In part 2 of the series, we dived into the internals of the provenance document to understand its content and usage. In this part, we will explore the different SLSA levels for generating provenance and go through the different challenges…
Category: Security Boulevard
USENIX Security ’23 – Noé Zufferey, Mathias Humbert, Romain Tavenard, Kévin Huguenin ‘Watch Your Watch: Inferring Personality Traits From Wearable Activity Trackers’
Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel. Permalink The post…
Data In-Flight: Applying Zero Trust to Airline Travel and Content Security
No matter which airport you travel through or how many times you travel through it, one element remains the same – the security check(s). Whether you’re asked to take off your shoes, put your laptop in a separate bin, or…
USENIX Security ’23 – ‘Auditory Eyesight: Demystifying μs-Precision Keystroke Tracking Attacks On Unconstrained Keyboard Inputs’
Yazhou Tu, Liqun Shan, Md Imran Hossen, Sara Rampazzi, Kevin Butler, Xiali Hei Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated…
Randall Munroe’s XKCD ‘Definitely’
<a class=” sqs-block-image-link ” href=”https://xkcd.com/2871/”> <img alt=”” height=”461″ src=”https://images.squarespace-cdn.com/content/v1/5355d604e4b03c3e9896e131/2a05f663-67a0-4a51-8a67-6a93464281ca/definitely.png?format=1000w” width=”463″ /> </a><figcaption class=”image-caption-wrapper”> via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Definitely’ appeared first on Security Boulevard. This article…
AI In Windows: Investigating Windows Copilot
By Yarden Shafir AI is becoming ubiquitous, as developers of widely used tools like GitHub and Photoshop are quickly implementing and iterating on AI-enabled features. With Microsoft’s recent integration of Copilot into Windows, AI is even on the old stalwart…
Above 30% Apps at Risk with Vulnerable Log4j Versions
An alarming 38% of applications that use the Apache Log4j library use the versions susceptible to security vulnerabilities. One of them is a critical vulnerability, Log4Shell (CVE-2021-44228), for which patches have been available for over two years. Log4Shell is an…
How to Prevent a Ransomware Attack on Your Business
Ransomware is growing in popularity and severity, so find out what preventative measures can defend your business The post How to Prevent a Ransomware Attack on Your Business appeared first on Security Boulevard. This article has been indexed from Security…
Kyivstar Cyber Attack: Ukraine Telecom Operator Paralyzed
Ukraine’s largest telecom operator, Kyivstar, was recently shut down after falling prey to a cyberattack. The Kyivstar cyber attack left millions of Ukrainians without access to cellular or internet services. Recent reports have cited the telecom operator’s CEO, Alexander Komarov,…
Importance of IoT Live Patching: Protecting Your Connected Devices
The conventional patching method necessitates a reboot. Live patching eliminates the need to reboot the system. KernelCare IoT automates patching for Linux-based IoT devices. With so many ecosystems woven with different devices, the need for strong cybersecurity measures has…
Comic Agilé – Mikkel Noe-Nygaard, Luxshan Ratnaravi – #272 — Product Ops
<a class=” sqs-block-image-link ” href=”https://www.comicagile.net/comic/product-ops/”> <img alt=”” height=”548″ src=”https://images.squarespace-cdn.com/content/v1/5355d604e4b03c3e9896e131/af1a3173-77c7-4b3f-af0d-a3faea939039/Comic-agile_272.png?format=1000w” width=”620″ /> </a><figcaption class=”image-caption-wrapper”> via the respected Software Engineering expertise of Mikkel Noe-Nygaard and the lauded Software Engineering / Enterprise Agile Coaching work of Luxshan Ratnaravi at Comic Agilé! Permalink The…
USENIX Security ’23 – Carter Slocum, Yicheng Zhang, Nael Abu-Ghazaleh, Jiasi Chen ‘Going Through The Motions: AR/VR Keylogging From User Head Motions’
Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel. Permalink The post…
Wrapping up Q4 2023 : new detectors, your favorite features, and what’s coming next in GitGuardian
Unlock the latest secrets detectors, automate severity scoring, and dive into GitGuardian’s unique dev & sec collaboration features! The post Wrapping up Q4 2023 : new detectors, your favorite features, and what’s coming next in GitGuardian appeared first on Security…
We’ve added more content to ZKDocs
By Jim Miller We’ve updated ZKDocs with four new sections and additions to existing content. ZKDocs provides explanations, guidance, and documentation for cryptographic protocols that are otherwise sparingly discussed but are used in practice. As such, we’ve added four new…
Best of 2023: Detecting CVE-2023-23397: How to Identify Exploitation of the Latest Microsoft Outlook Vulnerability
Microsoft recently released patches for nearly 80 new security vulnerabilities, including two zero-day exploits, CVE-2023-23397 and CVE-2023-24880. CVE-2023-23397 is an elevation-of-privilege (EoP) vulnerability in Microsoft Outlook that could allow an attacker to obtain a victim’s password hash. The vulnerability occurs…
UEFI Failing: What to Know About LogoFAIL Attacks
Multiple UEFI vulnerabilities can lead to Linux, Windows, and Mac exploits LogoFAIL persists across operating system reinstallations It also extends the supply chain risks to the hardware itself Security researchers, known for their inquisitive and unconventional methods, have recently…
SLAM Attack: New Vulnerability Targets Intel, AMD, Arm CPUs
In a groundbreaking revelation, researchers from Vrije Universiteit Amsterdam have uncovered a formidable side-channel attack known as SLAM, posing a serious threat to the security of current and future CPUs manufactured by tech giants Intel, AMD, and Arm. This sophisticated…
Ledger Supply Chain Breach: $600,000 Theft Unveiled
Recent events have brought to light the Ledger supply chain breach, a cybercrime incident that led to the theft of $600,000 in virtual assets. For those who don’t know, Ledger is a company that develops hardware and software-based cryptocurrency wallets.…
Medical Emergency Assistance – Thank You
I have been an active volunteer as part of corporate medical response teams for more than 20 years of my career. It has never been my primary job, but I like having the skills to help when really bad…
Why Use a VLAN? Unveiling the Benefits of Virtual LANs in Network Security
Understanding the Basic Concept of VLANs Virtual Local Area Networks, or VLANs, serve as a critical computing technology designed for effective network traffic management. These are subsets within a Local Area Network (LAN) that partition the network into multiple distinct…