Security Boulevard

MARCH 6, 2024

When we discuss the challenge of managing the enterprise attack surface, it is important to understand that it is not a homogenous entity. Among these components, one of the most prevalent yet often overlooked is the […] The post The Hidden Threat: Understanding the Identity Attack Surface appeared first on Security Boulevard.

Risk 64

Risk 64

The Last Watchdog

APRIL 17, 2023

Even the most well-protected companies can be susceptible to attacks if they are not careful about a proactive approach towards cyber security. Here are a few of the top security weaknesses that threaten organizations today: Poor risk management. Anemic asset management. No organization is immune to cybersecurity threats.

Risk 218

Risk Cybersecurity Data breaches Cyber Attacks 218

Security Boulevard

FEBRUARY 7, 2024

This year, Gartner named “Continuous Threat Exposure Management (CTEM)” as one of the top trends for Optimizing for Resilience. This is a response to increasing attack surfaces and thus cybercrime, and is the approach that best suits the evolving threat landscape.

Cyber threats 64

Cyber threats Cybercrime Risk 64

Security Boulevard

FEBRUARY 7, 2024

This article introduces the concept of Continuous Threat Exposure Management (CTEM), delving into the philosophy behind CTEM, its five stages, and exploring key technologies that support its implementation. Gartner categorized these trends into three […] The post CTEM: Navigating the Future of Attack Surface appeared first on NSFOCUS, Inc.,

Cyber Attacks 64

Cyber Attacks Technology 64

The Last Watchdog

SEPTEMBER 26, 2022

Thanks to the emergence of today’s hybrid and multi-cloud environments and factors like remote work, ransomware attacks continue to permeate each industry. As enterprises continue to fall victim to increasingly complex attacks, there’s one topic that cybersecurity professionals and vendors can agree on: the importance of Zero Trust.

Ransomware 220

Ransomware Passwords Data breaches Accountability 220

The Last Watchdog

JANUARY 8, 2023

The attack surface is expanding relentlessly and exponentially, while security initiatives aren’t ingrained into every department’s daily operation. Gartner refers to it as “CAASM,” or cyber asset attack surface management. Managed solutions can help. Sometimes the issue is resources.

Risk 214

Risk Cybersecurity Technology CISO 214

Thales Cloud Protection & Licensing

FEBRUARY 21, 2024

How Thales and Red Hat Protect Telcos from API Attacks madhav Thu, 02/22/2024 - 04:55 Application programming interfaces (APIs) power nearly every aspect of modern applications and have become the backbone of today’s economy. Unfortunately, API attacks are increasing as vectors for security incidents. What are APIs?

Encryption 139

Encryption Mobile Government Consumer Protection 139

Heimadal Security

OCTOBER 1, 2022

Previously, we’ve reviewed how SIEM and log management systems work, and how they come together in order to seal off emerging attack surfaces, bridge the detection gap, and increase your overall cybersecurity stance. Definitions, Scopes, And Limitations appeared first on Heimdal Security Blog. The post SOAR vs SIEM.

Cybersecurity 92

Cybersecurity 92

NetSpi Executives

SEPTEMBER 5, 2023

This blog post is a part of our offensive security solutions update series. Stay tuned for additional innovations within Resolve (PTaaS) , ASM (Attack Surface Management) , and BAS (Breach and Attack Simulation).

Penetration Testing 52

Penetration Testing Risk Network Security Technology 52

NetSpi Executives

NOVEMBER 7, 2023

Because of its effectiveness, threat actors constantly develop more sophisticated, less recognizable attack methods determined to trick unsuspecting employees. Through the utilization of additional testing processes and new tooling, we are able to provide attack approaches that mimic those used by real-world adversaries today.

Social Engineering 59

Social Engineering Engineering Phishing Security Awareness 59

NetSpi Executives

OCTOBER 5, 2023

The companies take on the risks and responsibilities of new system attack vectors created by these choices.  We also identify and interview system stakeholders such as: security personnel, developers, architects, business owners, project managers, operations staff, and more.

Penetration Testing 52

Penetration Testing Architecture Risk Technology 52

Krebs on Security

APRIL 9, 2024

. “This along with many other AI attacks in recent news shows a potential new attack surface that we are just learning how to mitigate against,” McCarthy said. “Microsoft has updated their backend and notified any customers who have been affected by the credential leakage.”

DNS 241

DNS Social Engineering Malware Media 241

NetSpi Executives

OCTOBER 13, 2023

This vulnerability abuses certain features of HTTP/2 protocol and allows for Distributed Denial of Service (DDoS) attacks at an unprecedented scale. Explain It to Me Like I’m 5 (ELI5) If your website or application uses HTTP/2, an attacker could completely restrict access by flooding your network with an overwhelming amount of traffic.

