Category: Security Boulevard

Build Vs. Buy: The Unknown Unknowns of FIDO-Based Passkeys

There are many unknown unknowns associated with building a FIDO-based passkey solution versus adopting off-the-shelf solutions. The post Build Vs. Buy: The Unknown Unknowns of FIDO-Based Passkeys appeared first on Security Boulevard. This article has been indexed from Security Boulevard…

Coin Flips Are Biased

Experimental result: Many people have flipped coins but few have stopped to ponder the statistical and physical intricacies of the process. In a preregistered study we collected 350,757 coin flips to test the counterintuitive prediction from a physics model of…

Safeguarding Your Business From Social Media Risks

Social media is the avenue to foster connections, nurture relationships, and amplify your brand’s voice across a global digital stage. Yet, like any powerful digital tool, it carries its risks. Don’t mistake this blog for a call to retreat into…

Educating the Next Cybersecurity Generation with Tib3rius

In this episode we explore the remarkable journey of Tib3rius, a web application hacking expert and content creator. In this engaging conversation, we discuss: Tib3rius’ passion for community education and content creation. What fuels his desire to empower the next…

Where Next for States on All Things IT and Security?

The 2023 NASCIO Annual Conference wrapped up this past week in Minneapolis. Here’s a quick roundup of what happened and what’s next for state IT and cybersecurity. The post Where Next for States on All Things IT and Security? appeared…

How to Use MITRE ATT&CK in 2023: A Must-Read Guide

Introduction In 2023, cybersecurity remains a pressing concern for businesses big and small. At the heart of this ever-evolving landscape is the MITRE ATT&CK framework. Designed to arm IT professionals with actionable insights, this framework is more relevant than ever.…

Managing a World-Class Security Program in a Recession

As signs of a global recession continue to pile up, many businesses are tightening their spending across the board. Though cybersecurity remains a critical concern for virtually every type of organization, even security leaders may need to watch their spending—while…

Meet Ekran System at the Luxembourg Internet Days

Ekran System announces its participation in the Luxembourg Internet Days. The event will take place in the Luxembourg Chamber of Commerce, November 7–8, 2023. The Luxembourg Internet Days will convene over a thousand IT, OT, and ICT professionals. This year’s…

FIM Beyond Breaches: Compliance and Trust

More than just breach mitigation – File integrity monitoring (FIM) is trust and compliance  Every day, we see an ever-escalating array of cyber threats. As organizations race to safeguard their digital assets, the spotlight isn’t just on preventing breaches but…

What IT Orgs Need to Know About the Growth of AI

Discover how the growth of AI impacts IT organizations — the GOOD (improved detections), the BAD (phishing, social engineering), & the UGLY (WormGPT, FraudGPT). The post What IT Orgs Need to Know About the Growth of AI first appeared on…

Insights from CISA’s Study on CDR

Author: Eric Avigdor, VP of Product Management, Votiro Malware transmitted via email has been a persistent plague to organizations for decades. Every organization has email, and sending emails with toxic payloads requires little infrastructure or effort, making it an attracti…

Brand Impersonation Attacks: Which Industries are Most at Risk?

In late 2022, American Express was at the center of a brand impersonation attack. The attackers impersonated this well-known financial services brand to attempt to steal confidential information from victims at a nonprofit organization. The brand impersonation attack started with…

Making Sense of the 2023 Ransomware Landscape

Understanding the current ransomware landscape is the first step to helping defenders protect their organizations. The post Making Sense of the 2023 Ransomware Landscape appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original…

SCR File Execution Using Rundll32 – Security Spotlight

The “Security Spotlight” blog series provides insight into emerging cyberthreats and shares tips for how you can leverage LogRhythm’s security tools, services, and out-of-the-box content to defend against attacks.  In this Security Spotlight, we’ll be talking about the execution……

CVE-2023-38545 Curl Vulnerability Details Finally Released

On October 5, 2023, we released a blog post discussing the Curl Vulnerability, the critical security issue in Curl and libcurl version 8.4.0, known as CVE-2023-38545. In addition, there was another low-severity vulnerability, CVE-2023-38546. These vulnerabilities were scheduled to be…

GNOME Libcue Flaw is a Risk to Linux Systems

Security researchers say a flaw in a relatively obscure component of the popular GNOME desktop environment for Linux could allow bad actors to gain control of the system if exploited. The remote code execution (RCE) vulnerability is in libcue, a…

Box Allies With CrowdStrike to Better Secure Files

A Box, Inc. and CrowdStrike alliance will make tools available to secure files and data shared via Box’s cloud service. The post Box Allies With CrowdStrike to Better Secure Files appeared first on Security Boulevard. This article has been indexed…

Huge DNA PII Leak: 23andMe Must Share the Blame

DNA: Do Not Agree. 23andMe says it’s not a breach—just credential stuffing. I’m not so sure. The post Huge DNA PII Leak: 23andMe Must Share the Blame appeared first on Security Boulevard. This article has been indexed from Security Boulevard…

How Process Automation Can Help Streamline Security

Process automation is one of the most effective strategies businesses can use to enforce a security-centric culture. The post How Process Automation Can Help Streamline Security appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read…

AI More Helpful Than Harmful in Cybersecurity

The majority of of IT security managers see the use of AI in security tools as helpful rather than a threat they must defend against. The post AI More Helpful Than Harmful in Cybersecurity appeared first on Security Boulevard. This…

Insider Risk Digest: Week 39-40

This Article Insider Risk Digest: Week 39-40 was first published on Signpost Six. | https://www.signpostsix.com/ Insider Highlights: Every two weeks, we bring you a round-up of the cases and stories that caught our attention in the realm of insider risk.…

Improve productivity by slowing down your email

Manage teams better by delaying your email! Improve productivity by slowing down your email. Email programs increasingly include the ability to schedule your emails. You can choose when they are sent – in the future, not the past. (They’re not……

Granular Permission Control: Do Organizations Need it?

