Splunk parses pure JSON logs almost like magic. The format works really well for Splunk to automatically extract fields you would need in your searches. However, an issue arises when a JSON log separates the key and the value into…
Tag: Security Boulevard
Enable Sharing of Datamodel Acceleration Summaries between Search Heads
Introduction If you’re running Splunk Enterprise Security Suite, you are already leveraging accelerated datamodels to power your detections and altering. However, there may be situations where you want to leverage those same datamodels you already have when running searches on…
GUEST ESSAY: A DIY guide to recognizing – and derailing – Generative AI voice scams
Americans lost a record $10 billion to scams last year — and scams are getting more sophisticated. Related: Google battles AI fakers Recently used to impersonate Joe Biden and Taylor Swift, AI voice cloning scams are gaining momentum — and … (more…)…
Introducing Salt Security’s New AI-Powered Knowledge Base Assistant: Pepper!
Going to a vendor’s Knowledge Base (KB) is often the first place practitioners go to get the product deployed or troubleshoot issues. Even with advanced search tools, historically, KBs have been challenging to find relevant content quickly, and navigating a…
USENIX Security ’23 – PELICAN: Exploiting Backdoors of Naturally Trained Deep Learning Models In Binary Code Analysis
Authors/Presenters: Zhuo Zhang, Guanhong Tao, Guangyu Shen, Shengwei An, Qiuling Xu, Yingqi Liu, Yapeng Ye, Yaoxuan Wu, Xiangyu Zhang Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access.…
DARPA awards $1 million to Trail of Bits for AI Cyber Challenge
By Michael D. Brown We’re excited to share that Trail of Bits has been selected as one of the seven exclusive teams to participate in the small business track for DARPA’s AI Cyber Challenge (AIxCC). Our team will receive a…
Phobos Unleashed: Navigating the Maze of Ransomware’s Ever-Evolving Threat
Threat Overview – Phobos The Phobos Ransomware variant has been active since May of 2019, targeting a variety of entities that include governments, emergency services, critical infrastructure, education and public healthcare. Operating under a RaaS (Ransomware-as-a-Service) model, this ransomware variant…
Irony of Ironies: CISA Hacked — ‘by China’
Free rides and traffic jams: U.S. Cybersecurity and Infrastructure Security Agency penetrated in February, via vuln in Ivanti. The post Irony of Ironies: CISA Hacked — ‘by China’ appeared first on Security Boulevard. This article has been indexed from Security…
USENIX Security ’23 – Yifan Yan, Xudong Pan, Mi Zhang, Min Yang – Rethinking White-Box Watermarks on Deep Learning Models under Neural Structural Obfuscation
Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel. Permalink The post…
Threat Groups Rush to Exploit JetBrains’ TeamCity CI/CD Security Flaws
The cyberthreats to users of JetBrains’ TeamCity CI/CD platform continue to mount a week after the company issued two fixes to security vulnerabilities, with one cybersecurity vendor noting a ransomware attack that included exploiting the flaws for initial access and…
Beware of OpenAI and ChatGPT-4 Turbo in Healthcare Orgs’ API Attack Surface
With every new healthcare API integration that OpenAI gets access to, the attack surface grows, creating new opportunities for attackers. The post Beware of OpenAI and ChatGPT-4 Turbo in Healthcare Orgs’ API Attack Surface appeared first on Security Boulevard. This…
How to Streamline the Vulnerability Management Life Cycle
Establishing a vulnerability management process is a crucial part of an organization’s cybersecurity strategy and demands thoughtful planning. The post How to Streamline the Vulnerability Management Life Cycle appeared first on Security Boulevard. This article has been indexed from Security…
Why WeSecureApp Rocks at Busting Payment Tampering Vulnerabilities
Introduction Hey folks, if you’ve been in the web security world for any length of time, you know that payment systems are like a giant, juicy target for attackers. Any little wiggle room in the logic and those crafty hackers…
Who’s to Blame for Hacked Social Media Accounts, Spoofed Online Meeting Requests and Malware
In episode 320, Tom and Scott discuss the contentious issue of who is accountable when Facebook or Instagram accounts are hacked, discussing potential failings on both the user’s and Meta’s part. They explore the possibility of inadequate security measures on…
HIPAA and Privacy Act Training Challenge Exam [XLS download]
Contemporary healthcare organizations are obligated to protect a vast amount of sensitive patient data due to the broad definition of Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). The proliferation of electronic health records, digital…
USENIX Security ’23 – Jialai Wang, Ziyuan Zhang, Meiqi Wang, Han Qiu, Tianwei Zhang, Qi Li, Zongpeng Li, Tao Wei, Chao Zhang – Aegis: Mitigating Targeted Bit-flip Attacks against Deep Neural Networks
Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel. Permalink The post…
USENIX Security ’23 – “Employees Who Don’t Accept the Time Security Takes Are Not Aware Enough”: The CISO View of Human-Centred Security
Authors/Presenters: Jonas Hielscher. Uta Menges, Simon Parkin, Annette Kluge, M. Angela Sasse Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at…
Salt Security, API Posture Governance, and the NIST Cybersecurity Framework 2.0
Securing organizations against today’s most advanced threats continues to be challenging, with APIs (Application Programming Interfaces)playing an increasingly central and vulnerable role, especially as digital transformation marches on. The NIST Cybersecurity Framework 2.0 (CSF) release underscores the urgency of addressing…
BianLian GOs for PowerShell After TeamCity Exploitation
Contributors: Justin Timothy, Threat Intelligence Consultant, Gabe Renfro, DFIR Advisory Consultant, Keven Murphy, DFIR Principal Consultant Introduction Ever since Avast […] The post BianLian GOs for PowerShell After TeamCity Exploitation appeared first on Security Boulevard. This article has been indexed…
CrowdStrike Extends Scope and Reach of Cybersecurity Portfolio
CrowdStrike acquired Flow Security to add DSPM to its portfolio and is offering an MDR service from Dell that integrates with its Falcon XDR. The post CrowdStrike Extends Scope and Reach of Cybersecurity Portfolio appeared first on Security Boulevard. This…