DDOS 52

DDOS CISO Engineering Technology 52

Security Boulevard

JANUARY 18, 2024

Security teams are not looking at Cyber Asset Attack Surface Management (CAASM) tools such as the Noetic platform to help firefight security incidents, but rather to focus on improving their overall security posture […] The post Applying Maslow’s Hierarchy of Needs to Exposure Management appeared first on Security Boulevard.

CISO 64

CISO Cybersecurity 64

NetSpi Executives

DECEMBER 28, 2023

Our top resources this year spanned from Blockchain to Attack Surface Management. Offensive Security Vision Report 2023 Our top resource in 2023 was NetSPI’s Offensive Security Vision Report, a first-hand study that summarizes the top vulnerabilities by attack surface and much more.

Education 93

Education Penetration Testing CISO Cybersecurity 93

SC Magazine

JULY 12, 2021

Looking to strengthen its position in cloud security, Microsoft on Monday announced a definitive agreement to acquire RiskIQ, a cloud-based threat intelligence and attack surface management vendor best known for its PassiveTotal product.

CISO 101

CISO Internet Internet Risk 101

NetSpi Executives

JANUARY 8, 2024

In case you missed it, Chubb, one of the leading publicly traded property and casualty insurance companies, announced an innovative collaboration with NetSPI to strengthen client cyber-risk profiles via enhanced attack surface management and penetration testing solutions.

Cyber Insurance 64

Cyber Insurance Insurance Penetration Testing Cyber threats 64

The Last Watchdog

JUNE 13, 2022

Among them: an expanding digital footprint, growing attack surfaces, and increasing government regulation. The SolarWinds attack made API supply chain security a front-page story in 2020. Improving identity management. projects, makes the urgency of more robust and portable identity management systems even more imminent.

Cybersecurity 257

Cybersecurity Artificial Intelligence Software Marketing 257

Anton on Security

MAY 24, 2023

talk to us :-) These are the episodes: EP52 Securing AI with DeepMind CISO EP68 How We Attack AI? Since I promised to provide no answers in this blog, let me do more questions: 1a What aspects of securing AI are unchanged from securing, well, anything else? BTW, if you have anything fun to say about LLM security (easy!)

Artificial Intelligence 130

Artificial Intelligence CISO Risk Marketing 130

Security Boulevard

DECEMBER 6, 2023

The proliferation of attacks - 66% of organizations were hit in the past year - and the ability for threat actors to more easily execute these attacks at scale, makes ransomware “ arguably the biggest cyber risk facing organizations today.” Vulnerability exploits are the most common root cause of ransomware attacks.

Ransomware 64

Ransomware Digital transformation InfoSec Risk 64

Security Boulevard

MARCH 8, 2023

Related: It’s all about attack surface management APIs help digital transformation by enabling faster and more efficient business … (more…) The post GUEST ESSAY: Five stages to attain API security — and mitigate attack surface exposures appeared first on Security Boulevard.

Digital transformation 59

Digital transformation Security Awareness 59

The Last Watchdog

MARCH 31, 2022

A sobering analysis by Cybersecurity Ventures forecasts that the global cost of ransomware attacks will reach $265 billion in 2031. • Meanwhile the attack surface keeps broadening with the increasing interconnectivity of services, product chains, and user interfaces. Thus, secure implementations are critical.

Artificial Intelligence 229

Artificial Intelligence Threat Detection Engineering Software 229

eSecurity Planet

JANUARY 11, 2024

These devices exist outside of direct corporate management and provide a ransomware gang with unchecked platforms for encrypting data. Ransomware remains just one of many different threats and as security teams eliminate key vectors of attack, adversaries will shift tactics. Which unmanaged devices do attackers use?

Ransomware 112

Ransomware Encryption IoT VPN 112

The Last Watchdog

SEPTEMBER 21, 2022

Related: The criticality of ‘attack surface management’ Massive global macro-economic shifts have fundamentally changed the way companies operate. The increased threat surface that developed under pandemic conditions will require a more pervasive adoption of the Zero Trust model.

Digital transformation 214

Digital transformation Cybersecurity Cyber threats Financial Services 214

The Last Watchdog

OCTOBER 5, 2023

Here is Erin’s Q&A column, which originally went live on OneRep’s well-done blog.) For the first expert interview on our blog, we welcomed Pulitzer-winning investigative reporter Byron V. Their dual-edged nature demands careful implementation and management.

