LRQA Nettitude Labs

NOVEMBER 8, 2023

The AI Safety Summit 2023, a seminal event hosted by the UK Prime Minister at the historic Bletchley Park, marked a pivotal moment in the evolution of the security of Artificial Intelligence. Michelle Donelan (front centre), UK Secretary of State for Science, Innovation and Technology, with international digital ministers.

Government 57

Government Artificial Intelligence Technology Risk 57

SecureList

JANUARY 18, 2023

Last year, the cybersecurity of corporations and government agencies was more significant than ever before, and will become even more so in 2023. More personal data leaks; corporate email at risk. The trend for personal data leaks grew rapidly in 2022 and will continue into 2023.

Media 99

Media Social Engineering Ransomware Hacking 99

Security Boulevard

MARCH 2, 2023

As people use more technology, they generate new types of sensitive data. While data protection laws and compliance frameworks often detail categories of information requiring enhanced protection, they fail to keep pace with technological advances. In a digital world, companies collect more data and more types of data than ever before.

Cyber threats 52

Cyber threats Technology Risk 52

eSecurity Planet

NOVEMBER 6, 2023

30, 2023 NGINX Ingress Controller for Kubernetes Flaws Can Lead to Credential Theft Type of Attack: Path sanitization bypass and injection vulnerabilities discovered in the NGINX Ingress controller can allow for credential theft, arbitrary command execution, and critical data access. CVE-2023-5044 (Code Injection): This CVSS score 7.6

Software 91

Software Education Ransomware Firmware 91

The Last Watchdog

SEPTEMBER 25, 2023

million in 2023, according to IBM’s Cost of a Data Breach Report, and over 700,000 small businesses were targeted in cybersecurity attacks in 2020, according to the Small Business Association. Nonprofits are equally at risk, and often lack cybersecurity measures. Security places a crucial role in your technology.

Small Business 222

Small Business Cybersecurity Technology Accountability 222

BH Consulting

AUGUST 16, 2023

The agency’s ninth Internet Organised Crime Assessment (IOCTA) 2023 report gives a law enforcement perspective on current cybercrime techniques. She has been shortlisted for the Piccaso Privacy Awards 2023 in two categories: ESG privacy initiative, and the privacy award for achievement.

Social Engineering 52

Social Engineering Cybercrime Data privacy Engineering 52

Security Through Education

JANUARY 18, 2023

The truth is technology has grown at an exponential rate and so has cybercrime. What are some personal cybersecurity concerns for 2023? We can benefit from these the most if we are aware of the possible risks and take measures to use them wisely. Perhaps we thought, who would want to hack a completely unknow person like me?

Cybersecurity 98

Cybersecurity Social Engineering Scams IoT 98

Security Boulevard

MARCH 28, 2023

So, we went through “Debating SIEM in 2023, Part 1” , now let’s debate a bit more. At this point, everybody who didn’t “rage stop” reading it should be convinced that yes, SIEM does matter in 2023. Debating SIEM in 2023, Part 1 But why? Let’s start with this: why should anyone buy an SIEM tool in 2023? Conclusion !

Threat Detection 69

Threat Detection Banking Risk Technology 69

BH Consulting

NOVEMBER 22, 2023

From the off, 2023 struck a more downbeat tone than last year’s edition. Rising attacks against critical infrastructure Data Breach Today reported that cyberattacks against Ukrainian critical infrastructure have intensified during 2023. “In Stuxnet in 2010 was the first the most recent was CosmicEnergy in 2023.

Cybercrime 64

Cybercrime Technology Cybersecurity Engineering 64

Centraleyes

FEBRUARY 1, 2024

2023 marked a surge in comprehensive state data privacy laws. State Privacy Laws That Took Effect in 2023 California Privacy Rights Act (CPRA) : Most provisions became effective on Jan. 1, 2023, with the remainder on July 1, 2023. 1, 2023, with the remainder on July 1, 2023.

Data privacy 52

Data privacy Consumer Protection Media Data collection 52

Jane Frankland

MAY 8, 2024

On one hand, AI has been hailed as a game-changing technology with the potential to transform industries and improve our daily lives. This is what I’ll be delving into in this blog, where I’ll be exploring how these two fields are intersecting and what that means for our digital landscape.

Cyber threats 130

Cyber threats Cybersecurity Artificial Intelligence CISO 130

NetSpi Executives

SEPTEMBER 5, 2023

It is transforming the way we work because of its ability to reduce the efforts and costs to complete tasks, but we are only at the beginning of this technology’s potential. This blog post is a part of our offensive security solutions update series. AI/ML is being rapidly adopted into many aspects of businesses.

