235 
Flash Is Dead—But Not Gone
WIRED Threat Level
JANUARY 24, 2021
Security Security / Security NewsZombie versions of Adobe’s troubled software can still cause problems in systems around the world.
Security Related Topics 
NEW TECH: Will ‘Secure Access Service Edge’ — SASE — Be the Answer to Secure Connectivity?
The Last Watchdog
DECEMBER 8, 2020
Company networks have evolved rather spectacularly in just 20 years along a couple of distinct tracks: connectivity and security. Related: The shared burden of securing the Internet of Things. Security, meanwhile, has morphed into a glut of point solutions that mostly serve to highlight the myriad gaps in an ever-expanding attack surface. It’s called Secure Access Service Edge, or SASE , as coined by research firm Gartner.
Join 39,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
Hackers Hide Software Skimmer in Social Media Sharing Icons
Security Affairs
DECEMBER 3, 2020
Security researchers have uncovered a new technique to inject a software skimmer onto checkout pages, the malware hides in social media buttons. Security experts at Sansec have detailed a new technique used by crooks to inject a software skimmer into checkout pages.
What is Cyber Security Awareness and Why is it Important?
IT Governance
MAY 27, 2021
For all the talk of criminal hacking, ransomware infections and the technologies to prevent them, the key to protecting your organisation is cyber security awareness training. The importance of cyber security staff awareness. Cyber security awareness best practices.
The Next-Generation Cloud Data Lake: An Open, No-Copy Data Architecture
Advertisement
A next-gen cloud data lake architecture has emerged that brings together the best attributes of the data warehouse and the data lake. This new open data architecture is built to maximize data access with minimal data movement and no data copies.
SUPERNOVA, a Backdoor Found While Investigating SolarWinds Hack
Security Affairs
DECEMBER 21, 2020
While investigating the recent SolarWinds Orion supply-chain attack security researchers discovered another backdoor, tracked SUPERNOVA. The post SUPERNOVA, a backdoor found while investigating SolarWinds hack appeared first on Security Affairs.
Evolution of Endpoint Security
Data Breach Today
APRIL 6, 2021
This is reality for most enterprises today, and it’s changed the role of endpoint security solutions. Cisco’s Elias Levy on the Leap From EDR to XDR and What It Means Exponentially more devices on the network mean proportionately less visibility.
Purpose Built: Securing vSphere Workloads
Data Breach Today
MARCH 19, 2021
Protecting Servers Is Foundational For Modern Data Center Security. View this OnDemand webinar to learn how VMware Carbon Black is delivering unified workload protection that’s purpose-built for vSphere
Router Security
Schneier on Security
FEBRUARY 19, 2021
This report is six months old, and I don’t know anything about the organization that produced it, but it has some alarming data about router security. A published private key provides no security at all.
Balancing Security, Customer Service
Data Breach Today
DECEMBER 4, 2020
Experian's David Britton on Identity Governance and Security Organizations can enhance security while maintaining a good customer experience by leveraging data for authentication, says David Britton of Experian
How to Measure DevSecOps Progress and Ensure Success
Speaker: Shannon Lietz, Director of DevSecOps Team, Intuit
The new DevSecOps team is up and running, and you feel ready to take on rising security threats while delivering quality software updates. But that leaves just one question: how do you monitor your new program as effectively and efficiently as possible? Join Shannon Lietz, Director of DevsecOps at Intuit, and award-winning innovator, to learn the answers to these questions so you can lead your DevSecOps team to the top!
|
Experian’s Credit Freeze Security is Still a Joke
Krebs on Security
APRIL 26, 2021
Last week, KrebsOnSecurity heard from a reader who had his freeze thawed without authorization through Experian’s website, and it reminded me of how truly broken authentication and security remains in the credit bureau space.
NIST Drafts Election Security Guidance
Data Breach Today
MARCH 30, 2021
Agency Describes How to Apply Its Cybersecurity Framework NIST has drafted guidelines for how to use its cybersecurity framework to address cyberthreats and other security issues that can target state and local election infrastructure and disrupt voting
Detecting Network Security Incidents
Data Breach Today
JULY 3, 2020
ENISA's Rossella Mattioli Reviews New Report Rossella Mattioli, a network and information security expert at ENISA, the European Union Agency for Cybersecurity, discusses a new report offering insights on detecting network security incidents
Cloud Pak for Security
Data Breach Today
OCTOBER 28, 2020
Cloud Pak for Security Digital transformation is accelerating. This webinar will take a deep dive into IBM's Cloud Pak for Security where you will learn how to: Gain insights without moving your data; Respond faster to secuirty incidents with automation and investigative capabilities; Run anywhere, connect security openly Organisations are adopting SAAS solutions at increasing rates to reduce internal IT constraints and budgets.
Shift Left Security? Development Does Not Want to Own It.
Speaker: Shlomo Bielak, CTO, Benchmark Corp
Shifting security left to the earliest part of development is currently in the spotlight in the developer world. What teams are now discovering is, this approach results in misdirected ownership for developers and a frustrated security team. In the current climate, we cannot afford to let security implementations falter. It's time to manage your team's energies to maximize DevOps efficiency, all the while maintaining top security standards. Join Shlomo Bielak, and learn how to keep your DevSecOps team focused and connected without creating silos.
