Security Boulevard, Friday, November 1st, 2024
Lateral Movement In Recent Cybersecurity Breaches
Highlighting two recent cybersecurity breaches to study lateral movement
more →
Back Issues This Week → Popular →
All issues › Archive
Security — Archive
2,417 articles · page 26 of 49
Secure Reading, Friday, November 1st, 2024
Cybersecurity Threats In Social Media Networks: Protecting User Data
The usage of social media networks has grown significantly over the last ten years. These platforms have become popular among all communities and age groups, as they have become a means of entertainment, communication and a way to maintain relationships with people across the globe.
more →
Analytics Insight, Thursday, October 31st, 2024
How Ethical Hacking Tools Enhance Cyber Defense
From vulnerability scanning to penetration testing, these tools empower security teams to proactively identify
more →
Security Boulevard, Thursday, October 31st, 2024
Why Data Discovery And Classification Are Important
Why Data Discovery and Classification are ImportantIn the modern world, data is a critical asset. In fact, today, data is the foundation of any business. If a company loses its data, or that data is compromised, it can significantly damage the business in terms of brand reputation, financial performance and customer loss.
more → Security Boulevard, Thursday, October 31st, 2024
The AI Paradox In Digital Identity: Why More Security Might Mean Less Privacy (And What To Do About It)
In today's digital world, our online identities are becoming as important as our physical IDs. Artificial Intelligence (AI) is making these digital identities more secure, but there's a catch - it needs to collect more and more of our personal information to do so
more → Security Boulevard, Thursday, October 31st, 2024
Terrifying Trends In The 2024 Cyber Threat Landscape
The already scary cybersecurity landscape of 2023 has only gotten more terrifying through 2024, as attackers use more proxies, residential IPs, and AI tools to perform attacks.
more → Security Boulevard, Thursday, October 31st, 2024
Shedding AI Light On Bank Wire Transfer Fraud
According to the Association of Certified Fraud Examiners (ACFE), the average organization loses about 5% of its revenue to fraud each year.
more → class2=IT-Security, Thursday, October 31st, 2024
Criminal Justice Information Services (CJIS) Security Policy v5.9.5
The Criminal Justice Information Services (CJIS) Security Policy v5.9.5 is a comprehensive security framework established by the Federal Bureau of Investigation (FBI). It sets standards for safeguarding and managing criminal justice information (CJI) in the United States.
more → ComputerWeekly, Wednesday, October 30th, 2024
IAM Best Practices For Cloud Environments To Combat Cyber Attacks
The Security Think Tank considers best practices in identity and access management and how can they be deployed to enable IT departments to combat cyber-attacks, phishing attacks and ransomware
more →
Security Boulevard, Wednesday, October 30th, 2024
A Wave Of Identity Security Reports Defines A Big Problem
There have been a wealth of reports lately articulating the poor state of identity risk. We find these reports meaningful because they all make the same central point: identity risk is one of the biggest threats facing CISOs today.
more → SC Media, Tuesday, October 29th, 2024
What The Crowdstrike Outage Teaches Us About Cloud Security
On July 19, 2024, a software update from CrowdStrike sent IT teams worldwide scrambling to contain a crisis, as millions of Windows computers crashed into an unbootable 'blue screen of death.'
more →
Security Boulevard, Tuesday, October 29th, 2024
49% Of Enterprises Fail To Identify Saas Vulnerabilities
The rising occurrence of SaaS data breaches has emerged as a major concern for businesses globally. A report from AppOmni reveals that 31% of organizations experienced a SaaS data breach in 2024, marking a notable increase from the previous year.
more → Tripwire, Monday, October 28th, 2024
Why Security Configuration Management (SCM) Matters
Security configuration management (SCM) is all about making sure your security systems do what you think they're doing.
more →
Search Security, Monday, October 28th, 2024
What Is Unified Threat Management (UTM)?
Unified threat management (UTM) is an information security system that provides a single point of protection against cyberthreats, including viruses, worms, spyware and other malware, as well as network attacks.
more →
HelpNet Security, Monday, October 28th, 2024
The State Of Password Security In 2024
In this Help Net Security video, John Bennett, CEO at Dashlane, discusses their recent Global Password Health Score Report, detailing the global state of password health and hygiene.
more →
Security Boulevard, Monday, October 28th, 2024
Orchestrating Success: How Rehearsals In Music Mirror Cybersecurity Resiliency
Being a part of a wind band for over a decade has taught me something fundamental: the power of consistent rehearsal.
more → Security Boulevard, Monday, October 28th, 2024
5 Best Practices For Data Privacy Compliance
With data breaches on the rise-over 3,200 incidents in the U.S. last year alone -businesses are increasingly under pressure to protect personal data and comply with evolving privacy regulations.
