Security Boulevard

DECEMBER 28, 2021

It’s been another chaotic year in cybersecurity, as protecting web applications and stopping sensitive data breaches remain top-of-mind issues and continue to generate headline news. The post 2021 in Review, Part 1: 5 Cybersecurity Topics that Made News appeared first on Blog.

Cybersecurity 98

Cybersecurity Data breaches Data privacy DDOS 98

CSO Magazine

JUNE 13, 2023

What’s in your Windows security policy? Do you provide education and training regarding the topics in the policy? And, importantly, do you have a security policy that includes your firm’s overall policies around the increasing race towards artificial intelligence, which is seemingly in nearly every application released these days?

Artificial Intelligence 101

Artificial Intelligence Education 101

Veracode Security

AUGUST 7, 2023

This makes it possible for developers to leverage the power of Dart and Flutter and deliver more secure mobile applications by finding and resolving security flaws earlier in the development lifecycle when they are fastest and least expensive to fix.

Mobile 98

Mobile 98

Heimadal Security

NOVEMBER 2, 2021

Here’s my topic for the month: AI in cybersecurity. From healthcare applications to online shopping personal recommendations (or even Spotify or Netflix, actually) and online banking applications, AI (artificial intelligence) is definitely a catalyst of the future and a true engine of technological progress and evolution.

Artificial Intelligence 98

Artificial Intelligence Cybersecurity Healthcare Banking 98

Tech Republic Security

APRIL 5, 2022

SafeStack Academy’s community-centric Secure Development training gives developers, testers, analysts, and architects the skills they need to build high-quality, secure software at speed. The post Weave Security Through Your SDLC from Idea to Maintenance appeared first on TechRepublic.

Software 81

Software 81

Security Boulevard

MARCH 23, 2023

On March 14, 2023, security expert, Nicolau Lawand, led a session discussing how Solvo helps organizations identify and mitigate cloud misconfigurations and vulnerabilities by providing contextual visibility into applications, user behavior, cloud infrastructure resources, and associated data.

62

62

The Last Watchdog

JUNE 2, 2022

Related: Managed security services catch on. From Office 365 to Zoom to Salesforce.com, cloud-hosted software applications have come to make up the nerve center of daily business activity. Here are the key takeaways: Shrugging off security. Here are the key takeaways: Shrugging off security.

Cloud Migration 201

Cloud Migration CISO Technology Security Awareness 201

CyberSecurity Insiders

JANUARY 26, 2022

Each year, O’Reilly gathers usage data across its publishing partners and learning modes, from books and videos to live online training courses, virtual events, practice exams, and interactive scenarios, to provide technology leaders with the trends, topics, and issues to watch in the coming year. For more information, visit www.oreilly.com.

Data breaches 84

Data breaches Cybersecurity Cryptocurrency Technology 84

Security Boulevard

AUGUST 30, 2021

A new article in SDXcentral talks about why WAFs (Web Application Firewalls) are insufficient protection according to a hacker. The post Why WAFs Don’t Work According to a Hacker appeared first on Security Boulevard. The post Why WAFs Don’t Work According to a Hacker appeared first on K2io.

Firewall 117

Firewall 117

The Security Ledger

MARCH 27, 2024

In this episode of The Security Ledger Podcast (#257) Paul speaks with Dennis Kengo Oka, a senior principal automotive security strategist at the firm Synopsys about the growing cyber risks to automobiles as connected vehicle features proliferate in the absence of strong cybersecurity protections. Read the whole entry. »

Software 52

Software Cyber Risk Risk Cybersecurity 52

Anton on Security

MAY 5, 2023

Security business is booming! Stop Glorifying Threat Actors, People! :-) In my traditional post-RSA manner, let’s go through the topic areas I care about (translation: not pre/post/in/on/through/over quantum) Security operations Let’s look at my favorite topic: security operations / detection and response.

Artificial Intelligence 130

Artificial Intelligence Threat Detection Marketing Cybersecurity 130

Security Boulevard

APRIL 7, 2022

Cloud Security Podcast by Google?—?Popular Popular Episodes by Topic. This is simply a post that categorizes our podcast episodes by topic and then by download/listen count. Data Security in the Cloud“. Security Operations Center (SOC). Security Operations, Reliability, and Securing Google with Heather Adkins”.

