Authors/Presenters: HexRabbit Chen
Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.
The post DEF CON 32 – Clash, Burn And Exploit Manipulate Filters To Pwn kernelCTF appeared first on Security Boulevard.
As we wrap up 2024, two new reports suggest that Europe and leading African nations share many of the same cyber threats and potential cybersecurity solutions as their U.S. counterparts.
The post From Europe to South Africa: Where Is the World on Cyber Defense? appeared first on Security Boulevard.
Why is Machine Identity Management Crucial? In the ever-evolving field of cybersecurity, one critical element often overlooked is machine identity management. Even though humans interact with machines daily, the importance of securing machine identities — often referred to as Non-Human Identities (NHIs) — is hardly recognized. So, why should organizations place a high priority on […]
The post Best Practices for Machine Identity Management appeared first on Entro.
The post Best Practices for Machine Identity Management appeared first on Security Boulevard.
Why is Machine Identity Management Essential in Today’s Cybersecurity Landscape? Machine Identity Management has become a crucial element in today’s cybersecurity landscape. As organizations increasingly rely on cloud environments, the need to manage Non-Human Identities (NHIs) and their secrets has risen significantly. NHIs, or machine identities used in cybersecurity, are a combination of a “Secret” […]
The post Best Practices for Machine Identity Management appeared first on Entro.
The post Best Practices for Machine Identity Management appeared first on Security Boulevard.
Why is Privileged Access Management (PAM) a Game-Changer in Cybersecurity? Have you ever wondered how to shore up your organization’s cybersecurity, minimize insider threats, and increase efficiency? The answer lies in mastering the art of Privileged Access Management or PAM. With a growing focus on non-human identities (NHIs) and secrets security management in recent years, […]
The post Mastering PAM to Guard Against Insider Threats appeared first on Entro.
The post Mastering PAM to Guard Against Insider Threats appeared first on Security Boulevard.
How can Secrets Rotation Enhance Data Security? Most of us are well aware of the essential role that cybersecurity plays in safeguarding our sensitive information. But have you ever pondered about the importance of Non-Human Identity (NHI) management and secrets rotation in enhancing your data security? NHIs – the machine identities used in cybersecurity – […]
The post Enhancing Data Security with Advanced Secrets Rotation appeared first on Entro.
The post Enhancing Data Security with Advanced Secrets Rotation appeared first on Security Boulevard.
Explore the key features of Qualys DAST, its web application security capabilities, potential limitations, and alternative DAST solutions.
The post Qualys DAST: Key Features and Alternatives appeared first on Security Boulevard.
On August 23, 1994, the United States Congress, by Public Law 103–308, 108 Statute 1169, designated December 7th of each year as National Pearl Harbor Remembrance Day. On November 29th, President Bill Clinton issued a proclamation declaring December 7th, 1994, the first National Pearl Harbor Remembrance Day. It became 36 U.S.C. § 129 (Patriotic and National Observances and Ceremonies) of the United States Code. On Pearl Harbor Day, our flag, Old Glory, should be flown at half-staff until sunset to honor those who died as a result of the attack on U.S. military forces in Hawaiʻi... - via
The post Lest We Forget: United States National Pearl Harbor Remembrance Day, In Memoriam: The 2,403 appeared first on Security Boulevard.
Fifteen years ago I blogged about a different SQUID. Here’s an update:
Fleeing drivers are a common problem for law enforcement. They just won’t stop unless persuaded—persuaded by bullets, barriers, spikes, or snares. Each option is risky business. Shooting up a fugitive’s car is one possibility. But what if children or hostages are in it? Lay down barriers, and the driver might swerve into a school bus. Spike his tires, and he might fishtail into a van—if the spikes stop him at all. Existing traps, made from elastic, may halt a Hyundai, but they’re no match for a Hummer. In addition, officers put themselves at risk of being run down while setting up the traps...
The post Friday Squid Blogging: Safe Quick Undercarriage Immobilization Device appeared first on Security Boulevard.
Are We Fully Aware of the Cybersecurity Threats We Face in the Cloud? In today’s interconnected world, maintaining a secure environment is paramount. The advent of the cloud has expanded the horizon of potential threats, as it has given rise to machine identities, known as non-human identities (NHIs), and their secrets. With organizations increasingly moving […]
The post Exploring the Future of Cloud-Native Security Solutions appeared first on Entro.
The post Exploring the Future of Cloud-Native Security Solutions appeared first on Security Boulevard.
Why is Secrets Vaulting Essential for Data Security? As organizations increasingly adopt cloud technology and automation across various industries, securing Non-Human Identities (NHIs) and their secrets has emerged as a crucial element in the cybersecurity landscape. However, can you recall the last time you questioned how securely your machine identities’ secrets are stored? Or wondered […]
The post How Secure Vaulting Keeps Your Secrets Safe appeared first on Entro.
