The Wayback Machine - https://web.archive.org/web/20200513175608/https://securityboulevard.com/security-bloggers-network/

Security Bloggers Network

Weekly Top 10

Latest Posts

Consider Cybersecurity topics, authors and tags that you are interested in when trying to search. You can also enter your own custom search criteria. You can also select a topic or syndication source below to filter all the blog posts.

New U.S. Electronic Warfare Platform
| Bruce Schneier
The Army is developing a new electronic warfare pod capable of being put on drones and on trucks. ...the Silent Crow pod is now the leading contender for the flying flagship of the Army's rebuilt electronic warfare force. Army EW was largely disbanded after the Cold War, except for short-range jammers to shut down remote-controlled ...
Read More
|
Schneier on Security
Survey: Nearly Two-Thirds of Orgs Have Experienced COVID-19 Related Attacks
| Ray Lapena
This new world is putting a strain on organizations’ digital security defenses. First, malicious actors are increasingly leveraging coronavirus 2019 (COVID-19) as a theme to target organizations and to prey upon the fears of their employees. Our weekly COVID-19 scam roundups have made this reality clear. Second, organizations are working to mitigate the risks associated ...
Read More
|
The State of Security
New Language? No Problem. New Ecosystems in Nexus Lifecycle and Nexus Firewall
| Alyssa Shames
A few months ago we announced some exciting ecosystem updates to Nexus Lifecycle. Today, I’m happy to expand upon that with the news of even more ecosystem coverage added to Nexus Lifecycle, as well as some new additions to Nexus Firewall. These new ecosystems bring Nexus Lifecycle and Nexus Firewall coverage to more than 35 ...
Read More
|
Sonatype Blog
Imperva Cloud WAF Customers Can Easily Integrate Advanced Bot Protection for Increased Security
| Julia Wiltshire
Almost 25% of web traffic is bad bots, and only growing both in volume and sophistication. This information and more is available in Imperva’s annual Bad Bot Report 2020. What are bad bots? They are not benign. Bad bots plague websites, mobile applications, and APIs with the goal of high-speed and difficult-to-detect abuse, fraud, and ...
Read More
|
Blog
ManagedMethods Named a Finalist in Two Categories of The EdTech Awards 2020
| Jake Kasowski
BOULDER, Colo.—May 13, 2020—ManagedMethods, a leading Google G Suite and Microsoft 365 cybersecurity and student safety platform for K-12 school districts, today announced it has been named a finalist in two categories of The EdTech Awards 2020 by EdTech Digest. ManagedMethods is recognized as a finalist in the Security Solution category of The EdTech Cool ...
Read More
|
ManagedMethods
Protecting Remote Connectivity in Today’s ‘New Normal’
| Chris Palmer
Any negative impacts to the availability of remote access technologies have moved from the realm of “inconvenience” to “business/service-impacting outage.” The post Protecting Remote Connectivity in Today’s ‘New Normal’ appeared first on Radware Blog ...
Read More
|
Radware Blog
Tech and Social Media Companies Risk Losing $32.2 Billion Following a Major Data Breach
| Alina Bizga
Data breaches have turned into an unfortunate reality for companies around the world, accounting for more than 50% percent of all security incidents reported in 2019 ...
Read More
|
Business Insights In Virtualization and Cloud Security
MY TAKE: COVID-19 cements the leadership role CISOs must take to secure company networks
| bacohido
Chief Information Security Officers were already on the hot seat well before the COVID-19 global pandemic hit, and they are even more so today.Related: Why U.S. cybersecurity policy needs to match societal valuesCISOs must preserve and protect their … (more…) ...
Read More
|
The Last Watchdog
WordPress Two-Factor Authentication (2FA): what is it & using it on your site
| Robert Abela
The security of your WordPress website depends on the systems you put in place to protect it and harden its security. With the sharp increase of automated password guessing, your users’ sensitive information and access to your site are more at risk than ever. This is why it’s so important to protect your WordPress site ...
