Security Boulevard

The software industry has seen remarkable changes over the past decade, driven by a surge in open source adoption, evolving development methodologies, and the growing integration of AI.

At this year's All Day DevOps (ADDO) event, a panel of industry leaders, including Sonatype's co-founder and CTO Brian Fox, will present "A Decade of Transformation - Unveiling the 10th Annual State of the Software Supply Chain Report."

This session promises to reveal key insights into how the software supply chain has evolved and what the future holds.

The post A decade of transformation: ADDO and the State of the Software Supply Chain appeared first on Security Boulevard.

GoldenJackal, a threat group possibly from Russia, has been attacking embassies and other government agencies from Europe, South Asia, and the Middle East with two distinct malicious toolsets designed to steal information from air-gapped systems, ESET researchers said.

The post GoldenJackal Targets Embassies, Steals Data from Air-Gapped Systems appeared first on Security Boulevard.

The world of software development is rapidly evolving, driven by increasing pressure to deliver faster, yet with fewer resources, and the widespread adoption of generative AI tools.

The post Revolutionizing software development: Frank Roe’s keynote at ADDO appeared first on Security Boulevard.

Open source components are the building blocks of modern applications. But what happens when these very components are weaponized, silently infiltrating your software supply chain?

The post Unmasking the invisible threat: Ilkka Turunen’s keynote at ADDO appeared first on Security Boulevard.

Authors/Presenters:Sajy Khashab, Alon Rashelbach, Mark Silberstein, Technion

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – Multitenant In-Network Acceleration with SwitchVM appeared first on Security Boulevard.

In this episode, Edwin Shuttleworth from Finite State discusses firmware security, insights from the GRRCON Security Conference, and the challenges of firmware analysis. The conversation covers various topics, including firmware scraping techniques, the IoT landscape, types of firmware, the importance of Software Bill of Materials (SBOMs), and emulation in firmware analysis. Edwin shares his experiences […]

The post BTS #39 - The Art of Firmware Scraping - Edwin Shuttleworth appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post BTS #39 – The Art of Firmware Scraping – Edwin Shuttleworth appeared first on Security Boulevard.

via the comic humor & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘University Commas’ appeared first on Security Boulevard.

October is Cybersecurity Awareness Month. In conjunction with that, IBM has released an updated X-Force Threat report. This report was developed using threat intelligence from Cybersixgill, Red Hat Insights, and the IBM X-Force team and focuses on how hostile actors […]

The post IBM X-Force Threat Report Still Indicates the Biggest Threat Is You appeared first on TechSpective.

The post IBM X-Force Threat Report Still Indicates the Biggest Threat Is You appeared first on Security Boulevard.

Authors/Presenters:Shawn Shuoshuo Chen, Keqiang He, Rui Wang, Srinivasan Seshan, Peter Steenkiste

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – Precise Data Center Traffic Engineering with Constrained Hardware Resources appeared first on Security Boulevard.

The adoption of cloud computing has become a cornerstone of modern business operations today. However, this shift brings forth significant concerns about data protection and security. Cloud security assessment plays a crucial role in safeguarding sensitive information and ensuring compliance with industry regulations. Organizations must prioritize this process to identify vulnerabilities, mitigate risks, and establish […]

The post Cloud Security Assessment: Checklist to Ensure Data Protection appeared first on Security Boulevard.

Trend Micro revealed today it will extend an alliance with NVIDIA to include a Morpheus platform that harnesses graphical processor units (GPUs) to apply artificial intelligence (AI) to security operations.

The post Trend Micro Extends NVIDIA Cybersecurity Alliance to Detect Threats in Real Time appeared first on Security Boulevard.

Sophisticated cyberattackers have now expanded their focus beyond front-end applications.

The post What’s a Software Supply Chain Attack? Examples and Prevention appeared first on Security Boulevard.

Like any good tool, artificial intelligence (AI) boasts a variety of use cases—but just as many risks.

The post NIST AI Risk Management Framework Explained appeared first on Security Boulevard.

DAST is an essential part of a nutritious application security diet—not just a once-a-quarter treat.

The post Don’t Treat DAST Like Dessert appeared first on Security Boulevard.

Natural disasters often bring out the best in people, with communities and organizations coming together to help those in need. Unfortunately, they also present opportunities for cybercriminals looking to exploit the chaos for financial gain. With Hurricane Helene and other recent hurricanes affecting Florida, Veriti’s research team has identified several emerging cyber threats targeting vulnerable […]

The post Exploiting Hurricane Helene with FEMA Scams and Phishing Threats  appeared first on VERITI.

The post Exploiting Hurricane Helene with FEMA Scams and Phishing Threats  appeared first on Security Boulevard.

Recent reports have revealed that Indian threat actors are using multiple cloud service providers for malicious purposes. The hacker activities are mainly centered around facilitating credential harvesting, malware delivery, and command-and-control (C2). In this article, we’ll cover who the Indian threat actor is targeting and what the attack chain looks like. Let’s begin!  Indian Threat […]

The post Indian Threat Actors Target South And East Asian Entities appeared first on TuxCare.

The post Indian Threat Actors Target South And East Asian Entities appeared first on Security Boulevard.

Come hear from industry experts KPMG Canada and AppOmni to understand the commonalities of SaaS cybersecurity with other key cloud security use cases. Also learn best practice on how to mitigate the leading cyber threats facing SaaS, including end-user misconfiguration risk and the risk of an over-privileged data compromise.

The post SaaS Application Security | The Missing Component of Cyber Risk in the Cloud appeared first on AppOmni.

The post SaaS Application Security | The Missing Component of Cyber Risk in the Cloud appeared first on Security Boulevard.

SOC teams need every advantage against ransomware. Learn how a SOAR playbook can streamline incident response, saving time and minimizing the impact of attacks.

The post A Modern Playbook for Ransomware appeared first on D3 Security.

The post A Modern Playbook for Ransomware appeared first on Security Boulevard.

Authors/Presenters:Vamsi Addanki, Wei Bai, Stefan Schmid, Maria Apostolaki

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – Reverie: Low Pass Filter-Based Switch Buffer Sharing for Datacenters with RDMA and TCP Traffic appeared first on Security Boulevard.

Learn how the time-tested framework can help you understand and manage threats that may arise during this election cycle Former President Donald Trump survived a second assassination attempt by a sniper, this one on his golf course. In Springfield, Ohio, Gov. Mike DeWine has sent in state troopers after extremists began marching through town, and…

The post Applying the Intelligence Cycle in our New Days of Rage appeared first on Ontic.

The post Applying the Intelligence Cycle in our New Days of Rage appeared first on Security Boulevard.