Cybersecurity headlines are being dominated by reported claims of a significant data breach involving Snowflake, a leading cloud-based data storage… The post What We Know So Far about the Snowflake “Breach” appeared first on Symmetry Systems. The post What We…
Category: Security Boulevard
Mastering the Art of Incident Response: From Chaos to Control
Today, it’s not a matter of if your organization will face a cyberattack but when. Imagine this: An employee’s PC starts behaving erratically, displaying an ominous message that files have been encrypted and data exfiltrated. It’s the stuff of every…
The Surprising Supporter Behind the Push to Modernize GSOCs: The C-Suite
The increased attention from the C-Suite signals that executives want better alignment between security and the business. Security leaders are seeing enthusiasm, even mounting pressure, from company leaders to upgrade their organizations’ global security operation center’s (GSOC) infrastructure. One reason…
Patch Tuesday Update – June 2024
The post Patch Tuesday Update – June 2024 appeared first on Digital Defense. The post Patch Tuesday Update – June 2024 appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article: Patch Tuesday…
The TIDE: Threat-Informed Defense Education (Qilin, RansomHub, BlackSuit)
This is our second installment of The TIDE, which is your guide to all things Threat-Informed Defense—at least in terms of what my Adversary Intelligence Team works on and provides to our customers weekly. Last week I wrote about the…
Network Equipment, IoT Devices are Big Security Risks: Forescout
IT systems – and this year networking equipment in particular – continue to pose the most security risk for organizations, but it is the vulnerable Internet of Things (IoT) devices that are quickly moving up the ladder, according to researchers…
Microsoft, Google Come to the Aid of Rural Hospitals
Microsoft and Google will provide free or low-cost cybersecurity tools and services to rural hospitals in the United States at a time when health care facilities are coming under increasing attack by ransomware gangs and other threat groups. For independent…
Ticketmaster is Tip of Iceberg: 165+ Snowflake Customers Hacked
Not our fault, says CISO: “UNC5537” breached at least 165 Snowflake instances, including Ticketmaster, LendingTree and, allegedly, Advance Auto Parts. The post Ticketmaster is Tip of Iceberg: 165+ Snowflake Customers Hacked appeared first on Security Boulevard. This article has been…
Verizon DBIR 2024: The rise in software supply chain attacks explained
The Verizon Data Breach Investigations Report (DBIR) is considered to be one of the leading annual reports on the state of cybersecurity. The report, which analyzes thousands of data breaches from the previous year, breaks down these incidents by their…
Risks of poor PKI management
Public Key Infrastructure (PKI) is essential for businesses to maintain data security and protect digital communications. However, implementing a PKI is just the first step—you must support it with proper ongoing management to reap the benefits and prevent security exposures.…
Recent glibc Vulnerabilities and How to Protect Your Linux System
The GNU C Library, commonly known as glibc, is a critical component in many Linux distributions. It provides core functions essential for system operations. However, like any software library, it is not immune to vulnerabilities. Recently, multiple security issues have…
Software Supply Chain Risks ⎪Cassie Crossley (VP Supply Chain Security, Schneider Electric)
This blog is based on our conversation with Cassie Crossley, Vice President of Supply Chain Security at Schneider Electric. It covers the unique challenges of software supply chain security. The post Software Supply Chain Risks ⎪Cassie Crossley (VP Supply Chain…
RSAC Fireside Chat: Ontinue ups the ‘MXDR’ ante — by emphasizing wider automation, collaboration
Companies that need to protect assets spread across hybrid cloud infrastructure face a huge challenge trying to mix and match disparate security tools. Related: Cyber help for hire Why not seek help from a specialist? At RSAC 2024, I ……
Growing Cyber Threats Amid Israel-Palestine Tensions
Growing Cyber Threats Focus on Ransomware, Infostealers, and Defacements This blog continues our geopolitical series, highlighting the growing cyber threats during the ongoing Israel-Palestine tensions. Recent months have seen a significant increase in cyberattacks targeting Israeli institutions, with a particular…
Cloud Penetration Testing: Tools, Methodology & Prerequisites
Businesses increasingly migrate to cloud-based solutions for storage, applications, and critical functions. While the cloud offers scalability and agility, it also introduces new security challenges. Cloud penetration testing is a crucial defence mechanism for proactively identifying and addressing these vulnerabilities.…
What is Mobile Application Penetration Testing: Benefits & Tools
Mobile applications are ubiquitous, but their security can be a concern. Unlike web applications, in a mobile landscape, both the device and the mobile application have a crucial role in security due to increasing cyber threats. Mobile application penetration testing…
A Comprehensive Guide to API Penetration Testing
What is API Penetration Testing? API penetration testing, or API pentesting, is a specialised form of security testing focused on identifying and addressing security vulnerabilities within an API (Application Programming Interface). APIs are the backbone of modern web applications,…
Ghostwriter v4.2
Ghostwriter v4.2: Project Documents & Reporting Enhancements After April’s massive Ghostwriter v4.1 release, we received some great feedback and ideas. We got a little carried away working on these and created a release so big we had to call it…
Breach Debrief Series: Snowflake MFA Meltdown Creates Data Leak Blizzard
On May 27, a threat actor group called ShinyHunters announced that it was selling 560 million records stolen in a data breach. The records include names, email addresses, physical addresses, and partial credit card numbers. This personally identifiable information (PII)…
Is CVSS Alone Failing Us? Insights From Our Webinar With Verizon
In a recent webinar with Verizon, we discussed how organizations measure and prioritize their vulnerabilities. We reviewed insights from Verizon’s 2024 Data Breach Investigations Report, and double-clicked on data to answer several other key questions, such as: Is the Common…