The post How Secure Vaulting Keeps Your Secrets Safe appeared first on Security Boulevard.
Termite, an emerging ransomware group that launched its data leak site in late October and appears to be using a modified version of the Babuk malware, is claiming responsibility for the hack of giant SaaS provider Blue Yonder late last month that disrupted the operations of several corporations, including Starbucks.
The post Emerging Ransomware Group Termite Claims Attack on Blue Yonder appeared first on Security Boulevard.
The European Union’s updated Product Liability Directive (PLD) takes effect this month, with a transition period through December 9, 2026. This update substantially changes how product liability applies to digital products sold in the EU. For Chief Information Security Officers (CISOs), understanding this change is crucial. The new PLD extends liability to digital products, including...
The post Attention CISOs: The New EU PLD Product Liability Directive Is Effective Now – Compliance and Cybersecurity Readiness Required appeared first on Hyperproof.
The post Attention CISOs: The New EU PLD Product Liability Directive Is Effective Now – Compliance and Cybersecurity Readiness Required appeared first on Security Boulevard.
Authors/Presenters: Elonka Dunin, Klaus Schmeh
Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.
The post DEF CON 32 – Encrypted Newspaper Ads In The 19th Century appeared first on Security Boulevard.
via the inimitable Daniel Stori at Turnoff.US!!
The post Daniel Stori’s Turnoff.US: ‘Super Power’ appeared first on Security Boulevard.
Absolutely un-fabulous: Smells like Russia is responsible, but reality is a bit more complicated.
The post Stoli Vodka: Bankrupt After Ransomware Attack appeared first on Security Boulevard.
The cyber landscape is evolving rapidly with new opportunities and threats branching off of every new technological breakthrough. From operational resilience to leadership structures, the decisions IT leaders make today
Read MoreThe post 5 Cyber Risk Predictions That Will Define 2025 appeared first on Axio.
The post 5 Cyber Risk Predictions That Will Define 2025 appeared first on Security Boulevard.
Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.
The post DEF CON 32 – DC101 – Panel appeared first on Security Boulevard.
Discover the essentials of FIDO2 authentication implementation in this developer-focused guide. We'll walk you through the process step-by-step, covering key concepts, best practices, and code examples to help you integrate secure, passwordless login into your applications efficiently.
The post Implementing FIDO2 Authentication: A Developer’s Step-by-Step Guide appeared first on Security Boulevard.
Don’t miss the Linux Foundation’s deep dive into open source software security. Plus, cyber agencies warn about China-backed cyber espionage campaign targeting telecom data. Meanwhile, a study shows the weight of security considerations in generative AI projects. And get the latest on ransomware trends, financial cybercrime and critical infrastructure security.
Dive into six things that are top of mind for the week ending Dec. 6.
1 - Study: Security of open source software projects must improveImproperly secured developer accounts. Lack of a standard naming schema for software components. The persistence of legacy software.
Those three issues put the reliability and security of free and open source software (FOSS) at risk, a new Linux Foundation study has found.
Published this week, “Census III of Free and Open Source Software — Application Libraries” is based on about 12 million observations of FOSS at 10,000-plus companies. Its aim: to provide a better understanding of FOSS use and security challenges, given FOSS’ widespread adoption globally.
“Our goal is to not only provide an updated list of the most widely used FOSS, but to also provide an example of how the distributed nature of FOSS requires a multi-party effort to fully understand the value and security of the FOSS ecosystem,” the study reads.
Data sharing, coordination and investment are keys to preserving the value of FOSS, which has become critical for the digital economy, the authors wrote.
Here are more details about the three key security issues identified in the study:
For more information about open source security:
Security teams in charge of defending networks and communications infrastructure should take steps to prevent attacks from China-affiliated hackers that have recently compromised the networks of major global telecom providers.
So said cyber agencies from Australia, Canada, New Zealand and the U.S. this week in a joint document that offers network and communications-infrastructure engineers recommendations for strengthening network visibility and hardening systems.
The silver lining: The cyberattackers are exploiting known, existing weaknesses in their victims’ infrastructure. “No novel activity has been observed,” reads the publication, titled “Enhanced Visibility and Hardening Guidance for Communications Infrastructure.”
“Patching vulnerable devices and services, as well as generally securing environments, will reduce opportunities for intrusion and mitigate the actors’ activity,” the document adds.
These are some of the recommendations for defenders of networks and communications systems.
The joint document doesn’t name the hacking group. However, The Wall Street Journal identified it as Salt Typhoon when, citing anonymous sources, it reported in September that the group had breached several U.S. telecoms, including Verizon and AT&T.
Salt Typhoon’s main goal is reportedly to carry out cyber espionage activities on behalf of the Chinese government. Salt Typhoon’s cyber espionage campaign is “ongoing” and authorities feel there is still much to be discovered about it, a Cybersecurity and Infrastructure Security Agency (CISA) official told reporters this week.
