Fortinet has added a data loss prevention (DLP) platform to its portfolio that is based on the technology it gained with the acquisition of Next DLP earlier this year. The post Fortinet Adds Data Loss Prevention Capability Following Acquistion of…
Tag: Security Boulevard
Why PKIaaS is a Smarter and Secure Alternative to On-Premises PKI
Private PKI (Public Key Infrastructure) is critical for trusted authentication and secure communication among internal applications, devices, workloads, machines, and services. While most organizations understand its importance, managing it effectively is still a struggle for many. Traditionally, organizations manage private…
Google Uses Its Big Sleep AI Agent to Find SQLite Security Flaw
Google researchers behind the vendor’s Big Sleep project used the LLM-based AI agent to detect a security flaw in SQLite, illustrating the value the emerging technology can have in discovering vulnerabilities that techniques like fuzzing can’t. The post Google Uses…
Sanitize Client-Side: Why Server-Side HTML Sanitization is Doomed to Fail
HTML sanitization has long been touted as a solution to prevent malicious content injection. However, this approach faces numerous challenges. In this blog post, we’ll explore the limitations of server-side HTML sanitization and discuss why client-side sanitization is the better…
Strengthen Cyber Resilience: A Checklist for ITOps and SecOps Collaboration
Building cyber resilience so that you can persistently prevent, withstand, and recover from disruptions to your network infrastructure is becoming increasingly important. The post Strengthen Cyber Resilience: A Checklist for ITOps and SecOps Collaboration appeared first on Security Boulevard. This…
Recovering From a Breach: 4 Steps Every Organization Should Take
The reality is, that despite our best efforts, breaches happen. And there’s a lot less information on how to respond versus how to prevent. The post Recovering From a Breach: 4 Steps Every Organization Should Take appeared first on…
Leveraging Tabletop exercises to Enhance OT security maturity
Has your organization tested its OT security incident response plan in the last 6 months? Do you remember when you last checked your institutional OT security awareness levels? Are your OT security programs running in compliance with IEC 62443? If…
Three ‘Must Solve” Challenges Hindering Cloud-Native Detection and Response
As security teams level up to support the cloud-native transition, three major issues keep impeding detection and response in the cloud. The post Three ‘Must Solve” Challenges Hindering Cloud-Native Detection and Response appeared first on Security Boulevard. This article has…
How Cybersecurity Training Must Adapt to a New Era of Threats
We have entered a new era of cyberthreats, and employees must be equipped to defend the company from more cunning and effective attacks than ever. The post How Cybersecurity Training Must Adapt to a New Era of Threats appeared first…
The Role of Secrets Management in Securing Financial Services
The Role of Secrets Management in Securing Financial Services madhav Tue, 11/05/2024 – 04:30 < div> Secrets management is one of the top DevOps challenges. According to 2024 Thales Global Data Threat Report: Financial Services, FinServ organizations face greater security…
Hackers Exploit DocuSign APIs for Phishing Campaign
Cybercriminals are exploiting DocuSign’s APIs to send highly authentic-looking fake invoices, while DocuSign’s forums have reported a rise in such fraudulent campaigns in recent months. Unlike typical phishing scams that rely on spoofed emails and malicious links, these attacks use…
What is a Cyber Range?
Today, we’re diving into the fascinating world of cyber ranges—a critical component in the ever-evolving landscape of cybersecurity. But what exactly is a cyber range? Let’s break it down. What is a Cyber Range? A cyber range is a sophisticated…
FIDO: Consumers are Adopting Passkeys for Authentication
The FIDO Alliance found in a survey that as consumers become more familiar with passkeys, they are adopting the technology as a more secure alternative to passwords to authenticate their identities online. The post FIDO: Consumers are Adopting Passkeys for…
DEF CON 32 – OH MY DC Abusing OIDC All The Way To Your Cloud
Authors/Presenters: Aviad Hahami Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink The…
MDR vs. MSSP: Making the Right Choice for Your Business
Understand the key differences between MDR and MSSP and choose the right cybersecurity service to protect your business. The post MDR vs. MSSP: Making the Right Choice for Your Business appeared first on D3 Security. The post MDR vs. MSSP:…
Randall Munroe’s XKCD ‘Disposal’
<a class=” sqs-block-image-link ” href=”https://xkcd.com/3005/” rel=”noopener” target=”_blank”> <img alt=”” height=”331″ src=”https://images.squarespace-cdn.com/content/v1/5355d604e4b03c3e9896e131/d08e3525-7eec-467f-99e2-c5e258162ff6/disposal.png?format=1000w” width=”740″ /> </a><figcaption class=”image-caption-wrapper”> via the comic humor & dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Disposal’ appeared first on Security Boulevard.…
Gartner Report: How to Respond to the Threat Landscape in a Volatile, Complex and Ambiguous World
Refine your cybersecurity strategies to navigate the challenges of a VUCA (volatility, uncertainty, complexity, and ambiguity) environment. The post Gartner Report: How to Respond to the Threat Landscape in a Volatile, Complex and Ambiguous World appeared first on Security Boulevard.…
DEF CON 32 – The Edges Of Surveillance System And Its Supply Chain
Authors/Presenters: Chanin Kim, Myounghun Pak Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.…
PCI DSS v4.0.1 Changes | Application Security PCI Compliance Requirements | Contrast Security
The deadline to comply with the latest version of the Payment Card Industry Data Security Standard (PCI DSS), v4.0.1, is rapidly approaching: March 31, 2025. Are you prepared? The post PCI DSS v4.0.1 Changes | Application Security PCI Compliance Requirements…
Wild, Weird, and Secure: SecureWV 2024’s Cryptid-Themed Conference
Discover how SecureWV 2024 combined local folklore with cutting-edge security insights, featuring talks on threat modeling, defense strategies, and team collaboration. The post Wild, Weird, and Secure: SecureWV 2024’s Cryptid-Themed Conference appeared first on Security Boulevard. This article has been…