#CFP It is still not too late to submit your #security or #privacy talk to the DHIS2 Annual Conference, #DAC2024. During the dedicated cybersecurity track, we'll discuss the security aspects of digital health infrastructure, supply chain security, and recent updates of privacy laws in the #DHIS2 countries. https://dac2024.dhis2.org/72-call-for-abstracts

The recent #vulnerabilities in Ivanti EPMM remind us that creating quality and secure software takes a lot of work (and costs money). We can only guess what can be convincing factors to purchase Ivanti products, looking at the alarming evidence of critical security issues in LanDesk, PulseSecure, and now EPMM. Looking at Ivanti's #security policies and selected #pentest reports (https://www.ivanti.com/resources/security-compliance), there is a strong impression that we are in front of new painful disclosures.

Folks, does your company's website have a security.txt file? Last week I desperately tried to report a security issue to a well-known global retail chain (which suffered from a #breach last year). They seem not to have a security team's page, a bug bounty program, etc., but what could be easier than https://securitytxt.org (RFC 9116)? For me, it indicates an organization's real attitude to #security.