Security Boulevard

JANUARY 28, 2022

While many organizations have prioritized managing and securing this data, the topic of data privacy has also come into question particularly given the rise of connected devices and AI surveillance features. The post Understanding APIs Role in Data Privacy appeared first on Security Boulevard.

Data privacy 141

Data privacy Surveillance Data collection 141

CyberSecurity Insiders

JANUARY 6, 2023

Richard Bird, Chief Security Officer, Traceable AI. This year will be the year that many business and security leaders will wake up to truly understand the scope of their API security issues. The key to making all of this work is truly APIs.

CISO 118

CISO Financial Services Risk Unstructured Data 118

Security Boulevard

MAY 13, 2021

We are delighted to be hosting some unique content from our friend and recovering hacker Alissa Knight who will be writing on the topic of healthcare API security. In this blog, Alissa covers mobile API authentication and authorization.

Authentication 78

Authentication Healthcare Mobile 78

Security Affairs

NOVEMBER 16, 2022

. “The Privacy Sandbox Beta will be available for ad tech and app developers who wish to test the ads-related APIs as part of their solutions.” ” Developers will need to complete an enrollment process in order to utilize the ads-related APIs, including Topics , FLEDGE , and Attribution Reporting.

Mobile 108

Mobile Technology Internet Internet 108

SecureWorld News

JANUARY 20, 2023

According to the mobile phone giant, the attacker accessed account information from postpaid and prepaid customers via one of its APIs. Application Programming Interfaces (APIs) are software interfaces used by computers and applications to communicate with each other.

Mobile 76

Mobile Hacking Data breaches Authentication 76

Schneier on Security

DECEMBER 15, 2023

ChatGPT both surprised and amazed the world with its ability to understand human language and generate credible, on-topic, humanlike responses. In other words, they will be connected to the larger world, through APIs. This turns our notion of security on its head. Their sensors and actuators are distributed in the environment.

Internet 264

Internet Internet IoT Banking 264

SecureWorld News

AUGUST 2, 2022

New research from security firm CloudSEK shows that more than 3,200 mobile applications were leaking Twitter API (Application Program Interface) keys, which can be used to gain access and take over user accounts. CloudSEK asks in its report, "What all can go wrong with just a bunch of API keys and tokens?"

Mobile 75

Mobile Accountability Identity Theft Cryptocurrency 75

Security Boulevard

MARCH 12, 2023

The OWASP API project has recently decided to refresh the popular API Security Top 10 threat map. The team at Salt Security has always been actively involved in this project, having been a key contributor to the initial creation of the list. BOLA attacks remained the go-to attack vector when it came to API attacks.

Authentication 97

Authentication Risk Accountability DDOS 97

McAfee

NOVEMBER 14, 2021

In this blog, we take a deeper dive into cloud security topics from these predictions focusing on the targeting of API services and apps exploitation of containers in 2022. 5G and IoT Traffic Between API Services and Apps Will Make Them Increasingly Lucrative Targets. billion by 2026.

IoT 102

IoT Risk Marketing Software 102

eSecurity Planet

JANUARY 30, 2023

Two venture investors have launched an index to track the most popular open source security projects. Chenxi Wang of Rain Capital and Andrew Smyth of Atlantic Bridge unveiled the Open Source Security Index last month. There are also manual additions for projects that lack labels in the GitHub API (tags, topics).

InfoSec 109

InfoSec Accountability Software Cybersecurity 109

NetSpi Executives

FEBRUARY 13, 2024

Hear straight from NetSPI’s CEO Aaron Shilts and our new EVP of Strategy Tim MalcomVetter as they discuss a range of proactive security topics. Tim’s extensive background as a security analyst, pentester, director of Red Team , and chief technology officer for leading global companies brings a wealth of insights to the table.

Penetration Testing 77

Penetration Testing IoT Cyber threats Mobile 77

CyberSecurity Insiders

DECEMBER 24, 2021

As long-time information security professionals and (ISC)² Community Champions, we have experienced the way cybersecurity employees engage and work with one another continue to adapt in response to changes in the workplace and world at large. Like us, you may be wondering, what will 2022 look like for information security professionals?

Cybersecurity 98

Cybersecurity Ransomware VPN Architecture 98

Anton on Security

SEPTEMBER 13, 2023

As you may have noticed, we have released a new paper on securing AI. This applies to securing the infrastructure, models, capabilities and other things related to AI, not just running AI workloads. Notice, for example, that I was asking every guest on these podcast episodes about their view of this topic.