Read More
|
WP White Security
The Importance of Protecting the Right Data
| Jamie Manuel
Compliance regulations are putting tighter controls on protecting data. What do companies need to know? Regardless of size and shape, all organizations face similar challenges when it comes to storing and safeguarding business-critical data. This task is getting tougher, especially as regulations and compliance issues are becoming more impactful—while at the same time the amount ...
Read More
|
Security Boulevard
How to secure your organization and its rapidly expanding remote workforce
| cindy-provin
How to secure your organization and its rapidly expanding remote workforce cindy-provin Tue, 05/12/2020 - 22:20 Telecommuting has been on the rise for years. The number of remote workers in the U.S. increased 159% between 2005 and 2017. Earlier this year, seven million people in the U.S. – or 3.4% of the population – worked ...
Read More
|
Drupal blog posts
I, CyBOK – An Introduction to the Cyber Security Body of Knowledge Project
| Tripwire Guest Authors
The Cyber Security Body of Knowledge project or CyBOK is a collaborative initiative mobilised in 2017 with an aspiration to “codify the foundational and generally recognized knowledge on Cyber Security.” Version 1.0 of the published output of this consultative exercise was quietly released last year and then more publicly launched in January 2020. Yet, this ...
Read More
|
The State of Security
Y’all should be using Critical Thinking in the Workplace!
| pts-alex
Regardless of the situation, we’ve all had the same thought; was there something I could have done differently? How could I have been more prepared? What can I do better next time? The answer is simple; critical thinking. The post Y’all should be using Critical Thinking in the Workplace! appeared first on Phoenix TS ...
Read More
|
Blog – Phoenix TS
Microsoft Patch Tuesday, May 2020 Edition
| BrianKrebs
Microsoft today issued software updates to plug at least 111 security holes in Windows and Windows-based programs. None of the vulnerabilities were labeled as being publicly exploited or detailed prior to today, but as always if you're running Windows on any of your machines it's time once again to prepare to get your patches on ...
Read More
|
Krebs on Security
Enabling Developer-Friendly Security in Kubernetes for GitOps
| Arun Balakrishnan
This blog is co-authored by Prabhu Subramanian, Lead Architect at ShiftLeft, and Seth Mason, Product Manager at D2iQDevOps. GitOps. DevSecOps. Developers are doing more builds of microservices, and therefore have more surface area prone to security threats. Rather than blindly throwing processes at the problems, you should be increasing the automation of these processes to ...
Read More
|
ShiftLeft Blog - Medium
Reduce IT Costs Through JumpCloud
| Zach DeMeyer
Do you need to consolidate your IT budget costs? Consider leveraging a cloud directory service; see if one will solve your needs for free here. The post Reduce IT Costs Through JumpCloud appeared first on JumpCloud ...
Read More
|
Blog – JumpCloud
Remembering WannaCry | Avast
| Avast Blog
Exactly three years ago, a scourge known as WannaCry ransomware began its global spread. For Avast researchers, May 12, 2017 started like a typical Friday until Avast Antivirus blocked 2,000 users from ransomware attacks at 8am. Within the next hour, another 6,000 Avast users were blocked from the same kind of ransomware. The next hour, ...
Read More
|
Blog | Avast EN
VERT Threat Alert: May 2020 Patch Tuesday Analysis
| Tyler Reguly
Today’s VERT Alert addresses Microsoft’s May 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-884 on Wednesday, May 13th. In-The-Wild & Disclosed CVEs None of the vulnerabilities resolved this month have been publicly disclosed or exploited according to Microsoft. CVE Breakdown by Tag While historical Microsoft Security ...
Read More
|
The State of Security
May 2020 Patch Tuesday – 111 Vulns, 16 Critical, SharePoint, VS Code, Adobe Patches
| Jimmy Graham
Continuing the trend of large Microsoft Patch Tuesdays, this month’s addresses 111 vulnerabilities with 16 of them labeled as Critical. The 16 Critical vulnerabilities cover SharePoint, Browsers, Scripting Engines, Media Foundation, Microsoft Graphics, Microsoft Color Management, and the VS Code Python Extension. Adobe released patches today for Acrobat/Reader, and DNG SDK. Workstation Patches The Browser, ...
