The Hacker News

FEBRUARY 21, 2024

With SaaS applications now making up the vast majority of technology used by employees in most organizations, tasks related to identity governance need to happen across a myriad of individual SaaS apps.

Government 100

Government Technology 100

Security Boulevard

MARCH 26, 2024

Managing secrets involves securely orchestrating a variety of digital authentication credentials, crucial for safeguarding access to applications, services, and critical systems. The post What is Managing Secrets? appeared first on Security Boulevard. appeared first on Akeyless.

Authentication 67

Authentication Passwords 67

Security Boulevard

FEBRUARY 18, 2024

Cloud security means multiple teams with a shared responsibility. However, some organisations are now moving back to on-premise systems due to concerns around high operational costs, cloud performance issues, or cyber security. But can be be secure, and if so - how? Clearly, the cloud is not the panacea some thought it would be.

Encryption 127

Encryption Authentication Insurance Risk 127

Thales Cloud Protection & Licensing

FEBRUARY 14, 2024

Delegated User Management: The Key to Secure Online Collaboration madhav Thu, 02/15/2024 - 05:29 In the digital age, collaboration between human beings has leapt out of the confines of the physical office and the individual organization. At the heart of this challenge is user identity and access management.

B2B 83

B2B Banking Data breaches Risk 83

Thales Cloud Protection & Licensing

MARCH 24, 2024

Data Security Trends: 2024 Report Analysis madhav Mon, 03/25/2024 - 05:08 Amid ongoing economic uncertainty and a progressively complex threat landscape, businesses are trying to navigate increasingly stringent regulatory requirements while bolstering their security posture.

Artificial Intelligence 139

Artificial Intelligence IoT Technology Threat Reports 139

CyberSecurity Insiders

APRIL 3, 2023

Mobile device management (MDM) refers to a type of software that allows businesses to manage, configure and secure mobile devices used by their employees. This helps them ensure security while providing their employees with access to the applications and data they need. MDM can help with this.

Mobile 127

Mobile Data breaches Cyber threats Software 127

Duo's Security Blog

APRIL 10, 2024

Enrolling users to use multi-factor authentication (MFA) is an essential security step for any organization. But user enrollment can be a logistical challenge and comes with security risks. In self-enrollment , users enroll themselves either from an enrollment email or inline as they attempt to access a Duo-protected application.

Authentication 143

Authentication Accountability Risk Government 143

Security Boulevard

DECEMBER 9, 2022

Learn how to secure your vital organizational or personal data by understanding the role of identity access and management for SaaS applications. The post SaaS Identity Access Management for Shadow IT appeared first on Security Boulevard.

113

113

Malwarebytes

FEBRUARY 22, 2024

One of the most alarming trends our ThreatDown Intelligence team has noticed lately is the increased exploitation of legitimate Remote Monitoring and Management (RMM) tools by ransomware gangs in their attacks. Splashtop : A remote access and support solution tailored for businesses, MSPs, and educational institutions.

Ransomware 74

Ransomware Scams Social Engineering Encryption 74

Security Boulevard

FEBRUARY 25, 2024

Organizations often use multiple applications to perform business. For example, a tech team might find that Jira works well for managing tasks and a support team might find they prefer PagerDuty to handle support tickets. However, handling several applications and the data within them can be challenging.

62

62

eSecurity Planet

AUGUST 4, 2023

As cloud computing evolves, so has cloud security, and buyers in the market for cloud security solutions may find themselves facing a dizzying array of acronyms, like CNAPP, CWPP, CSPM, and CIEM. Securing all those new cloud environments and connections became a job for cybersecurity companies.

Architecture 85

Architecture Risk Data breaches Threat Detection 85

eSecurity Planet

FEBRUARY 8, 2022

Single sign-on (SSO) is one of several authentication technologies aimed at streamlining and keeping login information and processes secure. SSO makes it feasible for one login to be enough for a group of related sites and applications. Thus, if the SSO login is compromised, MFA operates as an extra layer of security.

Authentication 88

Authentication Passwords Risk Digital transformation 88

IT Security Guru

JANUARY 22, 2024

Password managers have become integral tools for individuals and businesses alike. They are primarily known for securely saving and managing login credentials so users don’t have to remember them all or write them down, where they could be compromised.