The modern workplace is constantly evolving, with organizations of all sizes needing to keep up with the ever-changing landscape. One essential part of ensuring a secure working environment is having the right permission control in place.  Fine-grained permission control is…

SaaS Security in Healthcare: What You Need to Know

The migration to SaaS has resulted in the distribution of valuable data across a number of highly decentralized cloud applications. While the security impact of this shift can be felt across all sectors, it weighs particularly heavily on healthcare—an industry…

Why Risk-Based Authentication Is Essential to a Zero Trust Strategy

Today’s evolving and expanding threat landscape has rendered traditional security measures inadequate for safeguarding sensitive data and systems. Organizations grapple with elevated risks as malicious actors continuously devise new ways to circumvent standard security protocols and exploit vulnerabilities. Additionally, the…

ProtectAI Adds Three Tools to Secure AI Models

Protect AI this week has added three open source tools to detect threats to artificial intelligence (AI) models. The post ProtectAI Adds Three Tools to Secure AI Models appeared first on Security Boulevard. This article has been indexed from Security…

Everything You Need to Know About 5G Security

It’s no secret that the arrival of 5G technology will usher in a new wave… The post Everything You Need to Know About 5G Security appeared first on Entrust Blog. The post Everything You Need to Know About 5G Security…

iPhone/iPad Warning: Update Now to Avoid Zero-Day Pain

Apple’s embarrassing regression: iOS 17.0.3 fixes yet more nasty zero-days (and the overheating bug). The post iPhone/iPad Warning: Update Now to Avoid Zero-Day Pain appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original…

Generative AI: Cybersecurity’s Ally or Adversary?

While generative AI offers significant benefits, security professionals must remain vigilant to effectively use the tech for cybersecurity. The post Generative AI: Cybersecurity’s Ally or Adversary? appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read…

AI Poses Challenges, Opportunities for IT Security Leaders

Organizations are keen to deploy AI for new revenue growth and productivity initiatives, but threat actors are also ramping up on generative AI-powered attacks. The post AI Poses Challenges, Opportunities for IT Security Leaders appeared first on Security Boulevard. This…

Unseen Costs of Ignoring Cyber Security for Small Business

Cyber attacks pose a significant threat to all businesses, with small businesses being especially valuable. Financially unprepared small firms may suffer significant losses and harm to their reputation, pricing strategy, productivity, staff morale, and other factors in the case of…

Unlocking MDM for Small Business: What you need to know

Introduction Navigating the maze of device management is a common challenge for small businesses. With a diverse range of devices—smartphones, tablets, laptops—each with its own set of applications and security settings, the task becomes increasingly complex. This is where Mobile…

Welcome Wes Wright: Another Great Day at Ordr

Ordr welcomes Wes Wright as our new Chief Healthcare Officer with immense pleasure and pride. Wes’s distinguished military background, extensive expertise in healthcare, and unwavering commitment to patient safety make him an invaluable addition to our organization. Wes’s appointment reflects…

How Healthcare Threats Are Going Low

When it comes to IT and cybersecurity, few industries can compare to Healthcare. A diverse fleet of high-value devices, supporting mission-critical systems, and carrying highly sensitive and regulated data are all just table stakes for most healthcare security teams.  And…

Biometric Authentication for Digital Identity Protection

Identity-based authentication that uses biometrics is a more reliable solution to identity and access management. The post Biometric Authentication for Digital Identity Protection appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article:…

Insider Identity Risk to Cloud Security

Identity plays a major role in cloud security and can open the door for serious cybersecurity problems from the inside. The post Insider Identity Risk to Cloud Security appeared first on Security Boulevard. This article has been indexed from Security…

IBM Unfurls AI-Powered Managed Threat Detection and Response

IBM today added managed threat detection and response services that leverage artificial intelligence (AI) to identify and thwart cyberattacks. The post IBM Unfurls AI-Powered Managed Threat Detection and Response appeared first on Security Boulevard. This article has been indexed from…

Security Spotlight: Monitoring Virtual Network Computing

The “Security Spotlight” blog series provides insight into emerging cyberthreats and shares tips for how you can leverage LogRhythm’s security tools, services, and out-of-the-box content to defend against attacks. In this Security Spotlight, we’ll be talking about monitoring Virtual Network……

Preventing fraud in the iGaming industry

Discover why fraud prevention is vital for iGaming success, and how to protect your business and players. The post Preventing fraud in the iGaming industry appeared first on Sift Blog. The post Preventing fraud in the iGaming industry appeared first…

Play the Password Game!

A clever person has hosted a Password Game. Give it a try! The post Play the Password Game! appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article: Play the Password Game!

Gartner® Hype Cycle™ for Endpoint Security, 2023

Security Operations leaders must balance increased visibility, better prioritization of risks, and a focus on business outcomes. The post Gartner® Hype Cycle™ for Endpoint Security, 2023 appeared first on SafeBreach. The post Gartner® Hype Cycle™ for Endpoint Security, 2023 appeared…

Automated Incident Response with Rapid7 and Smart SOAR

Integration between platforms has become a necessity rather than a nice-to-have. Smart SOAR offers a single platform to act as the connective tissue between siloed point solutions that do not natively integrate with each other. Specifically, the collaboration between Smart…

Gartner® Hype Cycle™ for Endpoint Security, 2023

Security Operations leaders must balance increased visibility, better prioritization of risks, and a focus on business outcomes. The post Gartner® Hype Cycle™ for Endpoint Security, 2023 appeared first on SafeBreach. The post Gartner® Hype Cycle™ for Endpoint Security, 2023 appeared…