“We cannot say with certainty that the adversary has been evicted,” CISA official Jeff Greene said during a press call, as quoted by Politico. According to NBC News, Greene also recommended that Americans use encrypted messaging apps to protect themselves from Salt Typhoon.
Last month, CISA and the FBI described the Chinese-government backed cyber espionage campaign as “broad and significant,” resulting in the theft of customer call records data; the compromise of private communications of government officials and politicians; and the copying of law enforcement information related to wiretap requests.
For more information about Salt Typhoon and its ongoing cyber espionage campaign:
As organizations deepen their generative AI use, security and data protection considerations feature prominently in their plans — including whether to build their own generative AI infrastructure.
That’s according to the Linux Foundation’s “Shaping the Future of Generative AI” report, which polled 316 respondents familiar with their organizations’ generative AI adoption.
“Security remains a cornerstone of this transformation. As organizations embrace GenAI, safeguarding sensitive data and ensuring compliance with industry standards have become critical imperatives,” reads an Open Source Security Foundation blog about the report.
Among organizations deploying their own generative AI infrastructure, security and data control ranked as the top motivation for doing so. Three other data security priorities — data sovereignty; privacy; and intellectual property protection — ranked third, fifth and eighth, respectively.
(Source: Linux Foundation's "Shaping the Future of Generative AI," November 2024)
Meanwhile, respondents, who were based primarily in the Americas, Europe and Asia-Pacific, ranked security as the second most important criteria when choosing a generative AI model or tool, with privacy and regulatory compliance ranking fourth and fifth, respectively.
(Source: Linux Foundation's "Shaping the Future of Generative AI," November 2024)
Furthermore, respondents, who included executives, developers, consultants, data scientists and operations staffers, also ranked security and data protection risks high when asked about their concerns when adopting generative AI models and tools.
(Source: Linux Foundation's "Shaping the Future of Generative AI," November 2024)
For more information about AI security, check out these Tenable blogs:
Here’s a report that cyber teams at critical infrastructure organizations will likely find useful and informative.
The topic: How CISA’s red team breached a critical infrastructure organization’s IT network and then compromised a domain controller and a human machine interface (HMI), which served as an operational technology (OT) dashboard.
The unnamed organization requested that CISA conduct the red team assessment (RTA), in which CISA acted like a cyberattacker to probe the organization’s cybersecurity detection and response processes and procedures.
In broad strokes, here are some of the ways in which CISA’s red team circumvented the critical infrastructure organization’s cyber defenses:
Timeline of CISA's red team cyberthreat activity
(Source: CISA’s advisory “Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization,” November 2024)
Key findings include:
Some of CISA’s mitigation recommendations for cybersecurity teams are:
To get all the details, read CISA’s advisory “Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization.”
To learn more about securing OT systems in critical infrastructure environments, check out these Tenable resources:
Here’s a stat to remind your organization to make sure its virtual private network (VPN) system is configured correctly, has no vulnerabilities and is up to date: Almost 30% of ransomware attacks in the third quarter compromised insecure VPNs to gain initial access, sharply up from about 5% in the second quarter.
That’s according to Corvus Insurance’s “Q3 2024 Cyber Threat Report,” which said many of the ransomware attacks in Q3 leveraged outdated VPN software and poorly protected VPN gateways.
Specifically, organizations shouldn’t allow the use of common usernames and weak passwords in their VPN user accounts, and should protect them with multi-factor authentication.
“The persistence of weak credentials and lack of multi-factor authentication on VPN gateways has facilitated these attacks, making secure access controls crucial for mitigating threats,” reads the report.
The Corvus ransomware report also found that five ransomware groups — RansomHub, PLAY, LockBit 3.0, MEOW and Hunters International — accounted for 40% of all attacks. However, the ransomware ecosystem remains diverse, with almost 60 groups active during the third quarter, which makes the threat landscape more complex for cyber teams to manage.
For more information about ransomware prevention:
VIDEO
Ultimate Guide to Ransomware for Businesses (TechTarget)
6 - Interpol tackles financial cybercrime with thousands of arrestsA five-month Interpol operation led by South Korea has led to the arrest of 5,500-plus suspected financial cybercriminals and to the seizure of more than $400 million in assets.
With Operation HAECHI, Interpol and law enforcement partners from 40 countries went after cyber crooks involved in a variety of financial scams, including:
International collaboration is key to fighting financial cybercrime, which has devastating effects on its victims, Interpol Secretary General Valdecy Urquiza said in a statement.
“It’s only through united efforts that we can make the real and digital worlds safer,” he said.
The post Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer Prevention Tips Against Telecom Spying Attacks appeared first on Security Boulevard.