Artificial Intelligence 130

Artificial Intelligence CISO Software Government 130

SecureWorld News

AUGUST 7, 2023

This is Part 1 of a three-part series tackling the topic of generative AI tools. This first installment is "Safeguarding Ethical Development in ChatGPT and Other LLMs through a Comprehensive Approach: Integrating Security, Psychological Considerations, and Governance." Let's discuss the first key element, Security Measures.

Technology 87

Technology Risk Government Engineering 87

ForAllSecure

MAY 4, 2023

We participated in B Sides last month, hosted a webinar on “How to Increase Test Coverage With Mayhem for API”, and hosted a university hackathon at UC Santa Cruz. While they provide access to pre-built components and tools, they can also introduce security vulnerabilities into your code. When : May 24, 10 a.m. PT / 1 p.m.

Engineering 52

Engineering Software Risk Marketing 52

Security Boulevard

MAY 16, 2022

State of API Security: API Attack Traffic Grew 681% in 2021. Key API security report findings. The State of API Security Report from Salt Labs focuses on API security risks, challenges, and strategies. In the last 12 months, API attack traffic increased a staggering 681%.

Authentication 52

Authentication Risk Data breaches Malware 52

NetSpi Executives

FEBRUARY 13, 2024

Hear straight from NetSPI’s CEO Aaron Shilts and our new EVP of Strategy Tim MalcomVetter as they discuss a range of proactive security topics. Tim’s extensive background as a security analyst, pentester, director of Red Team , and chief technology officer for leading global companies brings a wealth of insights to the table.

Penetration Testing 52

Penetration Testing IoT Cyber threats Mobile 52

Security Boulevard

AUGUST 17, 2021

An overview of the most common security misconfigurations, a constant threat against API implementations. OWASP also periodically selects a list of top ten vulnerabilities that threaten APIs, called the OWASP API top ten. Security misconfigurations are a constant threat against both APIs and non-API applications alike.

Authentication 62

Authentication Technology Internet Internet 62

Security Boulevard

MARCH 20, 2023

Implementing strategy is when the hard work begins and the stakes couldn’t be higher with this topic. As dissimilar as they may be in function, they are equally vulnerable and can present attack vectors to malicious actors and do share a common communications link between them: Application Programming Interfaces (APIs).

Cybersecurity 52

Cybersecurity Government Technology Marketing 52

Security Affairs

JUNE 7, 2021

Some of the papers submitted by the members of the forum exploited the manipulation of APIs from popular cryptocurrency-related services or decentralized-file technology to obtain private keys to cryptocurrency wallets. The post Russian cybercrime forums launch contests for cryptocurrency hacks appeared first on Security Affairs.

Cryptocurrency 137

Cryptocurrency Cybercrime Hacking Technology 137

Security Affairs

DECEMBER 24, 2018

Security researchers discovered some flaws in the Twinkly IoT lights that could be exploited display custom lighting effects and to remotely turn off them. “All communications from the application to the lights is done through RESTful HTTP API endpoints on the lights on port 80. ” continues the analysis. Pierluigi Paganini.

IoT 83

IoT Hacking DNS Authentication 83

Thales Cloud Protection & Licensing

JANUARY 11, 2023

The Most Popular Data Security Webinars of 2022: Sovereignty, Cloud Security and Compliance Top the List. Throughout 2022, Thales hosted more than 40 webinars on a wide variety of cybersecurity topics, including, cloud security, data sovereignty, compliance, data threat trends, and rethinking approaches to role-based authentication.

Financial Services 83

Financial Services Threat Reports Architecture Technology 83

Malwarebytes

AUGUST 18, 2021

A deep dive into macOS 11’s internals reveals some security surprises that deserve to be more widely known. Introduction Disclaimers macOS 11’s better known security improvements Secret messages revealed? CPU security mitigation APIs The NO_SMT mitigation The TECS mitigation Who benefits from NO_SMT and TECS ?

Firmware 141

Firmware Architecture Risk Engineering 141

eSecurity Planet

AUGUST 13, 2021

At last week’s Black Hat USA, NYC-based financial technology firm Two Sigma Investments took the virtual stage to outline why their existing solution didn’t cut it, the work needed to create an in-house security information and event management (SIEM) system, and the project’s implications. API Integrations for SaaS.

Engineering 138

Engineering Technology Banking Internet 138

Cisco Security

JUNE 30, 2022

Extended Detection and Response, or XDR, the cybersecurity topic that dominated the RSA conference 2022 show floor with multiple vendors, has been getting a lot of attention lately, and for good reason. This new eBook, SOC Modernization and the Role of XDR , provides insights into the survey. More Threats, More Data, More Action.

