Overview Recently, NSFOCUS CERT monitored that Atlassian officially fixed an improper authentication vulnerability in the Atlassian Communication Data Center and Server (CVE-2023-22518). Unauthenticated remote attackers can bypass the authentication of the target system to a certain extent by constructing malicious…
Category: Security Boulevard
Enhance Your Reporting with Grafana – Security Spotlight
The “Security Spotlight” blog series provides insight into emerging cyberthreats and shares tips for how you can leverage LogRhythm’s security tools, services, and out-of-the-box content to defend against attacks. In this Security Spotlight, we’ll be talking about enhancing your reporting……
Log Ingestion 101: Which Logs Should You Be Bringing Into Your SIEM?
Security Information and Event Management (SIEM) tools are indispensable in an organization’s cybersecurity framework. SIEM tools collect, analyze, and correlate log data from various devices and applications across an organization to identify suspicious activities, enhance overall security posture, and ensure……
Unlock GDPR Compliance for Small Business: A Must-Read Guide
Introduction: Why GDPR Compliance Matters for Small Business Navigating the complex landscape of GDPR compliance for small business can be daunting, but it’s a crucial aspect that can’t be ignored. With hefty fines and reputational damage at stake, understanding GDPR…
Join the Cloud Native Community at KubeCon + CloudNativeCon North America
If you’re running cloud-native apps and services, you probably already know that KubeCon + CloudNativeCon North America 2023 is next week, November 6-9 in Chicago! Fairwinds is sponsoring KubeCon once again, contributing our efforts to the flagship conference of the…
DEF CON 31 Policy – Panel: All Your Vulns Are Belong To Terms And Conditions
Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. Permalink The post DEF…
On Detection: Tactical to Functional
Part 10: Implicit Process Create Introduction Welcome back to another installment of the On Detection: Tactical to Functional series. In the previous article, I argued that we perceive actions within our environment at the Operational level (especially when it comes to…
Understanding the Joe Biden Executive Order on AI and Enhancing Cybersecurity: Key Takeaways and Recommendations
On October 30, 2023, the White House issued an Executive Order promoting safe, secure, and trustworthy artificial intelligence (AI) deployment. This Executive Order recognizes the global challenges and opportunities presented by AI and emphasizes the need for collaboration, standards development,…
Orca Security Taps Amazon for Generative AI Expertise
Orca Security is adding LLMs hosted on the AWS cloud to those from Microsoft and OpenAI to provide additional generative AI capabilities to cybersecurity teams. The post Orca Security Taps Amazon for Generative AI Expertise appeared first on Security Boulevard.…
We Won’t Pay Ransomware Crims — 40 Nations Promise Biden’s WH
Will CRI pledge work? International Counter Ransomware Initiative (CRI) hopes to pull rug from under scrotes. The post We Won’t Pay Ransomware Crims — 40 Nations Promise Biden’s WH appeared first on Security Boulevard. This article has been indexed from…
SolarWinds Swings Back at SEC Following Fraud Charges
Executives at SolarWinds are pushing back at the lawsuit filed this week by the Securities and Exchange Commission against the company and its top security official in connection with the high-profile cyberattack, with CEO calling the agency’s action “a misguided…
What is Attack Surface Management and How Has it Changed?
This blog explores popular attack surface threat vectors, and the steps businesses can take for attack surface management. The post What is Attack Surface Management and How Has it Changed? appeared first on Security Boulevard. This article has been indexed…
Observability Vs. Monitoring: A Security Perspective
Just like having a strong observability platform, in the world of DevOps, ensuring the security of systems and applications is of utmost importance. In recent years, the risk of potential security breaches has increased, according to a British government study…
Credential phishing IOCs increased nearly 45% in Q3
During Q3 of 2023, new and old techniques appeared, creating a high volume of campaigns that reached users in environments protected by secure email gateways (SEGs). Throughout this quarter, we saw an increase in volume for both credential phishing and…
Buyer’s Guide for Privileged Access Governance Solutions
We’re excited to announce that we’ve just published our Buyer’s Guide for Privileged Access Governance solutions! Why we created the guide Most companies in the world today have already migrated most of their workloads to the cloud, with 91 percent…
Extending Cybersecurity Awareness to IoT Devices
We’re at the end of Cybersecurity Awareness Month, which is a good time to reflect on where your organization needs to improve and extend it’s cybersecurity efforts. If you’re like most organizations the answer is IoT devices and applications; it’s…
DEF CON 31 Policy – Panel: Blocking Pathways into Cybercrime Current Efforts, Future Opportunities
Many thanks to DEF CON 31 for publishing their terrific DefCon Conference 31 presenters content. Originating from the conference events at Caesars Forum, Flamingo, Harrah’s and Linq in Las Vegas, Nevada; via the organizations YouTube channel. Permalink The post DEF…
News alert: Ivanti reports reveals 49% of CXOs have requested bypassing security measures
Salt Lake City, Utah, Oct. 31, 2023 —Ivanti, the tech company that elevates and secures Everywhere Work, today announced the results of its Executive Security Spotlight report as part of Ivanti’s Cybersecurity Status Report Series. Ivanti surveyed over … (more…)…
News alert: Traceable celebrates winning the prestigious SINET16 Innovator Award for 2023
San Francisco, Calif., Oct. 31, 2023 – Traceable AI, the industry’s leading API security company, proudly announces its continued recognition in the cybersecurity industry, with the latest accolade being the prestigious SINET16 Innovator Award for 2023. The SINET16 Innovator … (more…) The…
How the SEC charges against SolarWinds highlight the cybersecurity liability of software companies
On October 30, 2023, the Securities and Exchange Commission (SEC) filed a civil complaint against SolarWinds Corporation and its chief information security officer, Timothy G. Brown, for violating federal securities laws by making false and misleading statements about its cybersecurity…