more → readwrite, Monday, October 28th, 2024
6 Types Of Cyberattacks You Didn't Know You Need To Worry About
Just about everyone who uses the internet knows they need to be concerned about cyberattacks, but not everyone knows what that means. It takes far more effort than refusing to download random files and scanning your computer with an antivirus program to stay safe.
more →
readwrite, Monday, October 28th, 2024
A Rise In QR Code Scams, Known As 'Quishing,' Has Been Seen
Major banks are warning the public about the rise of QR code phishing scams which are leading to customers sharing their financial details and being scammed through sophisticated fraud campaigns.
more → Security Boulevard, Friday, October 25th, 2024
3 Tips For Organizations To Shore Up Their Cyber Resilience Strategies This Fall
Fall brings with it the opportunity to slow down and refresh - but not for IT and security teams. In fact, in the past few years, fall holidays have been synonymous with bad actors targeting organizations while employees are away.
more → Security Boulevard, Friday, October 25th, 2024
Cequence Security - A Leader and Outperformer in GigaOm API Security Radar Report
Cequence Security has been recognized as a Leader and Outperformer in the new GigaOm Radar for API Security report, highlighting our innovative approach and comprehensive protection capabilities.
more → Security Boulevard, Friday, October 25th, 2024
CISOs Should Be Directing IAM Strategy - Here's Why
Have you ever seen a beginner's Rubik's Cube? It only has four squares per side, and it's much easier to solve than its nine-square-per-side counterpart.
more → Security Boulevard, Friday, October 25th, 2024
Cyber Scams & Why We Fall For Them
Social engineers rely on two key psychological triggers: urgency and empathy. When people feel rushed or that they are helping someone in need, their normal critical thinking is often overridden.
more → Security Boulevard, Friday, October 25th, 2024
Cyberattacks Against Sporting Events Are Growing More Calculated
Behind the excitement, comradery, and competition of large-scale sporting events is a darker endeavor - threat actors target these high-profile gatherings to steal data, commit fraud and disrupt the experience for athletes and fans.
more → Security Boulevard, Friday, October 25th, 2024
The Power Of Proactive Risk Assessments In Cybersecurity
In today's rapidly evolving digital landscape, businesses face a growing number of cybersecurity threats. From ransomware to phishing, to data breaches, the threats are more sophisticated than ever.
more → HelpNet Security, Friday, October 25th, 2024
Achieving Peak Cyber Resilience
Climbing Mount Everest isn't a feat for the faint hearted. Extreme weather, dangerous terrain and acclimatization requirements make the trek challenging for even the most experienced climbers.
more → techradar.pro, Friday, October 25th, 2024
Zero-Trust Log File Intelligence: What You Need To Know
Zero-trust ensures secure, encrypted log access, balancing security, privacy, and productivity efficiently
more →
Security Boulevard, Thursday, October 24th, 2024
Majority of SaaS Applications, AI Tools Unmanaged
Unmanaged software as a service (SaaS) applications and AI tools within organizations are posing a growing security risk as vulnerabilities increase, according to a report from Grip Security.
more → DARKReading, Thursday, October 24th, 2024
Why Cybersecurity Acumen Matters In The C-Suite
Until CEOs and boards prioritize learning more about mitigating threats, organizations are leaving themselves and their businesses open to the potential for disaster.
more →
InformationWeek, Thursday, October 24th, 2024
Overconfidence In Cybersecurity: A Hidden Risk
Overconfidence in cybersecurity leaves companies exposed. Staying ahead of evolving threats means streamlining your tools and regularly reassessing your strategy.
more →
Techradar.pro, Thursday, October 24th, 2024
Six Ways Banks Can Ensure Watertight Cybersecurity In A Hostile Digital World
Six steps banks can take to mitigate security threats
more → Security Boulevard, Wednesday, October 23rd, 2024
Cybersecurity Snapshot: New Guides Offer Best Practices For Preventing Shadow AI And For Deploying Secure Software Updates
Looking for help with shadow AI? Want to boost your software updates' safety? New publications offer valuable tips. Plus, learn why GenAI and data security have become top drivers of cyber strategies.
more → Security Boulevard, Wednesday, October 23rd, 2024
Who Owns SaaS Identity Risk Management, Anyway?
