Once SBOM and IAM provisioning knit seamlessly with policy-driven data encryption and AI-powered monitoring, they will have a far stronger security posture.
The post The SBOM Survival Guide: Why SBOM Compliance is Set to Ignite IoT Security appeared first on Security Boulevard.
New research evaluating the effectiveness of reward modeling during Reinforcement Learning from Human Feedback (RLHF): “SEAL: Systematic Error Analysis for Value ALignment.” The paper introduces quantitative metrics for evaluating the effectiveness of modeling and aligning human values:
Abstract: Reinforcement Learning from Human Feedback (RLHF) aims to align language models (LMs) with human values by training reward models (RMs) on binary preferences and using these RMs to fine-tune the base LMs. Despite its importance, the internal mechanisms of RLHF remain poorly understood. This paper introduces new metrics to evaluate the effectiveness of modeling and aligning human values, namely feature imprint, alignment resistance and alignment robustness. We categorize alignment datasets into target features (desired values) and spoiler features (undesired concepts). By regressing RM scores against these features, we quantify the extent to which RMs reward them a metric we term feature imprint. We define alignment resistance as the proportion of the preference dataset where RMs fail to match human preferences, and we assess alignment robustness by analyzing RM responses to perturbed inputs. Our experiments, utilizing open-source components like the Anthropic preference dataset and OpenAssistant RMs, reveal significant imprints of target features and a notable sensitivity to spoiler features. We observed a 26% incidence of alignment resistance in portions of the dataset where LM-labelers disagreed with human preferences. Furthermore, we find that misalignment often arises from ambiguous entries within the alignment dataset. These findings underscore the importance of scrutinizing both RMs and alignment datasets for a deeper understanding of value alignment...
The post Evaluating the Effectiveness of Reward Modeling of Generative AI Systems appeared first on Security Boulevard.
The Debian Project has officially released Debian 12.7, the latest point release in the Debian GNU/Linux 12 “Bookworm” series. It arrives just two months after the previous release, Debian 12.6, as the sixth point release of the Bookworm series. This new update retains the Linux 6.1 LTS kernel and brings important security fixes and bug corrections, […]
The post Debian 12.7 Released with 55 Security Updates and 51 Bug Fixes appeared first on TuxCare.
The post Debian 12.7 Released with 55 Security Updates and 51 Bug Fixes appeared first on Security Boulevard.
Choosing the right identity provider is crucial, as it requires architectural changes that can make switching later difficult and costly.
The post 6 Questions to Answer Before Choosing an Identity Provider appeared first on Security Boulevard.
Articles related to cyber risk quantification, cyber risk management, and cyber resilience.
The post Why CRQ Models Are Better than CRQ Frameworks | Kovrr appeared first on Security Boulevard.
Digital resilience ensures an organization can withstand and swiftly recover from any digital disruptions. Organizations need to build systems that are not only secure but also adaptable and capable of rapid recovery. Implementing a multi-layered approach involving risk assessment, continuous monitoring, and business continuity planning is essential. In today’s digital landscape, where cyber threats are […]
The post Achieving Digital Resilience: Key Strategies for Modern Enterprises appeared first on TuxCare.
The post Achieving Digital Resilience: Key Strategies for Modern Enterprises appeared first on Security Boulevard.
Recent cybersecurity research claims that a new malware campaign masking itself as the Palo Alto VPN, GlobalProtect, is now targeting users in the Middle East. It has been observed that the malware employs a two-stage attack. In this article, we’ll look at what the malware is and the dangers it exposes Middle Eastern users to. […]
The post Alert: Users At Risk Amid Palo Alto VPN Disguised Malware appeared first on TuxCare.
The post Alert: Users At Risk Amid Palo Alto VPN Disguised Malware appeared first on Security Boulevard.
This blog is based on our conversation with Harsh Modi, Senior Security Engineer at Bell. It explores what are the benefits of pentesting, and its real-world implications.
The post What are the actual benefits of pentesting? Insights from Harsh Modi appeared first on Security Boulevard.
Palo Alto, USA/California, 11th September 2024, CyberNewsWire
The post Opus Security Elevates Vulnerability Management With its AI-Powered Multi-Layered Prioritization Engine appeared first on Security Boulevard.
Cary, NC, Sept. 10, 2024, CyberNewsWire — As cyber threats grow, small to medium-sized businesses (SMBs) are disproportionately targeted.
According to the recent Hiscox annual cyber readiness report, 41% of SMBs in the US fell victim to a cyberattack … (more…)
The post News alert: INE Security launches initiative to help SMBs foster a proactive cybersecurity culture first appeared on The Last Watchdog.
The post News alert: INE Security launches initiative to help SMBs foster a proactive cybersecurity culture appeared first on Security Boulevard.