Cyber threats 203

Cyber threats Cyber Insurance Cybersecurity Threat Detection 203

Security Boulevard

APRIL 18, 2022

Identities are a prime attack vector and waiting to apply security controls after an attack is not a responsible security policy.”. -- CyberArk 2022 Identity Security Threat Landscape Report , April 2022. The 2022 attack surface. Digital transformation and cloud migration are expanding the attack surface.

Cybersecurity 122

Cybersecurity Cloud Migration Digital transformation Software 122

The Last Watchdog

APRIL 3, 2023

Modern cyber attacks are ingenious — and traditional vulnerability management, or VM, simply is no longer very effective. The consequences of a cyber attack can be devastating; from a rapid drop in brand reputation to loss of business and sensitive data. Cyber attacks can also invite lawsuits and can even be fatal.

Cyber Attacks 214

Cyber Attacks Risk Software Technology 214

The Last Watchdog

MARCH 13, 2023

Related: Attack surface management takes center stage. CISOs should prioritize security initiatives that drive the top line and increase customer stickiness, such as bot management solutions that improve customer experience, then they should inform customers of the steps taken to thwart costly application attacks.

CISO 203

CISO Insurance Cybersecurity Risk 203

The Last Watchdog

DECEMBER 8, 2022

Over the years, bad actors have started getting more creative with their methods of attack – from pretending to be a family member or co-worker to offering fortunes and free cruises. Only 28 percent don’t use repeated passwords•Only 20 percent use a password manager. Related: Deploying employees as human sensors. Blurred lines.

Cybersecurity 203

Cybersecurity Passwords Password Management Ransomware 203

Security Affairs

MAY 6, 2023

An authenticated attacker can exploit the flaw to achieve command execution, if targeting a logged-in cPanel user. “Even on port 80 and 443, it is possible to reach the /cpanelwebcall/ directory as it is being proxied to the cPanel management ports by Apache. . ” reads the advisory published by the researchers.”

Authentication 96

Authentication Hacking Engineering Cybersecurity 96

Jane Frankland

APRIL 17, 2024

Whether it’s through its cybersecurity and risk management solutions or Identity capabilities, Mastercard’s innovative technologies and industry standards are creating a secure environment for seamless and trustworthy digital transactions.

Identity Theft 204

Identity Theft Digital transformation Technology Risk 204

Security Boulevard

MARCH 24, 2022

Director Product Management. Identity credentials and source code are critical assets that can create major risks for your organization when exposed by breaches of third-party cloud service companies that provide identity management and software composition analysis. You can read more about how this works in this blog post?—?

Risk 122

Risk Software Engineering Passwords 122

Duo's Security Blog

JANUARY 29, 2024

We will outline the trends and attack patterns that are the most prevalent and discuss how to configure Duo policies to best protect your users. In analyzing de-identified customer data over the latter half of 2023, we found a pattern of threat activity targeting multiple universities using shared attack infrastructure. What happened?

Education 113

Education Authentication Passwords Phishing 113

Krebs on Security

JANUARY 30, 2024

A graphic depicting how 0ktapus leveraged one victim to attack another. In each attack, the victims saw their email and financial accounts compromised after suffering an unauthorized SIM-swap, wherein attackers transferred each victim’s mobile phone number to a new device that they controlled. Twilio disclosed in Aug.

Social Engineering 318

Social Engineering Mobile Cybercrime Passwords 318

Security Affairs

MAY 9, 2023

Microsoft warns of Iran-linked APT groups that are targeting vulnerable PaperCut MF/NG print management servers. Microsoft warns that Iran-linked APT groups have been observed exploiting the CVE-2023-27350 flaw in attacks against PaperCut MF/NG print management servers.

Software 90

Software Authentication Hacking Cybersecurity 90

Webroot

NOVEMBER 7, 2022

Feedback from SMBs across multiple industries and countries confirm security teams and the C-suite are worried about increasingly sophisticated and relentless attacks. Ransomware is a top concern for SMBs: An overwhelming majority (88%) of SMBs indicated they are concerned or extremely concerned about an attack impacting their businesses.

Ransomware 83

Ransomware Security Awareness DNS Phishing 83

Security Boulevard

FEBRUARY 21, 2024

How Thales and Red Hat Protect Telcos from API Attacks madhav Thu, 02/22/2024 - 04:55 Application programming interfaces (APIs) power nearly every aspect of modern applications and have become the backbone of today’s economy. Unfortunately, API attacks are increasing as vectors for security incidents. What are APIs?

Encryption 64

Encryption Mobile Government Consumer Protection 64