Security Boulevard

JANUARY 26, 2024

There was an alarming surge of user-submitted web vulnerability submissions in 2023—with a 30% increase compared to 2022—as open-scoped bug bounty programs evolved. The post Web Vulnerability Submissions Exploded in 2023 appeared first on Security Boulevard.

Mobile 122

Mobile Malware Cybersecurity Network Security 122

Security Boulevard

JANUARY 15, 2024

Mark Rasch examines 2023 cybercrime cases that appear to be the most impactful—not the most extensive or expensive—just the most “interesting.” The post Stupid Human Tricks: Top 10 Cybercrime Cases of 2023 appeared first on Security Boulevard.

Cybercrime 122

Cybercrime Risk Government Ransomware 122

Security Boulevard

JANUARY 10, 2023

With the start of a new year, LogRhythm is announcing our 2023 cybersecurity predictions! The post 2023 Cybersecurity Predictions appeared first on LogRhythm. The post 2023 Cybersecurity Predictions appeared first on Security Boulevard. Looking back at our 2022….

Cybersecurity 117

Cybersecurity Cyber threats Network Security 117

The Hacker News

JULY 12, 2023

SonicWall on Wednesday urged customers of Global Management System (GMS) firewall management and Analytics network reporting engine software to apply the latest fixes to secure against a set of 15 security flaws that could be exploited by a threat actor to circumvent authentication and access sensitive information.

Network Security 98

Network Security Firewall Engineering Authentication 98

Heimadal Security

FEBRUARY 10, 2023

Compared to network security systems that include appliances such as firewalls that monitor traffic as it flows through a scenario, threat hunting is a different approach to dealing with cyber-attacks.

Firewall 105

Firewall Cyber Attacks Network Security 105

Tech Republic Security

JUNE 23, 2023

Read our interview from Dell Technologies World 2023 about cloud and edge workloads and Dell's NativeEdge product. The post Dell Technologies World 2023: Q&A on how Dell sees security at the edge appeared first on TechRepublic.

Technology 147

Technology Cybersecurity Network Security 147

Centraleyes

DECEMBER 21, 2023

The dynamic security landscape presents significant challenges for organizations, especially in multi-cloud environments. The key to combating these growing threats is network security automation. Myth 7: Security Orchestration and Security Automation Are Twins (Not Quite.)

Network Security 52

Network Security Cyber threats Threat Detection Backups 52

eSecurity Planet

OCTOBER 11, 2023

Microsoft’s Patch Tuesday for October 2023 covers a total of 103 CVEs, including three zero-day vulnerabilities affecting WordPad, Skype and the HTTP/2 “ Rapid Reset ” DDoS vulnerability. CVE-2023-41763 , an elevation of privilege vulnerability in Skype for Business with a CVSS score of 5.3

DDOS 109

DDOS Engineering Authentication Social Engineering 109

eSecurity Planet

SEPTEMBER 5, 2023

August 28, 2023 Ransomware Group Exploits Citrix NetScaler Vulnerability In July, Citrix released a patch for a critical remote code execution vulnerability ( CVE-2023-3519 ), which affected the company’s NetScaler ADC and NetScaler Gateway products and carried a severity rating of 9.8 out of 10 on the CVSS vulnerability scale.

VPN 104

VPN Authentication Ransomware Antivirus 104

Security Boulevard

DECEMBER 28, 2023

What an exciting year 2023 turned out to be. Right from upgrading to VSA 10 to unlocking the efficiencies Read More The post Kaseya’s 2023 Highlights and the Road Ahead appeared first on Kaseya. The post Kaseya’s 2023 Highlights and the Road Ahead appeared first on Security Boulevard.

Penetration Testing 62

Penetration Testing Marketing Network Security 62

Security Boulevard

FEBRUARY 8, 2024

Ransomware gangs raked in more than $1 billion in ransom payments last year as they exploited security flaws – particularly the vulnerability in the MOVEit file transfer software – and grew their focus on hospitals, schools, and other critical infrastructure.

Ransomware 76

Ransomware Software Mobile Malware 76

Security Boulevard

JUNE 2, 2023

The post 5G and Cybersecurity Risks in 2023 appeared first on Security Boulevard. Four years later, the number of people with 5G-enabled devices is still small in most countries. It’s uncertain if the reason behind the sluggish adoption is affordability, the lack of.

Risk 116

Risk Cybersecurity Telecommunications IoT 116

Security Boulevard

JULY 21, 2023

The post R.I.P. Kevin Mitnick, 1963–2023 appeared first on Security Boulevard. Kevin is Free: Hackers’ hacker dies, aged 59.