Penetration Testing 52

Penetration Testing Risk Network Security Technology 52

CyberSecurity Insiders

FEBRUARY 1, 2022

This blog was written by an independent guest blogger. Although IBM hopes to make a 1,000-qubit machine by 2023, widespread adoption of quantum computing is still decades away. Quantum computing focuses on developing computer technology based on principles that describe how particles and energy react at the atomic and subatomic levels.

Risk 134

Risk Social Engineering Threat Detection Encryption 134

NetSpi Executives

OCTOBER 5, 2023

Updates are made to existing solutions, new solutions are launched, processes are refined, new technologies are implemented, etc. The companies take on the risks and responsibilities of new system attack vectors created by these choices. This blog post is a part of our offensive security solutions update series.

Penetration Testing 52

Penetration Testing Architecture Risk Technology 52

NetSpi Executives

MARCH 5, 2024

The technology creates a comprehensive view of a company’s external assets by mapping the internet-facing attack surface to provide better insight into changes and where to focus the attention of security teams. Therefore, the convergence of these technologies can better support organizations in their CTEM program.”

Penetration Testing 64

Penetration Testing Technology Marketing Mobile 64

NetSpi Executives

NOVEMBER 7, 2023

Although many companies are adding new processes, technologies, and training materials to combat this, employees continue to fall victim to phishing, vishing, and other forms of social engineering attacks. This delivers actionable results faster, enabling your team to mitigate vulnerabilities, reduce risk, and boost defenses.

Social Engineering 59

Social Engineering Engineering Phishing Security Awareness 59

Anton on Security

MAY 24, 2023

What portion of AI-related “badness” (harm, risk, etc) fits within the cybersecurity domain? Since I promised to provide no answers in this blog, let me do more questions: 1a What aspects of securing AI are unchanged from securing, well, anything else? 1b2 What aspects of securing AI are different because the technology is different?

Artificial Intelligence 130

Artificial Intelligence CISO Risk Marketing 130

CyberSecurity Insiders

MARCH 28, 2023

The plan, which also covers social care services, has five key pillars, including identifying areas where disruption could produce the most harm to patients, building unified responses, and embedding security into the framework of emerging technology.

Cybersecurity 52

Cybersecurity Small Business Backups Artificial Intelligence 52

Centraleyes

MAY 6, 2024

Every few decades, the world experiences a technological disruption that changes our lives. The insurance industry is built on handling our own and everyone else’s risks. As artificial intelligence shatters glass ceilings, the risks it introduces present a new paradigm to the insurance market in many different areas.

Insurance 52

Insurance Artificial Intelligence Cyber Insurance Marketing 52

Duo's Security Blog

JANUARY 23, 2024

Throughout 2023, we’ve heard about many high-profile security incidents targeting a wide range of publicly listed companies. Technology exists to harden your infrastructure. You’ll have to account for any human verification as a possible risk factor. Let’s talk about how customers have been accomplishing this with Duo Security.

Authentication 75

Authentication Accountability CISO Technology 75

Duo's Security Blog

APRIL 20, 2023

Through the first two months of 2023 alone, the Australian Competition and Consumer Commission’s Scamwatch reported more than 19,000 phishing reports with estimated financial losses of more than $5.2 Moreover, they were incredibly complex to integrate with the University’s technology stack.

Phishing 77

Phishing Social Engineering Authentication Engineering 77

Security Affairs

APRIL 5, 2023

The JCDC has seen the benefits of collaboration for exigent risks (such as the heightened awareness and protection related to Russia’s invasion of Ukraine and the Log4Shell vulnerability) but sees a remaining gap when it comes to imminent risk. To address this gap, the JCDC is planning proactive measures for future cyber risks.

Energy and Utilities 77

Energy and Utilities Cyber threats Risk Cyber Risk 77

Krebs on Security

NOVEMBER 28, 2022

Edwards said Pushwoosh began as Arello-Mobile , and for several years the two co-branded — appearing side by side at various technology expos. In a blog post responding to the Reuters story, Pushwoosh said it is a privately held company incorporated under the state laws of Delaware, USA, and that Pushwoosh Inc. ” GOV 311.

Mobile 240

Mobile Malware Technology Government 240

Thales Cloud Protection & Licensing

FEBRUARY 12, 2024

Why organizations need to prioritize a PQC-readiness lab madhav Tue, 02/13/2024 - 05:25 It’s an exciting time for technology – we are on the cusp of seeing some innovative and disruptive new technologies emerge that will have impacts on every industry and sector around the globe.

Artificial Intelligence 71

Artificial Intelligence Technology Digital transformation Risk 71

eSecurity Planet

JULY 12, 2023

Microsoft’s Patch Tuesday for July 2023 includes nine critical flaws, and five are actively being exploited. “While some Patch Tuesdays focus on fixes for minor bugs or issues with features, these patches almost purely focus on security-related issues,” Cloud Range vice president of technology Tom Marsland said by email.