Password Management 116

Password Management Passwords Banking Accountability 116

Security Boulevard

MARCH 14, 2024

Impart Security is proud to introduce Runtime Lists API, a groundbreaking feature designed to streamline how security teams manage Access Control Lists (ACLs). Runtime Lists API reduces the potential for error by ensuring security measures are dynamically updated and accurately maintained.

Firewall 57

Firewall Risk 57

SecureWorld News

APRIL 4, 2024

However, with these advancements come complex challenges surrounding intellectual property (IP) management. Here, we outline a systemic approach to managing IP in the face of GenAI's growing influence. This dual capability has profound implications for IP ownership and protection.

Education 89

Education Technology Risk Government 89

Security Affairs

SEPTEMBER 2, 2023

The attackers were spotted using anonymizing proxy services and an IP and device not previously associated with the user account to access the compromised account. Review and consolidate the use of Remote Management and Monitoring (RMM) tools by help desk personnel, and block execution of all other RMM tools.

Social Engineering 135

Social Engineering Engineering Authentication Accountability 135

Malwarebytes

JANUARY 12, 2024

The Cybersecurity and Infrastructure Security Agency (CISA) has added a vulnerability for the Joomla! Content Management System (CMS) to its Known Exploited Vulnerabilities Catalog , based on evidence of active exploitation. Many companies, from small outfits to large enterprises, use a CMS in some form to manage their websites.

Passwords 131

Passwords Firewall Marketing Authentication 131

Tech Republic Security

AUGUST 31, 2021

Andre Durand, Founder and CEO of Ping Identity, talks about out how identity and access management is changing software development and application security in this Dynamic Developer episode.

Passwords 158

Passwords Software 158

CSO Magazine

OCTOBER 5, 2021

One Identity has acquired OneLogin, an IAM (identity and access management) provider, in a bid to offer its customers an end-to-end suite of security applications that offer identity correlation, secured access to critical assets, and real-time visibility into suspicious login activity.

Government 120

Government Software 120

Security Boulevard

FEBRUARY 21, 2024

How Thales and Red Hat Protect Telcos from API Attacks madhav Thu, 02/22/2024 - 04:55 Application programming interfaces (APIs) power nearly every aspect of modern applications and have become the backbone of today’s economy. Unfortunately, API attacks are increasing as vectors for security incidents. What are APIs?

Encryption 62

Encryption Mobile Government Consumer Protection 62

eSecurity Planet

DECEMBER 19, 2023

Infrastructure as a service security is a concept that assures the safety of organizations’ data, applications, and networks in the cloud. Understanding the risks, advantages, and best practices connected with IaaS security is becoming increasingly important as enterprises shift their infrastructure to the cloud.

Encryption 95

Encryption Firewall Authentication Software 95

Security Affairs

OCTOBER 27, 2023

Hello Alfred, an in-home hospitality app, left a database accessible without password protection, exposing almost 170,000 records containing private user data. Hello Alfred is a one-stop application allowing real estate developers and property managers to provide in-home services and maintenance to residents.

Authentication 114

Authentication Engineering Passwords Software 114

Security Affairs

NOVEMBER 1, 2022

ConnectWise has addressed a critical remote code execution vulnerability impacting Recover and R1Soft Server Backup Manager (SBM). An attacker can exploit the vulnerability to execute remote code or directly access confidential data. The vulnerability impacts ConnectWise Recover v2.9.7 and earlier versions and R1Soft SBM v6.16.3

Backups 132

Backups Authentication Ransomware Software 132

Thales Cloud Protection & Licensing

JUNE 15, 2023

A Guide to Key Management as a Service madhav Thu, 06/15/2023 - 11:29 As companies adopt a cloud-first strategy and high-profile breaches hit the headlines, securing sensitive data has become a paramount business concern. The most effective way to ensure data security is through encryption and proper key management.

Encryption 133

Encryption Data breaches Authentication Risk 133

eSecurity Planet

SEPTEMBER 11, 2023

Container security is the combination of cybersecurity tools, strategies, and best practices that are used to protect container ecosystems and the applications and other components they house. Container runtime security A container runtime is a type of software that runs containers on the host operating system(s).

