybersecurity

45replies

5.7Kviews

Vahide K*** · 5 months ago

should i keep records of attack findings? how long should i store them? will i get in trouble for deleting them later?

Ülkü K***·7 months ago#evidence #storage #documentation

29replies

13.4Kviews

Yiğit K*** · 6 months ago

Hosting provider says our site is clean, but a security scanner flags malware — who do we trust?

Barış K***·7 months ago#site security #malware #security auditor #server hosting

41replies

9.3Kviews

Kadir G*** · 6 months ago

Scanning tools (Nessus, Qualys, OpenVAS) which is good, should I scan daily

Yavuz D***·7 months ago#scanning #openness

31replies

9.2Kviews

KORİ · 6 months ago

We've been asked to comply with the NIST framework for incident response — should we adapt it or build our own plan?

Caner A***·7 months ago#nist framework #incident response #information security #smb security

40replies

10.7Kviews

KORİ · 6 months ago

Saudi Personal Data Protection Law: we have legacy customer data — where do we even start?

Mustafa C***·7 months ago#personal data protection law #saudi pdpl #data retention #data disposal

29replies

45.6Kviews

Ali P*** · 6 months ago