Security Boulevard (Original)
Chainguard Unveils Memory-Safe Linux Distribution
Chainguard this week made available a memory-safe distribution of Linux, dubbed Wolfi, that promises to eliminate the root cause of the bulk of known software vulnerabilities. In addition, Chainguard has partnered with ...
‘Hive’ Russian Ransomware Gang Shut Down by FBI, DoJ, Europol, Bundeskriminalamt, et al
Law enforcement agencies from several countries got together and took down the site. They also worked to decrypt victims’ data ...
Securing Against Supply Chain Attacks
Anyone who has been in IT for the last decade knows the risks posed by ransomware and cyberattacks. They have been on our radar as a top concern for many years. But ...
FTC Proposes Eliminating Non-Compete Clauses
The Federal Trade Commission (FTC) chair, Lina M. Khan, recently announced the commission’s intent to adjust a rule that would prohibit non-compete agreements by workers or independent contractors. Their rationale? Unfair competition—which, ...
More Details of LastPass Breach: Hackers Used Stolen Encryption Key
A breach at LastPass is the gift that keeps on giving—or taking, depending on your perspective. LastPass parent company GoTo raised the alarm this week that, in addition to stealing encrypted backups ...
RIP Perimeter Security: Critical Infrastructure Breaches Demand New Approach
The ongoing spate of breaches against critical infrastructure and government entities underscores the vulnerability of this sector. In July 2022, officials announced the federal court system had experienced a major data breach ...
New Ransomware Payment Reporting Requirements on Horizon
January 9, 2023, was the deadline for financial services companies doing business in New York (including cryptocurrency entities with a Bit license) to comment on new proposed cybersecurity regulations which would mandate, ...
Manual Vs. SSPM: Streamlining SaaS Security Management
An interesting trend is unfolding in companies around the globe: They are investing in a growing number of SaaS apps to support day-to-day operations but then putting themselves in an extremely precarious ...
Skyhawk Security Adds Runtime Protection to Cloud Security Portfolio
Skyhawk Security this week added a runtime protection capability to its integrated cloud security portfolio. Skyhawk Security CEO Chen Burshan said the Synthesis Security Platform brings a cloud threat detection and response ...
PayPal Credential Stuffing Attacks Renew Calls for MFA
An internal review confirmed that on December 20, 2022, unauthorized parties could use account holders’ login credentials to access their PayPal accounts. In response to what is being called a credential stuffing ...