Read More
|
The Laws of Vulnerabilities – Qualys Blog
Veracode’s Leslie Bois and Robin Montague Earn Recognition on CRN 2020 Women of the Channel List
| hgoslin@veracode.com (hgoslin)
Leslie Bois, Veracode???s Vice President of Global Channels and Alliances, and Robin Montague, Veracode's National Partner Director, have been recognized on the esteemed CRNﾂ?2020 Women of the Channel list. The annual list recognizes a select group of high-achieving women for their contributions to channel advocacy, growth, thought leadership, and dedication to the IT channel. Leslie ...
Read More
|
Application Security Research, News, and Education Blog
YouTube Account Recovery Phishing
| Luke Leal
Phishing attacks against targeted channels have been successful in the past, as explained last year on ZDNet. Recently, our Remediation team found an interesting phishing page following a similar pattern that was targeting YouTube creators. Phishing Behavior The phishing campaign, which was initially discovered on a compromised WordPress website, is made up of two pages ...
Read More
|
Sucuri Blog
BSides Knoxville 2020, Adam Compton’s ‘A Hillbilly’s Guide To Staying Anonymous Online’
| Marc Handelman
Many thanks to BSides Knoxville for publishing their outstanding conference stream (and separate videos) on YouTube, and held for free due to the pandemic SARS-CoV-2, and it's resulting illness COVID-19. Pay close attention, Ladies and Gentlemen, Girls and Boys - you might learn something from the denizens of Scruffy Town ...
Read More
|
Infosecurity.US
Your Zero Trust Strategy Depends on Active Directory Integrity
| Sean Deuby
The exponential increase in remote work caused by the COVID-19 crisis has ricocheted across the IT landscape. Within a matter of days, corporate IT faced an unprecedented 180-degree turn in its client networking model. Organizations that treated remote work as a rare exception suddenly found themselves almost entirely remote. According to JPMorgan, Zoom usage is ...
Read More
|
Semperis
Public Health and Misinformation During COVID-19
| Tali
A slew of misinformation has accompanied the COVID-19 pandemic. False claims about how the virus spreads, how it can be prevented and steps that governments are taking have been making their way across the internet. Stopping this spread of misinformation is no easy task when it’s shared rapidly across social media sites and through forwards ...
Read More
|
Vaporstream
One Tool to Rule Them All
| Ruchika Mishra
If you were to take a 10,000 ft view of your organization’s current security posture, would you see Figure A or Figure B? ...
Read More
|
Balbix Blog
Mayhem Moves to Production with the Department of Defense
| David Brumley
In 2016, Mayhem -- then still a research prototype -- showed that fully autonomous cybersecurity was possible. This was just the first step ...
Read More
|
ForAllSecure Blog
Custom Kubernetes Controls with Open Policy Agent (OPA) – Part 2
| The Container Security Blog on StackRox
In Part 1 of this series on the Open Policy Agent (OPA), we gave a brief rundown of why you might want to use the OPA Gatekeeper controller for policy enforcement in your Kubernetes clusters. We also gave a few examples of OPA’s query language, Rego, and of the Kubernetes Custom Resource Definitions (CRDs) that ...
Read More
|
The Container Security Blog on StackRox
XKCD ‘Coronavirus Polling’
| Marc Handelman
View fullsize via the comic delivery system monikered Randall Munroe at XKCD! Permalink ...
Read More
|
Infosecurity.US
Bsides Nova 2020 – Chris Kubecka’s, JC Vega’s And Hise Gibson’s ‘Lessons From The War Zone To The Cyber Trenches: What Leaders Need To Know’
| Marc Handelman
Many thanks to BSidesNoVA 2020 for publishing their superlative conference videos on YouTube. Permalink ...
