Discover why adaptability is the 2025 SaaS security word of the year. This is the year to address shadow SaaS, AI risks, and evolving cyber threats effectively! The post 2025 SaaS Security Word of the Year: Adaptability | Grip appeared…
Category: Security Boulevard
The Cost of Complacency in Credential Hygiene
The PowerSchool breach highlights the risks of poor credential hygiene. This article covers proactive steps to protect your SaaS environment. The post The Cost of Complacency in Credential Hygiene appeared first on Security Boulevard. This article has been indexed from…
Below the Surface Winter 2024 Edition – The Year in Review
The Year of the Typhoon Highlights from this edition: The post Below the Surface Winter 2024 Edition – The Year in Review appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise. The post Below the Surface Winter…
New Paper: “Future of SOC: Transform the ‘How’” (Paper 5)
After a long, long, long writing effort … eh … break, we are ready with our 5th Deloitte and Google Cloud Future of the SOC paper “Future of SOC: Transform the ‘How’.” As a reminder (and I promise you do need it; it…
Hackers Attack PowerSchool, Expose K-12 Teacher and Student Data
Giant education software provider PowerSchool reported that hackers using compromised credentials access a database and stole student and teacher data in an attack that the company said was not ransomware, though a ransom apparently was paid. Affected K-12 school districts…
SonarQube for IDE: Our journey this year, and sneak peek into 2025
Reviewing the enhancements delivered by the SonarQube for IDE team for developers during 2024. Focusing on streamlining the UX for teams, harnessing the power of SonarQube Server and Cloud through connected mode into your IDE, and making it even easier…
Phishing Threats, GenAI Among Top Cybersecurity Risks in 2025
Organizations are facing escalating threats from phishing attacks, personal app usage and the widespread adoption of generative AI (GenAI) in workplaces. According to a Netskope report, phishing attacks surged in 2024, with enterprise employees clicking on phishing links at a…
From Cybersecurity Consolidation to GenAI and Innovation – What to Expect: 2025 Predictions
What to expect in 2025 and beyond, into the future. Here are some likely predictions across cybersecurity, GenAI and innovation, and defensive cyber. The post From Cybersecurity Consolidation to GenAI and Innovation – What to Expect: 2025 Predictions appeared first…
Fake CAPTCHA Scams: Ruining Consumer Trust and Driving Website Abandonment
CAPTCHAs frustrate users, fail to stop sophisticated bots, and now pose a serious malware risk. The post Fake CAPTCHA Scams: Ruining Consumer Trust and Driving Website Abandonment appeared first on Security Boulevard. This article has been indexed from Security Boulevard…
Top 3 Mistakes PCI DSS SAQ-D Service Providers Are Making in 2025 That Will Knock Them Out of PCI DSS 4 Compliance
The post Top 3 Mistakes PCI DSS SAQ-D Service Providers Are Making in 2025 That Will Knock Them Out of PCI DSS 4 Compliance appeared first on Feroot Security. The post Top 3 Mistakes PCI DSS SAQ-D Service Providers Are…
Digital Wallets: From Consumer Convenience to Corporate Security
From storing state IDs, driver’s licenses and passports to managing payment information, digital wallets have revolutionized the way we handle personal credentials. The post Digital Wallets: From Consumer Convenience to Corporate Security appeared first on Security Boulevard. This article has…
The Benefits of Implementing Least Privilege Access
Why is Least Privilege Access a Key Aspect in Security Practices? If you’re involved in cybersecurity, the term “Least Privilege Access” may be familiar. But why is it considered a central feature in security practices across diverse industries? Least privilege,…
Chinese-linked Hackers May Be Exploiting Latest Ivanti Vulnerability
Software maker Ivanti, which for more than a year has been plagued by security flaws in its appliance, unveiled two new ones this week, with Mandiant researchers saying that one likely is being activity exploited by China-linked threat groups. The…
Randall Munroe’s XKCD ‘Features of Adulthood’
<a class=” sqs-block-image-link ” href=”https://xkcd.com/3034/” target=”_blank”> <img alt=”” height=”620″ src=”https://images.squarespace-cdn.com/content/v1/5355d604e4b03c3e9896e131/eefaa0f5-d620-4f2c-b628-26c456b26b88/features_of_adulthood.png?format=1000w” width=”704″ /> </a><figcaption class=”image-caption-wrapper”> via the comic humor & dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Features of Adulthood’ appeared first on Security…
The Hidden Costs of Poor Access Management: Why Small Businesses Can’t Afford to Ignore It
When a former employee retains access to sensitive systems months after leaving, it’s more than a security oversight—it’s a serious business risk. Learn true costs of poor access management, from immediate impacts to long-term reputation damage, and discover practical steps…
Open Interfaces Needed to Cut Security Operations Costs & Boost Efficiency
While AI/ML and automation promise to help streamline and reduce security operation costs, these efforts could be significantly boosted by the increased availability of standard interfaces The post Open Interfaces Needed to Cut Security Operations Costs & Boost Efficiency appeared…
Security Implications of Configuration Drift
Addressing configuration drift – a seemingly minor issue – is essential to maintaining a secure and resilient IT environment. The post Security Implications of Configuration Drift appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read…
Leveraging Government Grants to Enhance Critical Security Systems
The Biden-Harris Administration’s Bipartisan Infrastructure Law, also known as the Infrastructure Investment and Jobs Act (IIJA), allows organizations to receive government grant money for improved cybersecurity. The post Leveraging Government Grants to Enhance Critical Security Systems appeared first on Security…
Building Resilience Into Cyber-Physical Systems Has Never Been This Mission-Critical
Our nation’s critical infrastructure is increasingly brittle and under attack. Take the recent report that the drinking water of millions of Americans is at risk due to technical vulnerabilities. The post Building Resilience Into Cyber-Physical Systems Has Never Been This…
Fortinet CISO Details ‘Phish-Free’ Phishing Scheme Using PayPal
A bad actor is using a Microsoft 365 test domain and a self-created distribution list to bypass traditional email protections and entice victims to hand over their PayPal account information in what Fortinet’s CISO is calling a “phish-free” phishing campaign.…