Cloud Migration 52

Cloud Migration Threat Detection CISO Engineering 52

SecureList

FEBRUARY 1, 2022

Telehealth today doesn’t just involve chatting with a doctor via a video-conferencing application. After being taken by the patients, the tablets were supposed to send a signal to a wearable patch; from there, the data would be sent to a special application. The vulnerability landscape in telehealth applications and wearables.

Phishing 118

Phishing Healthcare IoT Authentication 118

Troy Hunt

SEPTEMBER 4, 2020

Stefán from EVE Online has written a bunch about how to frame messaging when a customer attempts to use a Pwned Password (search through his other posts on the topic too, CCP Games has put a heap of research into this) Whilst I'm pimping his writing, check out yesterday's post too: Using HaveIBeenPwned, Application Insights and Grafana to detect credential (..)

Passwords 201

Passwords Encryption Risk 201

Notice Bored

OCTOBER 10, 2021

of the forthcoming new 3rd edition of ISO/IEC 27002 recommends two complementary types of information security policies. Firstly: At the highest level, organizations should define an “information security policy” which is approved by top management and which sets out the organization’s approach to managing its information security.

Information Security 56

Information Security 56

Adam Shostack

JUNE 28, 2018

Continuum has released a video of me and Stuart Winter-Tear in conversation at the Open Security Summit: “At the recent Open Security Summit we had the great pleasure of interviewing Adam Shostack about his keynote presentation “A seat at the table” and the challenge of getting security involved in product and application design.

100

100

Security Boulevard

FEBRUARY 1, 2023

In the world of AI and machine learning, the sudden massive popularity of language learning models is a hot topic. They can be used in a variety of applications, such as chatbots, language translation, and text summarization. appeared first on Security Boulevard. The post ChatGPT: Is its use of people’s data even legal?

Technology 52

Technology 52

CyberSecurity Insiders

SEPTEMBER 29, 2021

Spending on cloud management and security services, specifically, is expected to grow 12% in the next year, from approximately $16 billion in 2021 to about $18 billion in 2022. Demand for cybersecurity experts specializing in cloud security is skyrocketing worldwide. in 2021 to total $332.3 appeared first on Cybersecurity Insiders.

Cybersecurity 92

Cybersecurity Education 92

CyberSecurity Insiders

DECEMBER 24, 2021

As long-time information security professionals and (ISC)² Community Champions, we have experienced the way cybersecurity employees engage and work with one another continue to adapt in response to changes in the workplace and world at large. Like us, you may be wondering, what will 2022 look like for information security professionals?

Cybersecurity 98

Cybersecurity Ransomware VPN Architecture 98

Duo's Security Blog

MARCH 4, 2024

They can take advantage of the less secure methods of authentication, like one-time passcodes, and socially engineer a user to hand over codes or intercept them before they reach the end user. Even if an attacker has access to a username and password, they still need access to the second authentication factor to break into the organization.

Authentication 75

Authentication Social Engineering Passwords Risk 75

Krebs on Security

JANUARY 13, 2020

is slated to release a software update on Tuesday to fix an extraordinarily serious security vulnerability in a core cryptographic component present in all versions of Windows. It could be that the timing and topic here ( cryptography ) is nothing more than a coincidence, but KrebsOnSecurity today received a heads up from the U.S.

Internet 262

Internet Internet Software Cybersecurity 262

Anton on Security

MAY 24, 2023

I am not an AI security expert (I hear there are very few of those around ). BTW, if you have anything fun to say about LLM security (easy!) talk to us :-) These are the episodes: EP52 Securing AI with DeepMind CISO EP68 How We Attack AI? 1b1 What aspects of securing AI are different because the threats are different?

Artificial Intelligence 130

Artificial Intelligence CISO Risk Marketing 130

Malwarebytes

APRIL 26, 2023

How Secure is Code Generated by ChatGPT? " We found that, in several cases, the code generated by ChatGPT fell well below minimal security standards applicable in most contexts." "In In fact, when prodded to whether or not the produced code was secure, ChatGPT was able to recognize that it was not.

Ransomware 97

Ransomware Malware 97

Veracode Security

OCTOBER 21, 2022

The topic of mitigations is a commonplace source of questions and discussion for our Application Security Consulting group. Here's the best way to approach them. What is a mitigation? In other words, it is an explanation of how the risk reported via the finding is already being addressed effectively.

Risk 40

Risk 40

Notice Bored

MAY 20, 2022

We have just completed and released another topic-specific information security policy template, covering responsible disclosure (of vulnerabilities, mostly). The policy encourages people to report any vulnerabilities or other information security issues they discover with the organisation's IT systems, networks, processes and people.