Cybersecurity 89

Cybersecurity Encryption Risk Network Security 89

The Hacker News

APRIL 1, 2023

Microsoft has patched a misconfiguration issue impacting the Azure Active Directory (AAD) identity and access management service that exposed several "high-impact" applications to unauthorized access.

95

95

Security Affairs

JANUARY 24, 2024

Researchers released PoC exploit code for a recently disclosed critical authentication bypass flaw in Fortra’s GoAnywhere MFT (Managed File Transfer). The security experts also published a proof-of-concept (PoC) exploit that allows the creation of new admin users on vulnerable instances exposed online.

Authentication 120

Authentication Hacking Engineering Encryption 120

CyberSecurity Insiders

SEPTEMBER 20, 2022

By Alfredo Hickman, head of information security, Obsidian Security. Earlier this year, I had the opportunity to speak before a group of CISOs about the topic of attack surface management (ASM). However, the same organizations typically have dozens—if not hundreds—of SaaS applications deployed through their enterprises.

Threat Detection 128

Threat Detection Risk Penetration Testing DNS 128

Thales Cloud Protection & Licensing

OCTOBER 17, 2023

Three Easy Ways to Improve DevSecOps with Thales and Red Hat divya Tue, 10/17/2023 - 14:47 For many DevOps enthusiasts, the need to insert security considerations directly into the development cycle was often overlooked. In these environments, data is stored in persistent volumes for stateful applications.

Encryption 71

Encryption Software Backups Marketing 71

CSO Magazine

MAY 2, 2023

Data security authorization vendor Veza has announced a new solution for access security and governance across SaaS applications including Salesforce, GitHub, and Slack. Securing access is complicated due to app-specific role-based access controls that many SaaS apps use.

Government 102

Government 102

Security Boulevard

JUNE 6, 2023

Lacework today added cloud infrastructure entitlement management (CIEM) capabilities to its cloud-native application protection platform (CNAPP). The CIEM addition provides cybersecurity teams visibility into who within an organization has permission to access a specific cloud service.

Cybersecurity 98

Cybersecurity Network Security 98

eSecurity Planet

MAY 19, 2023

Application security tools and software solutions are designed to identify and mitigate vulnerabilities and threats in software applications. Their main purpose is to protect applications from unauthorized access, data breaches, and malicious attacks.

Software 90

Software Risk Encryption Marketing 90

eSecurity Planet

JANUARY 22, 2024

This week’s vulnerability news include GitHub credential access, a new Chrome fix, and hidden malware from pirated applications hosted on Chinese websites. Citrix and Ivanti are seeing more problems, too, as more vulnerabilities have cropped up in Netscaler and Endpoint Manager Mobile. and later releases of 13.1

Authentication 96

Authentication Malware VPN Mobile 96

Security Boulevard

APRIL 20, 2022

The way in which we interact with applications has changed dramatically over years. Enterprises use applications in day-to-day operations to manage their most sensitive data and control access to system resources. The post CIS Control 16 Application Software Security appeared first on The State of Security.

Software 120

Software 120

Thales Cloud Protection & Licensing

DECEMBER 6, 2023

Securing the Cloud Frontier: Navigating the Complexities of SaaS Data Protection in the Multi-Cloud Era madhav Thu, 12/07/2023 - 05:34 In the rapidly evolving digital landscape, Software as a Service (SaaS) has emerged as a cornerstone of modern business operations. cloud platforms and 97 SaaS applications.

Encryption 83

Encryption Data privacy Marketing Cyber threats 83

Thales Cloud Protection & Licensing

MAY 1, 2023

5 Ways CIAM Enables Effective, Secure Business Partner Identity Management madhav Tue, 05/02/2023 - 05:40 Businesses and their partners must work together without barriers to maximize customer value. The difficulty lies in determining how to make the most of their collaboration in a flexible, scalable, agile, and secure way.

B2B 87

B2B Banking Accountability Technology 87

eSecurity Planet

NOVEMBER 22, 2023

Cloud configuration management runs and regulates cloud configuration settings, parameters, and policies to streamline cloud services and assure security. This includes maintaining changes in virtual machines, storage resources, networks, and applications.

Backups 86

Backups Risk Encryption Technology 86