Encryption 95

Encryption Accountability VPN Engineering 95

Jane Frankland

JANUARY 9, 2024

MDR providers offer an all-in-one solution for organisations that combines people, processes, and technologies to strengthen security measures and reduce risk exposure. TDR detects known threats and identifies anomalous patterns indicative of emerging risks. billion in 2023 to $11.4 billion by 2028, with a CAGR of 11.2%.

Threat Detection 147

Threat Detection Technology Marketing Artificial Intelligence 147

Duo's Security Blog

FEBRUARY 6, 2024

According to Cisco Talos, three of the top five MITRE ATT@CK techniques used in 2023 were identity-based. Even before the high-profile attacks in 2023, the trend in adopting zero trust security principles already showed that identity security must be a major priority for organizations of all sizes.

Accountability 81

Accountability Authentication Risk Marketing 81

Duo's Security Blog

JANUARY 25, 2023

There are also real security risks of using TLS 1.0 target insecure TLS versions, increasing organizational risks in exposing both their own and their users’ valuable data, potentially incurring major financial penalties and legal liabilities. and some generally weak ciphers will no longer be supported by the end of January 2023.

Encryption 80

Encryption Technology Risk Authentication 80

eSecurity Planet

FEBRUARY 2, 2024

While Teslas aren’t the typical business IoT device, their connection to the internet makes them a cyber threat as much as your business’s other IoT technology. Teslas Get the Spotlight in Recent Ethical Hacking Efforts Researchers have discovered multiple vulnerabilities within Teslas since March 2023.

Hacking 121

Hacking IoT Firmware Cybersecurity 121

Security Boulevard

JANUARY 11, 2024

Connected devices and smart technology are pivotal to enhancing the efficiency and effectiveness of public sector organizations, from optimizing critical infrastructure management to transforming remote education and smart city initiatives. However, as IoT innovation and adoption grows, so do the associated security risks.

IoT 75

IoT Malware Education Government 75

NetSpi Executives

OCTOBER 17, 2023

Department of Health and Human Safety is Assisting TL;DR The Consolidated Appropriations Act of 2023 brings a substantial change to the regulation of medical device cybersecurity. This shift aims to enhance the safety and integrity of medical devices, emphasizing the importance of cybersecurity in healthcare.

Healthcare 94

Healthcare Manufacturing Cyber Risk Cybersecurity 94

Thales Cloud Protection & Licensing

APRIL 4, 2023

madhav Tue, 04/04/2023 - 07:04 During WWII, the US Office of War Information created posters encouraging people to avoid careless talk. Fast forward to 2023, and this adage finds new meaning in the context of generative AI tools, like OpenAI ChatGPT, Google Bard, and Microsoft Copilot. The message was, “Loose lips sink ships."

Phishing 71

Phishing Technology Risk Social Engineering 71

Duo's Security Blog

SEPTEMBER 6, 2023

We have a lot of thoughts on passkeys – some of which we’ve shared in other posts in this passkey blog series – and today we’re going to explore how passkeys stack up against passwords from the perspective of cloud platforms. Recovery Password managers often sync to the cloud, but this comes with a risk.

Passwords 96

Passwords Password Management Authentication Threat Detection 96

Jane Frankland

JANUARY 12, 2024

It covers some really important points such as how we build up diverse practices that become part of the solution to reduce resistance to female leadership or introverted personalities. However, the reason why women matter so much in cybersecurity is because of the way they view and deal with risk. For example, Byrnes et al.

Cybersecurity 182

Cybersecurity Risk Banking CISO 182

Jane Frankland

OCTOBER 31, 2023

However, new research from e2e-assure has revealed that few organisations are taking full advantage of security technologies available today. Instead, they’ve become complacent in their defence practices and may be exposing themselves to increased risks without even realising it.

CISO 147

CISO Threat Detection Cyber threats Cybercrime 147

NetSpi Executives

JANUARY 30, 2024

Expert analysts at these and other research and advisory firms perform a factual review of information from technology providers to recognize solutions that demonstrate innovation. In fact, our 2023 Offensive Security Vision Report found that one of the greatest barriers to improved offensive security is a lack of resources.

Technology 94

Technology Penetration Testing Risk Internet 94

Centraleyes

APRIL 9, 2024

The top five countries and regions for the highest average cost of a cyber security breach in 2023 were as follows: the US ($9.4 million), technology ($4.97 million, while compromised IP and customer data lead the pack in records stolen, costing companies an average of $183 per record in 2023. million per big data breach.

Data breaches 52

Data breaches Cyber Insurance Insurance Ransomware 52