Read More
|
Infosecurity.US
Tips For The Tech-challenged Mature Demographic | Avast
| Avast Blog
Many of us are worried about our elders. It’s incredibly important that we protect them from the dangers of the COVID-19 virus, but as weeks stretch into months, we also need to keep loneliness and depression at bay until we can be together with them. Technology can provide a valuable resource to help our elderly ...
Read More
|
Blog | Avast EN
Australian Transport Company Hit with Nefilim Ransomware Months after a Maito Ransomware Attack
| Silviu STAHIE
Toll, a large Australian transportation company, was hit with a new ransomware attack, only three months after a previous incident. This time, the malware is named Nefilim, and attackers also stole data from the affected servers. The first attack, which crippled the transportation company, took place on January 31. It took the firm months to ...
Read More
|
HOTforSecurity
Thunderspy Attack Affects all Computers with Thunderbolt Released in the Past Decade
| Silviu STAHIE
A slew of seven vulnerabilities identified in the Thunderbolt port allow an attacker with physical access to the device to bypass all security, no matter the platform. It affects all laptops and computers built since 2011. The vulnerabilities, known collectively as ThunderSpy, were identified by security researcher Björn Ruytenberg, an MSc student in Computer Science ...
Read More
|
HOTforSecurity
4 GDPR Violations that Multiple Companies have been Fined for
| Dan Simmons
In a previous post, we looked at the highest GDPR fines to date. We thought it would be interesting to show what instigates fines like these, so now let's explore some common GDPR violations that have already zapped organizations. We looked at the effect, so now let’s look at the causes. Why focus on these ...
Read More
|
comforte Insights
Azure AD Without RADIUS
| Kayla Coco-Stotts
Azure AD doesn’t natively provide RADIUS authentication, but IT teams can troubleshoot this issue by integrating it with a directory service that does. The post Azure AD Without RADIUS appeared first on JumpCloud ...
Read More
|
Blog – JumpCloud
Ask the Expert: Cyber Risk and SecOps, Part 1
| Meaghan O'brien
Kirk Hogan, Chief Innovation Officer at Iceberg Networks sits down with us to answer the top questions we hear from businesses about cyber risk and security operations. Kirk discusses what CISO’s and security leaders are telling us they’re most challenged with, how to put cyber threats into a business context and what companies who are[…] ...
Read More
|
Risk Intelligence Academy – Iceberg Networks
Security Effort does not Equal Security Effectiveness: 3 Stats Every CEO Should be Asking Their CISOs About NOW by Major General Earl Matthews USAF (Ret)
| Verodin Blog
Without the right tools and resources to continuously measure and monitor controls, security professionals simply do not have the quantitative evidence to know where they have security gaps ...
Read More
|
Verodin Blog
COVID-19 Best Practices for Public Clouds
| Radware
This report combines 56 misconfiguration rules for AWS/Azure and focuses on public exposures, excessive permissions, authentication and visibility. The post COVID-19 Best Practices for Public Clouds appeared first on Radware Blog ...
Read More
|
Radware Blog
Building a Cyber Security Strategy & Plan As a New CISO
| Ted Milewicz
As a CISO, your cyber security strategy plan drives data protection for the organization across every aspect of business processes including new hires and onboarding. It’s not uncommon for an organization to have an HR step where the hiring manager requests network account credentials and permissions for a new employee. Without the right procedures in ...
Read More
|
Blog – Hysolate
DivvyCloud by Rapid7 Announces New Infrastructure as Code Security Capability
| Jackie Fekeci
Feature empowers enterprises to take a preventive approach to cloud security by shifting left ARLINGTON, Va. May 12, 2020–DivvyCloud by Rapid7, the leading cloud security platform, today released a new core capability, Infrastructure as Code (IaC) Security. This capability integrates cloud … Read more The post DivvyCloud by Rapid7 Announces New Infrastructure as Code Security ...