Social Engineering 98

Social Engineering Marketing Security Awareness Engineering 98

eSecurity Planet

OCTOBER 30, 2023

It can also be a challenge for security and IT pros even to know everything they own — a vulnerable device may have been forgotten — so asset management is an increasingly important part of vulnerability management. The problem: CVE-2023-20198 , with a highest-possible CVSS Score of 10.0, and CVE-2023-20273 with a CVSS Score of 7.2,

Authentication 104

Authentication Mobile Accountability Software 104

eSecurity Planet

NOVEMBER 6, 2023

30, 2023 NGINX Ingress Controller for Kubernetes Flaws Can Lead to Credential Theft Type of Attack: Path sanitization bypass and injection vulnerabilities discovered in the NGINX Ingress controller can allow for credential theft, arbitrary command execution, and critical data access. CVE-2023-5044 (Code Injection): This CVSS score 7.6

Software 112

Software Education Ransomware Firmware 112

Security Boulevard

MAY 31, 2023

Synopsys named a winner in the Application Security Organization category for a 2023 Fortress Cyber Security Award. The post Synopsys named in 2023 Fortress Cyber Security Awards appeared first on Security Boulevard.

Network Security 98

Network Security 98

Security Boulevard

JANUARY 10, 2024

So, we ( Tim and Anton , the crew behind the podcast ) wanted to post another reflections blog based on our Cloud Security Podcast by Google being almost 3 (we will be 3 years old on Feb 11, 2024, to be precise), kind of similar to this one. So, what did we do differently in 2023? We do have a few fun new things! what a NOT surprise ?

Cloud Migration 62

Cloud Migration Government Network Security Risk 62

eSecurity Planet

JANUARY 5, 2023

After a year that saw massive ransomware attacks and open cyber warfare, the biggest question in cybersecurity for 2023 will likely be how much of those attack techniques get commoditized and weaponized. 2023, he predicted, “will not be any easier when it comes to keeping users’ data safe and private.”

Ransomware 145

Ransomware CISO Software Cybercrime 145

Security Boulevard

MAY 8, 2023

Denise Ahrens, Andrea Jaime, Annia Rodriguez of Synopsys Software Integrity Group named to CRN’s 2023 Women of the Channel Awards list. The post CRN’s 2023 Women of the Channel Awards list appeared first on Security Boulevard.

Software 98

Software Network Security 98

CyberSecurity Insiders

JANUARY 6, 2023

Here are the five challenges that will alter the industry in 2023: Zero trust will replace perimeter security. In fact, Gartner reports that zero-trust network access will remain the fastest-growing segment in network security, with growth of 36 percent in 2022 and 31 percent anticipated in 2023.

Cybersecurity 138

Cybersecurity Manufacturing Education Technology 138

Security Boulevard

NOVEMBER 20, 2023

This month there were 3 new zero-day vulnerabilities disclosed (as well as an update to 1 previously disclosed zero day from September 2023). Also, there were updates … Read More The post Patch Tuesday Update – November 2023 appeared first on Security Boulevard.

Network Security 62

Network Security 62

eSecurity Planet

OCTOBER 9, 2023

The sheer number of security issues underscores the need for strong patch and vulnerability management — and for cyber resilience that goes deeper than common preventive measures. The problem: Arm has issued a security alert on CVE-2023-4211 , an actively exploited vulnerability in its Mali GPU drivers.

Architecture 104

Architecture Ransomware Software Accountability 104

eSecurity Planet

AUGUST 21, 2023

Here’s a roundup of the week’s major vulnerabilities that security teams should mitigate or patch. A few small errors in the implementation of AES Encryption allows for unauthenticated ACE, and the security firm GreyNoise notes a significant spike in attackers trying to exploit this vulnerability.

Encryption 98

Encryption Cybersecurity Security Defenses Software 98

Security Boulevard

JANUARY 9, 2023

But some vendors faced stiff criticism over their privacy and security stances. The post CES 2023 FAIL: Worst in Show for Security and Privacy appeared first on Security Boulevard. The Consumer Electronics Show wrapped up yesterday.

Social Engineering 141

Social Engineering IoT Security Awareness Engineering 141

Security Boulevard

DECEMBER 18, 2023

At KubeCon 2023, Mitch Ashley talks with Gopal Dommety and David Green from OpsMX about securing software delivery and deployment. The post KubeCon 2023: Securing Software Delivery and Deployment appeared first on Security Boulevard.