The current state of SaaS security is sometimes like a game of hot potato-everyone knows it's critical, yet no one wants to hold onto the responsibility long enough to claim ownership. SaaS apps are multiplying at a rate that IT and security teams can barely keep pace with.
more → Tripwire, Wednesday, October 23rd, 2024
Defending Against Ransom DDoS Attacks
DDoS attacks have become an annoyance most companies assume they may have to deal with at some point.
more → Security Boulevard, Tuesday, October 22nd, 2024
Best Cybersecurity Metrics To Use In The Boardroom
As the cost and frequency of cyber events grow, technologies evolve, and regulatory bodies enact stricter cybersecurity laws on the market, it's become exceedingly clear that elevating cyber matters to the boardroom is a strategic imperative.
more → Security Boulevard, Tuesday, October 22nd, 2024
Elevating SaaS Security: The Strategic Role Of Bug Bounty Programs
For engineers and security professionals working within SaaS environments, the standard suite of security tools-firewalls, IDS/IPS, SIEMs, WAFs, endpoint protection and secure development practices-forms the backbone of any security architecture.
more → Security Boulevard, Tuesday, October 22nd, 2024
Identity Revolution: Welcome To The Dynamic World Of IAM 360
For too long, Identity and Access Management (IAM) has played a background role-a fundamental but 'invisible' part of digital transformation. That's why I'm so excited to present IAM 360-the magazine where IAM shifts from a behind-the-scenes function into a dynamic, forward-thinking conversation.
more → HelpNet Security, Monday, October 21st, 2024
Effective Strategies For Measuring And Testing Cyber Resilience
In this Help Net Security interview, Detective Superintendent Ian Kirby, CEO of the National Cyber Resilience Centre Group (NCRCG), discusses the emerging cyber threats and strategies organizations can use to increase cyber resilience.
more → Microsoft News, Monday, October 21st, 2024
Microsoft Digital Defense Report 2024
In the last year, the cyber threat landscape continued to become more dangerous and complex. The malign actors of the world are becoming better resourced and better prepared, with increasingly sophisticated tactics, techniques, and tools that challenge even the world's best cybersecurity defenders.
more →
Security Boulevard, Friday, October 18th, 2024
Get An Untrusted Security Advisor! Have Fun, Reduce Fail!
Many organizations are looking for trusted advisors, and this applies to our beloved domain of cyber/information security. If you look at LinkedIn, many consultants present themselves as trusted advisors to CISOs or their teams.
more → Security Boulevard, Friday, October 18th, 2024
Beyond Passwords: Advanced Api Authentication Strategies For Enhanced Security
Passwordless authentication for end users is taking the world by storm, offering organizations and individuals alike unprecedented security, user experience, and efficiency benefits. By all indications, the next generation of authentication for end users has finally arrived, sending the password the way of the dodo.
more → techradar.pro, Thursday, October 17th, 2024
Google Warns Attackers Are Getting Worryingly Good At Exploiting Zero-Days
Better detection tools have forced hackers to move faster
more → SC Media, Thursday, October 17th, 2024
Threat Actors Exploit Zero Days Within 5 Days, Says Google's Mandiant
In analyzing 138 actively exploited vulnerabilities in 2023, Google Mandiant reported Oct. 15 that 70% of them were zero-days, indicating that threat actors are getting much better at identifying vulnerabilities in software.
more → Nextgov/FCW, Thursday, October 17th, 2024
Mandiant Founder Calls Chinese Wiretap Hack Unsurprising
Telecommunications providers have always been an ideal espionage target for foreign adversaries, Kevin Mandia said in an interview.
more →
Security Boulevard, Thursday, October 17th, 2024
What is DORA (Digital Operational Resilience Act)?
The Digital Operational Resilience Act (DORA) is a significant regulation introduced by the European Union, set to take effect on 17 January 2025. While DORA is primarily designed to enhance the operational resilience of financial entities against ICT-related incidents, its impact extends far beyond financial institutions.
more → Security Boulevard, Thursday, October 17th, 2024
Largest DDoS Cloudflare Attack On Global Sectors Mitigated
As per recent media reports, Cloudflare has successfully disclosed the mitigation of a record-breaking distributed denial-of-service (DDoS) attack. The DDoS Cloudflare attack, at its peak, was 3.8 terabits per seconds (Tbps) and had a duration of around 65 seconds. In this article, we'll dive into the details of the attack and determine how it was successfully mitigated. Let's begin!
more → Security Boulevard, Thursday, October 17th, 2024
Executive Perspectives, Episode 2, Michelle Faylo
Axio CEO, Scott Kannry recently sat down with Michelle Faylo, US Cyber & Technology Leader of Lockton in our executive perspectives podcast. In each episode, we interview the world's top
more → The Futurum Group, Thursday, October 17th, 2024
Elastic's 2024 Global Threat Report Reveals Key Cybersecurity Trends
Elastic Security Labs' 2024 Global Threat Report details significant trends in the cybersecurity landscape, focusing on the misuse of offensive security tools, cloud security vulnerabilities, and increasing credential access attacks
more →
Security Boulevard, Wednesday, October 16th, 2024
Everything You Need To Know About NIST Security Compliance
National Institute of Standards and Technology (NIST) security standards have become a core competency for organizations aiming to strengthen their cybersecurity posture.
more → IT Security Guru, Tuesday, October 15th, 2024
Secure By Design: The (Necessary) Future Of Hardware And Software
ICE 2024: Leading figures discussed why secure by design is not only necessary, but absolutely imperative in today's complex connected world
more →