Learn how SOAR automation helps MSSPs increase revenue, boost efficiency, and improve job satisfaction—without replacing human workers. Explore key 2024 survey insights
The post How SOAR Automation is Boosting MSSP Revenue Without Replacing Human Workers appeared first on D3 Security.
The post How SOAR Automation is Boosting MSSP Revenue Without Replacing Human Workers appeared first on Security Boulevard.
The post Patch Tuesday Update - September 2024 appeared first on Digital Defense.
The post Patch Tuesday Update – September 2024 appeared first on Security Boulevard.
Singapore, Sept. 10, 2024, CyberNewsWire — Seventh Sense, a pioneer in advanced cybersecurity solutions, announces the launch of SenseCrypt, a revolutionary new platform that sets a new standard in secure, privacy-preserving identity verification. SenseCrypt introduces a first-of-its-kind face-based … (more…)
The post News alert: Seventh Sense unveils a revolutionary privacy solution — face-based PKI and ‘eID’ first appeared on The Last Watchdog.
The post News alert: Seventh Sense unveils a revolutionary privacy solution — face-based PKI and ‘eID’ appeared first on Security Boulevard.
PRESS RELEASE Strata Identity acknowledged for helping banks streamline customer journeys BOULDER, CO, September 10, 2024 – Strata Identity, the Identity Orchestration company, today announced it has been named as a Sample Vendor in the 2024 Gartner Hype Cycle for Banking Customer Experience. According to Gartner, “Journey-time orchestration is a type of platform with the...
The post Strata Identity Recognized as a Sample Vendor in 2024 Gartner® Hype Cycle™ for Banking Customer Experience appeared first on Strata.io.
The post Strata Identity Recognized as a Sample Vendor in 2024 Gartner® Hype Cycle™ for Banking Customer Experience appeared first on Security Boulevard.
Manufacturing and industrial sectors are becoming bigger cyber-targets, and many of the intrusions are coming from China. Those are among the sobering takeaways from a report Tuesday by Ontinue’s Advanced Threat Operations team in its biannual Threat Intelligence Report. The two sectors endured a 105% increase in attacks during the first half of 2024, highlighting..
The post Manufacturing, Industrial Sectors Are Under Siege appeared first on Security Boulevard.
AttackIQ has released a new assessment template in response to the CISA Advisory (AA24-249A) published on September 5, 2024, that assesses cyber actors affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155), who are responsible for computer network operations against global targets for the purposes of espionage, sabotage, and reputational harm since at least 2020.
The post Response to CISA Advisory (AA24-249A): Russian Military Cyber Actors Target US and Global Critical Infrastructure appeared first on AttackIQ.
The post Response to CISA Advisory (AA24-249A): Russian Military Cyber Actors Target US and Global Critical Infrastructure appeared first on Security Boulevard.
Authors/Presenters:Zhibo Liu, Yuanyuan Yuan, Shuai Wang, Xiaofei Xie, Lei Ma
Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.
The post USENIX Security ’23 – Decompiling x86 Deep Neural Network Executables appeared first on Security Boulevard.
Delinea, a provider of for managing authorizations, today published a survey of 300 decision makers that finds 62% of respondents have filed an insurance claim because of a cyberattack in the last 12 months, with well over a quarter (27%) having filed multiple claims.
The post Delinea Survey Surfaces Spike in Cybersecurity Insurance Claims appeared first on Security Boulevard.
How do global consulting firms with international reach think about providing their cybersecurity services? One major managed service provider (MSP) which we’ll call “MSP Global” offers security operations center as-a-Service (SOCaaS) and cyber threat hunting, detection, and response for clients in more than 150 countries and territories.
MSP Global found tremendous value in incorporating HYAS solutions into a strategy for supporting their global cybersecurity services. Given MSP Global’s size and number of clients around the world, it was crucial to have the most robust cybersecurity capabilities possible. MSP Global designed a comprehensive framework of technical capabilities, effective processes, and rich threat intelligence to support their clients. A critical aspect of this was not only the ability to detect and mitigate attacks but also to understand threat actor behavior and the infrastructure used to carry out their attacks. They needed the right players on board to support their framework, including partnering with the leading intelligence firm specializing in adversary infrastructure. Who fit the bill? HYAS did.
Challenges Q: Why do clients engage MSP Global’s cybersecurity services?MSP Global offers SOCaaS and related threat hunting, incident response, and other services to clients who want reliable third-party managed services. Regardless of the services chosen, the firm provided intelligence reporting with industry-specific data, analysis, and insight to help protect client businesses from a wide range of threats.
