Holiday Shopping Readiness: How is Retail Data Security Holding Up? madhav Wed, 11/06/2024 – 05:30 < div> The 2024 holiday season is here. Retailers have been prepping for this season all year and are ready to provide a safe, secure,…
Category: Security Boulevard
Canadian Man Accused of Snowflake Data Breach Arrested
A Canadian resident, Alexander “Connor” Moucka, was arrested by Canadian law enforcement at the request of the United States for allegedly stealing sensitive data of myriad corporations like AT&T and Santander Bank that were stored in Snowflake’s cloud systems and…
DEF CON 32 – Open Sesame: How Vulnerable Is Your Stuff In Electronic Lockers
Authors/Presenters: Dennis Giese, braelynn Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink…
CISA Unveils Guidelines to Combat AI-Driven Cyber Threats
AI in SaaS is unavoidable. The top half of ServiceNow’s homepage is dedicated to putting AI to work. Salesforce has 17 mentions of AI or Einstein on its homepage. Copilot dominates the homepage banner for Microsoft, while GitHub touts itself…
Fortinet Adds Data Loss Prevention Capability Following Acquistion of Next DLP
Fortinet has added a data loss prevention (DLP) platform to its portfolio that is based on the technology it gained with the acquisition of Next DLP earlier this year. The post Fortinet Adds Data Loss Prevention Capability Following Acquistion of…
Why PKIaaS is a Smarter and Secure Alternative to On-Premises PKI
Private PKI (Public Key Infrastructure) is critical for trusted authentication and secure communication among internal applications, devices, workloads, machines, and services. While most organizations understand its importance, managing it effectively is still a struggle for many. Traditionally, organizations manage private…
Google Uses Its Big Sleep AI Agent to Find SQLite Security Flaw
Google researchers behind the vendor’s Big Sleep project used the LLM-based AI agent to detect a security flaw in SQLite, illustrating the value the emerging technology can have in discovering vulnerabilities that techniques like fuzzing can’t. The post Google Uses…
Sanitize Client-Side: Why Server-Side HTML Sanitization is Doomed to Fail
HTML sanitization has long been touted as a solution to prevent malicious content injection. However, this approach faces numerous challenges. In this blog post, we’ll explore the limitations of server-side HTML sanitization and discuss why client-side sanitization is the better…
Strengthen Cyber Resilience: A Checklist for ITOps and SecOps Collaboration
Building cyber resilience so that you can persistently prevent, withstand, and recover from disruptions to your network infrastructure is becoming increasingly important. The post Strengthen Cyber Resilience: A Checklist for ITOps and SecOps Collaboration appeared first on Security Boulevard. This…
Recovering From a Breach: 4 Steps Every Organization Should Take
The reality is, that despite our best efforts, breaches happen. And there’s a lot less information on how to respond versus how to prevent. The post Recovering From a Breach: 4 Steps Every Organization Should Take appeared first on…
Leveraging Tabletop exercises to Enhance OT security maturity
Has your organization tested its OT security incident response plan in the last 6 months? Do you remember when you last checked your institutional OT security awareness levels? Are your OT security programs running in compliance with IEC 62443? If…
Three ‘Must Solve” Challenges Hindering Cloud-Native Detection and Response
As security teams level up to support the cloud-native transition, three major issues keep impeding detection and response in the cloud. The post Three ‘Must Solve” Challenges Hindering Cloud-Native Detection and Response appeared first on Security Boulevard. This article has…
How Cybersecurity Training Must Adapt to a New Era of Threats
We have entered a new era of cyberthreats, and employees must be equipped to defend the company from more cunning and effective attacks than ever. The post How Cybersecurity Training Must Adapt to a New Era of Threats appeared first…
The Role of Secrets Management in Securing Financial Services
The Role of Secrets Management in Securing Financial Services madhav Tue, 11/05/2024 – 04:30 < div> Secrets management is one of the top DevOps challenges. According to 2024 Thales Global Data Threat Report: Financial Services, FinServ organizations face greater security…
Hackers Exploit DocuSign APIs for Phishing Campaign
Cybercriminals are exploiting DocuSign’s APIs to send highly authentic-looking fake invoices, while DocuSign’s forums have reported a rise in such fraudulent campaigns in recent months. Unlike typical phishing scams that rely on spoofed emails and malicious links, these attacks use…
What is a Cyber Range?
Today, we’re diving into the fascinating world of cyber ranges—a critical component in the ever-evolving landscape of cybersecurity. But what exactly is a cyber range? Let’s break it down. What is a Cyber Range? A cyber range is a sophisticated…
FIDO: Consumers are Adopting Passkeys for Authentication
The FIDO Alliance found in a survey that as consumers become more familiar with passkeys, they are adopting the technology as a more secure alternative to passwords to authenticate their identities online. The post FIDO: Consumers are Adopting Passkeys for…
DEF CON 32 – OH MY DC Abusing OIDC All The Way To Your Cloud
Authors/Presenters: Aviad Hahami Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink The…
MDR vs. MSSP: Making the Right Choice for Your Business
Understand the key differences between MDR and MSSP and choose the right cybersecurity service to protect your business. The post MDR vs. MSSP: Making the Right Choice for Your Business appeared first on D3 Security. The post MDR vs. MSSP:…
Randall Munroe’s XKCD ‘Disposal’
<a class=” sqs-block-image-link ” href=”https://xkcd.com/3005/” rel=”noopener” target=”_blank”> <img alt=”” height=”331″ src=”https://images.squarespace-cdn.com/content/v1/5355d604e4b03c3e9896e131/d08e3525-7eec-467f-99e2-c5e258162ff6/disposal.png?format=1000w” width=”740″ /> </a><figcaption class=”image-caption-wrapper”> via the comic humor & dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Disposal’ appeared first on Security Boulevard.…