Software 62

Software Firewall Risk Government 62

Security Affairs

JUNE 8, 2023

Barracuda warns customers to immediately replace Email Security Gateway (ESG) appliances impacted by the flaw CVE-2023-2868. Earliest identified evidence of exploitation of CVE-2023-2868 is currently October 2022.” Threat actors exploited the flaw CVE-2023-2868 to obtain unauthorized access to a subset of ESG appliances.

Malware 89

Malware Hacking Network Security Cybersecurity 89

eSecurity Planet

DECEMBER 7, 2022

But for 2023, cybersecurity will be a “key pillar” of the company’s focus – particularly data compliance and protection. An area that Kakran is bullish on for 2023 is Kubernetes security and observability. Looking at 2023, he says that ransomware solutions will be a hot category. Data Compliance and Protection.

Cybersecurity 145

Cybersecurity Risk Technology Ransomware 145

Tech Republic Security

JUNE 23, 2023

The post Dell Technologies World 2023: Interview with Rob Emsley on data protection, recovery and more appeared first on TechRepublic. Explore what matters in data protection today. Cyber resilience, recovery and streamlined software make the list.

Technology 124

Technology Software Big data Backups 124

CyberSecurity Insiders

APRIL 20, 2023

The details So, the details: AT&T Cybersecurity will be at RSA Conference 2023 (San Francisco, April 24-27), in booth 6245 in the North Hall. The AT&T Cybersecurity booth will be a hub of activity with demo stations, presentations, and other social networking activities.

Threat Detection 64

Threat Detection Cybersecurity DDOS Architecture 64

eSecurity Planet

SEPTEMBER 18, 2023

This week, the following active exploits of vulnerabilities were announced: Iranian advanced persistent threat (APT) group exploits January 2023 vulnerabilities in Fortinet firewalls and ManageEngine software to perform remote code execution (RCE) on U.S. Read More: The 8 Best Vulnerability Scanner Tools for 2023 What is Patch Management?

Firewall 109

Firewall Security Defenses Risk Cybersecurity 109

eSecurity Planet

AUGUST 28, 2023

We’ve compiled some recently active vulnerabilities — both old and new — for security teams to monitor, mitigate, patch, or even remove from your infrastructure altogether. August 21, 2023 Ivanti finds another vulnerability For the third time in a month, Ivanti’s has reported a vulnerability in a mobile device management platform.

VPN 98

VPN Authentication Mobile Firewall 98

Security Boulevard

MARCH 1, 2023

The post Top 10 Open Source Software Risks of 2023 appeared first on Security Boulevard. This problem has come into focus as more vulnerabilities present themselves and attacks on open source software ecosystems become more.

Software 112

Software Risk Mobile Malware 112

eSecurity Planet

AUGUST 28, 2023

We’ve compiled some recently active vulnerabilities — both old and new — for security teams to monitor, mitigate, patch, or even remove from your infrastructure altogether. August 21, 2023 Ivanti finds another vulnerability For the third time in a month, Ivanti’s has reported a vulnerability in a mobile device management platform.

VPN 95

VPN Authentication Mobile Firewall 95

Security Boulevard

MAY 10, 2023

The post 2023 is the Year of the Enterprise Browser appeared first on Security Boulevard. Enterprises adopting SaaS must answer thorny questions around compliance, transparency and cybersecurity in order to fully realize the potential benefits. The seeds of the.

Digital transformation 104

Digital transformation Software Cybersecurity Network Security 104

Security Affairs

AUGUST 24, 2023

The FBI warned that patches for a critical Barracuda ESG flaw CVE-2023-2868 are “ineffective” and patched appliances are still being hacked. The Federal Bureau of Investigation warned that security patches for critical vulnerability CVE-2023-2868 in Barracuda Email Security Gateway (ESG) are “ineffective.”

Hacking 90

Hacking Malware Phishing Network Security 90

Security Boulevard

DECEMBER 21, 2022

A survey of more than 6,550 security professionals finds that while organizations continue to invest heavily in cybersecurity there’s still not a lot of confidence when it comes to actually being able to thwart attacks. The post 2023 Cybersecurity Spending Increases to Combat Evolving Threats appeared first on Security Boulevard.

Cybersecurity 98

Cybersecurity Security Awareness Network Security 98

Security Boulevard

DECEMBER 11, 2023

The post KubeCon 2023: Not Your Father’s Tenable appeared first on Security Boulevard. This is not your father's Tenable! Alan Shimel talks with John Tonello from Tenable about the company's past, present and future.

Cybersecurity 57

Cybersecurity Network Security 57