Information Security 66

Information Security Marketing Risk Hacking 66

CyberSecurity Insiders

MAY 17, 2023

by John Spiegel, Director of Strategy, Axis Security Gartner just released the 2023 version of their “Magic Quadrant” for Secure Service Edge or SSE. SSE provides a framework to finally bring together networking and security in a modern manner to secure our future in a truly least privileged way.

Architecture 136

Architecture Engineering Marketing Internet 136

SecureWorld News

NOVEMBER 16, 2023

Cybersecurity and Infrastructure Security Agency (CISA) has unveiled its "2023-2024 CISA Roadmap for Artificial Intelligence. " Assess and assist secure by design AI-based software adoption across a diverse array of stakeholders through #bestpractices and guidance for secure and #resilient AI software development and implementation.

Artificial Intelligence 89

Artificial Intelligence Cybersecurity Education Software 89

CyberSecurity Insiders

JANUARY 8, 2023

Security researchers from Check Point warn that the practice can pave the way to a fast growing and innovative malicious activity in near time and can bring in a culture where humans will find it extremely difficult to deal with digital attacks launched by Ai technology. The applications look promising.

Artificial Intelligence 119

Artificial Intelligence Technology Encryption Mobile 119

CyberSecurity Insiders

SEPTEMBER 20, 2022

By Alfredo Hickman, head of information security, Obsidian Security. Earlier this year, I had the opportunity to speak before a group of CISOs about the topic of attack surface management (ASM). However, the same organizations typically have dozens—if not hundreds—of SaaS applications deployed through their enterprises.

Threat Detection 128

Threat Detection Risk Penetration Testing DNS 128

CSO Magazine

APRIL 27, 2022

The 2022 RSA Security Conference is just weeks away, and the security diaspora is boosted and ready to meet in person at the Moscone Center in San Francisco. We are at a point where the scale and complexity of historical security defenses either aren’t working or are stretched to their limits.

CISO 86

CISO Security Defenses Technology Cybersecurity 86

Security Boulevard

SEPTEMBER 23, 2021

The primary goal of the OWASP Top Ten has always been to drive awareness of the biggest application security risks out there, and thereby e stablish a “floor” or minimum standard for application security efforts at an organization.

Risk 57

Risk 57

Security Boulevard

JUNE 15, 2022

Panelists Kate Stanley ( @KateStanley91 ), Bruno Borges ( @brunoborges ) and myself answered questions around this topic. The three of us bring various perspectives including Java application development, platform development, JVM development, open source involvement and project management expertise.

52

52

CyberSecurity Insiders

OCTOBER 19, 2022

The number of these non-human accounts – and the number of applications that rely on them – is growing each day. In the new eBook ‘ 4 Steps to Comprehensive Service Account Security ‘, we’ll explore the challenges of protecting service accounts and offer guidance on how to combat these issues.

Account Security 52

Account Security Accountability Risk Cybersecurity 52

Schneier on Security

MAY 11, 2023

It could act as your tutor, answering questions interactively on topics you want to learn about—in the manner that suits you best and taking into account what you already know. Many of us would welcome an AI-assisted writing application fine tuned with knowledge of which edits we have accepted in the past and which we did not.

Artificial Intelligence 283

Artificial Intelligence Computers and Electronics Risk Technology 283

Duo's Security Blog

OCTOBER 4, 2023

Updating software Cisco Duo is all about cybersecurity, so every week we’re going to publish a blog focused on those respective topics. This week’s topic, on passwords, is something most of us encounter in our daily lives, whether we’re logging into a banking site as a consumer, or into a work computer as an employee. Try Duo for free!

Password Management 100

Password Management Passwords Authentication Social Engineering 100

Troy Hunt

SEPTEMBER 8, 2022

The first time I ever wrote publicly about a company's security vulnerabilities, my boss came to have a word with me after seeing my name in the news headlines. Troy has the technical know-how, and is able to effectively communicate complex topics so that anyone understands them. The personal stories kept me hooked!

InfoSec 359

InfoSec Password Management Passwords IoT 359

SC Magazine

MAY 5, 2021

Researchers issued a warning on Wednesday to any company running cloud apps, reporting that in 2020 they detected more than 180 different malicious open authorization (OAuth) applications attacking 55% of their customers with a success rate of 22%. applications – or cloud malware – to siphon data and access sensitive information.

Malware 113

Malware Engineering Social Engineering Phishing 113