Read More
|
DivvyCloud
Personal Information of 3.6 Million MobiFriends is Up for Grabs, Free Download Included
| Alina Bizga
Following a data breach incident from January 2019, the personal information of more than 3.6 million MobiFriends users is now up for grabs on multiple online forums. While the stolen data was initially posted for sale on a dark web forum by alleged bad actor ‘DonLuji’, the data dump has become fully accessible to anyone ...
Read More
|
HOTforSecurity
Real Talk: What Users Really Look For in a Software Composition Analysis (SCA) Solution
| Alyssa Shames
A few weeks ago, we wrote about the differences in SCA and SAST tools. While you can’t really compare the two, for most organizations, software composition analysis (SCA) is likely the best place to start. We also mentioned if you do choose to invest in SCA, you should select a best-of-breed offering that provides end-to-end ...
Read More
|
Sonatype Blog
5 key takeaways from the 2020 Open Source Security and Risk Analysis report
| Fred Bals
Our analysis of 1,250+ codebases reveals trends in open source use, security, and license compliance that affect development, security, and legal teams. The post 5 key takeaways from the 2020 Open Source Security and Risk Analysis report appeared first on Software Integrity Blog ...
Read More
|
Software Integrity Blog
Critical security concerns facing the technology industry
| Susan Morrow
Executive summary Of the top five most valuable brands in North America in 2019, four were information technology companies. Information technology has provided a backbone of innovation that is... Go on to the site to read the full article ...
Read More
|
Infosec Resources
NSA guidance to teleworkers: rely on end-to-end encryption
| Orlee Berlove
The work-from-home shift driven by the Covid-19 crisis has opened the door to a fresh round of cyber attacks. With so many government, military, and private sector employees working from home and using VPNs or remote desktops, the incidence of attacks has increased significantly. In an effort to improve government and military teleworkers’ cyber hygiene, ...
Read More
|
Blog – PreVeil
Security first: Compliance by design
| Karen Walsh
Introduction Whether it’s the General Data Protection Regulation (GDPR) or the New York Stop Hacks and Improve Electronic Data Security Act (NY SHIELD), nearly every regulation or industry standard... Go on to the site to read the full article ...
Read More
|
Infosec Resources
4 Ways Privileged Access Management Secures Remote Workers
| Corey O'Connor
Employees around the world are working hard to remain productive, but, as the mantra taking hold of the internet goes, “People are not working from home; they are at home during a crisis trying to ...
Read More
|
CyberArk
Securing the rise of RPA
| Cybersecurity Matters
When it came to their transformation efforts, enterprises went all in last year, and they’re going to remain all in throughout 2020. A central aspect of any successful business transformation is automation and, increasingly, robotic process automation. RPA, or software bots, helps to automate everything from repetitive business process tasks to cloud infrastructure management functions ...
Read More
|
Cybersecurity Matters – DXC Blogs
How can you prevent insider threats when none of your insiders are actually “inside”?
| Chris Smith
Security teams can be so focused on blocking cyber attacks from outside that they turn a blind eye to potential threats within their own organizations. In fact, 34% of all breaches are caused by insider threats. Insider threats are uniquely difficult to defend against because insiders inherently require an elevated level of trust and access ...
Read More
|
Thycotic
Katie McCroskey, Kara Trovato and Becca Stucky of Thycotic Named to CRN’s 2020 Women of the Channel
| Kali Linette
Washington D.C., May 12, 2020 — Thycotic, a provider of privileged access management (PAM) solutions for more than 10,000 organizations worldwide, including 25 of the Fortune 100, announced today that CRN®, a brand of The Channel Company, has named Katie McCroskey, Kara Trovato and Becca Stucky to its esteemed 2020 Women of the Channel list.… ...
Read More
|
Thycotic
How to Protect Applications from Cloud-Based Attacks
| Radware
Radware & Microsoft discuss the primary security threats to public cloud infrastructure and applications during the COVID-19 pandemic. The post How to Protect Applications from Cloud-Based Attacks appeared first on Radware Blog ...
Read More
|
Radware Blog