Architecture 101

Architecture Threat Detection Cybersecurity 101

Security Boulevard

DECEMBER 5, 2022

In terms of work I'm currently acting as a DNS Threat Researcher at WhoisXML API where the pleasure to personally thank the team and the CEO for bringing me on board is all mine where my primary responsibilities include the production of white papers on the topic of cybercrime and general cybercrime and threat actor type of research.

Cybercrime 52

Cybercrime DNS Accountability Marketing 52

Daniel Miessler

NOVEMBER 6, 2020

I think there are four main trends that will play out in the field of information security in the next 20 years. It’s an industry that worships data because their profits depend on it, and that’s why they’ll be the first to be able to tell us what works and what doesn’t work in security.

InfoSec 255

InfoSec Insurance Artificial Intelligence Cybersecurity 255

SecureWorld News

SEPTEMBER 25, 2023

So as security leaders, as security managers, or maybe a team lead, we want to make sure we instill a culture of being able to fail fast, incremental failures, so we can continue to iterate and continue to learn." The closing keynote panel tackled the topic of career pathing and was recorded for a Colorado = Security podcast episode.

CISO 57

CISO Social Engineering Cybersecurity Engineering 57

Thales Cloud Protection & Licensing

MARCH 26, 2021

What does this mean in the greater scheme of corporate security? In the latest episode of the Thales Security Sessions Podcast, Vaughn Stewart from Pure Storage and I discuss some of the caveats for companies who are shifting to the cloud. A corporation’s security posture does not automatically increase when moving to the cloud.

Encryption 83

Encryption Architecture Technology Risk 83

Security Boulevard

MARCH 20, 2021

Application Security for builders and creators?—?part Previously on Application Security for builders and creators?—?Alice Claire suggests the team to engineer security into their app with ShiftLeft. Showing empathy and emotional intelligence are quite key while discussing security topics with developers.

Engineering 80

Engineering Passwords Technology Risk 80

Security Boulevard

OCTOBER 31, 2022

While a lot of this information may be redundant to a more seasoned information security personnel, even the best of us rely on Google and blog posts to get information. The guides will not be limited to technology-related topics, Defender’s Guides to Detection Engineering and other process-style topics are on the horizon.

Technology 98

Technology Backups Information Security Malware 98

SecureWorld News

AUGUST 22, 2023

CyCognito has released its semi-annual State of External Exposure Management Report , revealing a staggering number of vulnerable public cloud, mobile, and web applications exposing sensitive data, including unsecured APIs and personally identifiable information (PII). Half of these potentially vulnerable web apps are hosted in the cloud.

Mobile 86

Mobile Penetration Testing Backups Data breaches 86

Security Affairs

JUNE 22, 2021

Yet, we believe that the topic of attacks against AI systems requires much more attention. The new attack is able to bypass facial recognition services, applications, and APIs including the most advanced online facial recognition search engine on the planet, called PimEyes, according to the Washington Post. Pierluigi Paganini.

Engineering 82

Engineering Internet Internet Surveillance 82

Zigrin Security

APRIL 26, 2023

In this article As someone who tests web application security cautiously, Dawid discovered a vulnerability in MISP, a popular open-source platform for sharing and analyzing threat information. This is a security mechanism designed to prevent unauthorized changes to a user’s profile settings. How Exactly?

Passwords 52

Passwords Cybersecurity Penetration Testing Data breaches 52

Security Affairs

JULY 28, 2018

The social media giant was restricting the access to its application programming interfaces (APIs) that allows developers to automate the interactions with the platform (i.e. “We do not tolerate the use of our APIs to produce spam, manipulate conversations, or invade the privacy of people using Twitter,” he added.

Advertising 54

Advertising Accountability Surveillance Media 54

NetSpi Executives

DECEMBER 28, 2023

Top Educational Resources Building a more secure world starts with education. Offensive Security Vision Report 2023 Our top resource in 2023 was NetSPI’s Offensive Security Vision Report, a first-hand study that summarizes the top vulnerabilities by attack surface and much more.

Education 75

Education Penetration Testing CISO Cybersecurity 75

Security Boulevard

APRIL 7, 2022

To prevent security incidents from happening in the first place, Kubernetes documentation mentions that “TLS should be enabled for every component that supports it to prevent traffic sniffing, verify the identity of the server, and (for mutual TLS) verify the identity of the client.”. But that is a topic for another blog.).

Authentication 52

Authentication Encryption Digital transformation 52