One of MSP Global’s primary goals when onboarding new clients was to define each client’s particular intelligence requirements. That meant understanding the threat landscape and attack surface for each client. The requirements of course included factors specific to the client, but also inevitably included relevant threat patterns and actors in the client’s industry as a whole.
Those in the banking industry, for example, received different intelligence reports than healthcare providers based upon the specific threats and changing landscape for that industry. But regardless of the industry, MSP Global leveraged the diverse, contextualized cyber threat intelligence provided by HYAS. The firm combined HYAS intel into an all-source intelligence model optimized for the client.
Q: What drove MSP Global to consider HYAS as a threat intelligence and incident response solution?The business case for visibility on infrastructure intelligence was clear. Enterprises need timely, relevant, and actionable cyber threat intelligence to understand threat infrastructure and to prevent, detect, and mitigate the impacts of phishing, ransomware, and other kinds of cyber attacks. HYAS provides its clients with rich passive DNS, both standard and industry-exclusive WhoIs, proprietary malware intelligence, and other contextualized intelligence that helps SOC analysts and threat hunters connect the dots and uncover adversary infrastructure.
The case for infrastructure intelligence was so clear that when MSP Global’s intelligence division decided to build its service, it defined its collection strategy around specific intelligence “pillars” that would mutually reinforce each other to provide the best possible cybersecurity services. Adversary infrastructure was an essential part of one of these pillars, representing a predetermined requirement that could only be met with capabilities like HYAS’s.
Solutions Q: What made MSP Global choose HYAS among other solutions in the marketplace?No business can escape financial constraints, but it was clear to MSP Global that a single vendor could not demonstrate expertise in all the areas required. The company looked at multiple vendors and found that HYAS occupies a special niche. HYAS Insight provides unrivaled adversary “infrastructure intelligence” that helps organizations identify the infrastructure used by adversaries to launch attacks and provides visibility into past patterns of activity. It also identifies future threat activity for associated infrastructure that has not yet been weaponized.
HYAS Protect provides protective DNS capabilities that scrutinizes DNS traffic - a requirement of any communication with the internet - to prevent the corporate network or employee endpoints from communicating with suspicious or malicious sites on the internet. That means adversary activity is interrupted, such as phishing or malware communication with command and control infrastructure. It also means security practitioners get clear insights into the patterns of traffic and unwanted activity across their network so they can track down anomalies and institute change that better protects their organizations.
MSP Global saw something unique in HYAS solutions as well as a standard of excellence that helped put them in the best position to deliver cybersecurity services that best met their client’s objectives.
Q: How does MSP Global use HYAS Insight to help its clients?HYAS Insight plays neatly into MSP Global’s threat hunting and cyber threat intelligence offerings. Fundamental to supporting these solutions is accurate infrastructure data and the context around it. HYAS provides the necessary real-time data, historical details, and a diverse range of correlated intelligence to help the company’s worldwide centers effectively stop bad actors, whether script kiddies or advanced adversaries.
MSP Global’s intel teams don’t directly provide its clients with data from HYAS. Rather, they use HYAS Insight to support their services with intelligence they can trust, and that means better SOC triage, prioritization, and response to threats, and also more timely, in-depth intelligence reports catered to their clients.
In addition to using HYAS Insight to support SOCaaS incident response, amplify MSP Global’s threat hunting, and provide threat intel to generate reports, the firm uses HYAS for:
HYAS intelligence has empowered MSP Global to successfully identify and stop:
And HYAS has also helped MSP Global cut costs. Annually evaluation of 3rd party product fit against the firm’s evolving objectives is a standard component of its vendor management process, ensuring the firm maximizes the value gained from its investments. Reevaluations have resulted in extremely high ROI with HYAS Insight, so high that the firm has managed to prune other less valuable solutions from its security stack.
Q: How does MSP Global’s senior intelligence manager rate HYAS?MSP Global rates HYAS solutions very high, noting how quickly the intelligence division can pull information necessary for cybersecurity investigations it conducts on behalf of its clients. In addition, HYAS Insight’s advanced capabilities give MSP Global’s intel teams more ways to present data and recommend action.
But good products and services are nothing without the right partnership. The relationship between HYAS and MSP Global has ultimately strengthened them both and empowered their missions to build stabler, safer business environments for those they serve.
Connect with us to learn how HYAS's unrivaled threat intelligence and investigation capabilities can augment your existing security stack and protect against advanced cyberthreats.
The post How One Consultancy Behemoth Uses HYAS for Unrivaled Cybersecurity appeared first on Security Boulevard.
49% have experienced a major security breach in the past 12 months, according to respondents to our new “ Voice of a Threat Hunter 2024 ”...
The post How Effective Threat Hunting Programs are Shaping Cybersecurity appeared first on Security Boulevard.
