The Office of Management and Budget (OMB) released a Draft Memorandum for Modernizing the Federal Risk and Authorization Management Program (FedRAMP) on Friday, Oct 27, 2023. FedRAMP was codified in 2022 when Congress passed the FedRAMP Authorization Act (“Act”). The…
Category: Security Boulevard
How to Get HITRUST Certified—and Why
What is the HITRUST Certification? In 2007, a group of healthcare organizations, technology companies, and government agencies—including the American Hospital Association, Blue Cross Blue Shield Association, the Centers for Medicare & Medicaid Services (CMS), McKesson Corporation, and Microsoft—got together to…
Pro-Palestinian Threat Groups Expand Cyberwar Beyond Israel
As Israel’s military escalates its ground and air attacks in Gaza, the parallel cyberwar that spun up so quickly following the October 7 surprise raids by Hama terrorists appears to be changing and spreading to other countries. A report this…
Spookiest Hacks, Cybercriminals and Tactics Lurking in 2023
A Bitdefender study found nearly half of Halloween-themed spam is fraudulent, with 69% of the spam hitting U.S. inboxes. The post Spookiest Hacks, Cybercriminals and Tactics Lurking in 2023 appeared first on Security Boulevard. This article has been indexed from…
Identity Theft: The Silent Threat for Executives
Identity theft isn’t a new phenomenon, but its rise in the executive world can no longer be ignored. As a CISO, you understand the importance of safeguarding not only your organization’s data but also the personal information of your top-level…
SEC Regulations, Government Overreach and Access to Cybersecurity Information
Do the SEC’s new rules qualify as government overreach? Sysdig’s Crystal Morin explores the issue. The post SEC Regulations, Government Overreach and Access to Cybersecurity Information appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read…
8 Essential Windows Security Tips to Protect Your Computer
Windows operating systems and software are complex pieces of software with millions of lines of code. This means that there are many potential vulnerabilities, or flaws, that can be exploited by attackers. Attackers can use vulnerabilities to gain unauthorized access…
DEF CON 31 – Policy Panel: How Hackers Can Work With Government To Protect High Risk Communities
Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. Permalink The post DEF…
Achieving Zero-Standing Privileges with Okta and Apono
Organizations are twice as likely to get breached through compromised credentials than any other threat vector. Compromised credentials are when credentials, such as usernames and passwords, are exposed to unauthorized entities. When lost, stolen or exposed, compromised credentials can give…
DEF CON 31 – Policy Panel: International Cyber Policy 101
Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. Permalink The post DEF…
SOC Automation Explained: 7 Real-World Examples
The Security Operations Center (SOC) serves as a hub for an organization’s cybersecurity efforts. It is tasked with the responsibility of defending against unauthorized activities in the digital landscape. A SOC specializes in activities including monitoring, detection, analysis, response, and…
Why Smart SOAR is the Best SOAR for Slack
Effective communication is a critical component in incident response, often making the difference between rapid resolution and prolonged impact. This article explores how the integration between Smart SOAR and Slack provides a focused set of automated tasks to improve communication…
The Imperative Role Parents Play in Ensuring Their Children’s Safety While Navigating the Digital Landscape
In today’s digital age, our children are growing up in a world that is vastly different from the one we knew as kids. With the internet and video games becoming an integral part of their lives, the responsibilities of parents…
DEF CON 31 Policy Panel: Navigating the Digital Frontier Advancing Cyber Diplomacy
Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. Permalink The post DEF…
Google Expands Bug Bounty Program to Find Generative AI Flaws
Google, a big player in the rapidly expanding world of Ai, is now offer rewards to researchers who find vulnerabilities in its generative AI software. Like Microsoft, Amazon, and other rivals, Google is integrating AI capabilities in a widening swatch…
Eclypsium Named Most Innovative Software Supply Chain Security Company in Coveted Top InfoSec Innovator Awards for 2023
Portland, OR – Oct. 27, 2023 – Eclypsium®, the digital supply chain security company protecting critical hardware, firmware, and software in enterprise IT infrastructure, today announced that Cyber Defense Magazine (CDM), the industry’s leading electronic information security magazine, has awarded…
More Than a Cryptominer, StripedFly Malware Infects 1 Million PCs
A malware that for more than half a decade was written off as just another cryptominer actually was a stealthy and sophisticated threat that infected more than a million Windows and Linux systems, harvesting credentials and spying on users. Kaspersky…
Unlocking API Security Excellence: Wallarm at OWASP Global AppSec DC 2023
If you’re involved in securing APIs, applications and web applications, or looking to learn about these, then the OWASP Global AppSec DC Conference next week is a must-attend event. Wallarm, the experts in API and application security, will be there,…
Staying Ahead of Social Engineering Threats
With social engineering exploits on the rise, now is a good time to stay ahead of threats and attackers’ tricks, keep your personal and sensitive data safe and stop unlawful entry into your organization. Bad actors are always looking for…
IT, Security Leaders Play Catch-Up With Generative AI Threats
There’s a significant disparity between organizations’ concerns about generative AI risks and their effectiveness in addressing them. The post IT, Security Leaders Play Catch-Up With Generative AI Threats appeared first on Security Boulevard. This article has been indexed from Security…