Banking on Cloud Security
Data Breach Today
NOVEMBER 13, 2020
These are the results that banking institutions can receive by shifting security to the cloud, says David Vergara of OneSpan. "Better, cheaper, faster." At a time when multi-channel fraud is surging and the customer experience is paramount, cloud needs serious consideration, he says
Insurer Chubb Investigating 'Security Incident'
Data Breach Today
MARCH 27, 2020
Maze Gang Claims Insurer Is a Victim, Emsisoft Reports Switzerland-based global insurance firm Chubb acknowledges that it's investigating a "security incident." Meanwhile, the Maze ransomware gang is claiming Chubb is its latest victim, according to researchers at the security firm Emsisoft
Driving Healthcare Innovation With a Security Mindset
Data Breach Today
MAY 18, 2021
ChristianaCare CISO Anahi Santiago on Securing Hospitals Without Borders Telehealth, a remote workforce, cloud migration - these were dreams, but not reality for many healthcare CISOs pre-pandemic. Today's a new world, and ChristianaCare CISO Anahi Santiago is happy to be helping to secure it.
Redefining Security Analytics
Data Breach Today
MARCH 2, 2020
Chronicle's Anton Chuvakin on How to Fill the Gaps for Analysts There are glaring holes in how enterprises currently tackle security analytics, and by redefining the approach, the analyst's role can be transformed.
Your Team's Pragmatic Guide to Security
Speaker: Naresh Soni, CTO, Tsunami XR
The pandemic has led to new data vulnerabilities, and therefore new cybersecurity threats. As technology leaders, it's time to rethink some of your product security strategies. Whether you need to rework your security architecture, improve performance, and/or deal with new threats, this webinar has you covered.
Securing Your Building Management System
Data Breach Today
MAY 5, 2021
With all the talk of sophisticated adversaries and evolving threats to users and devices – what about threats to building management systems? Jeremy Morgan of Industrial Defender discusses this threat landscape and the role of automated tools to defend it
ISMG Editors’ Panel: Securing Cryptocurrencies and More
Data Breach Today
APRIL 23, 2021
Discussion Also Tackles Market Trends, Nation-State Threats Four editors at Information Security Media Group review important cybersecurity developments, including improving security for cryptocurrencies
FTC Settlement With Zoom Sets Security Requirements
Data Breach Today
NOVEMBER 9, 2020
Agency Requires Comprehensive Security Program As part of a settlement of allegations that Zoom "engaged in a series of deceptive and unfair practices that undermined the security of its users," the U.S.
The Unexpected Cost of Data Copies
Advertisement
This paper will discuss why organizations frequently end up with multiple data copies and how a secure "no-copy" data strategy enabled by the Dremio data lake service can help reduce complexity, boost efficiency, and dramatically reduce costs.
Pulse Secure VPN Zero-Day Flaw Patched
Data Breach Today
MAY 3, 2021
Permanent Fix Replaces Earlier Workaround Ivanti, parent company of Pulse Secure, published a permanent fix Monday for a zero-day vulnerability in Pulse Connect Secure VPN products that has been exploited to target U.S.
Pulse Connect Secure VPNs Still Under Attack
Data Breach Today
MAY 28, 2021
FireEye: Attackers Using New Malware and Procedures Two China-linked threat groups are still exploiting unpatched flaws in Ivanti's Pulse Connect Secure VPN products, using additional malware variants to support cyberespionage, FireEye's Mandiant Threat Intelligence team says
Kubernetes Security
Schneier on Security
APRIL 10, 2020
A good first step towards understand the security of this suddenly popular and very complex container orchestration system. Attack matrix for Kubernetes, using the MITRE ATT&CK framework.
Phishing Attacks Dodge Email Security
Data Breach Today
JULY 22, 2020
Cofense: Fraudsters Use Trusted Web Services to Evade Security Protocols A fresh round of phishing attacks is relying on using trusted services and a well-designed social engineering scheme to trick users into enabling malware to bypass an end point's security protocols, says Aaron Higbee of the security firm Cofense.
Nation-State Actor Linked to Pulse Secure Attacks
Data Breach Today
APRIL 20, 2021
Vulnerabilities Exploited Include a Zero-Day in Ivanti's Pulse Connect Secure The U.S. Cybersecurity and Infrastructure Security Agency, Ivanti and FireEye report that U.S.
UK Cyber Security Council to Tackle Education, Standards
Data Breach Today
JUNE 5, 2021
Cyber Security Council is a new self-regulatory body for the profession. Claudia Natanson Describes Vision of U.K.’s s New Self-Regulatory Body U.K. It is tasked by the U.K. Government to execute their vision for the U.K.
Tips on Enhancing Supply Chain Security
Data Breach Today
APRIL 28, 2021
Cybersecurity and Infrastructure Security Agency and the National Institute of Standards and Technology have released a report providing insights on how to enhance supply chain security in the wake of the SolarWinds attack NIST, CISA Highlight Key Steps to Take The U.S.
Federal Agencies Struggling With Supply Chain Security
Data Breach Today
MAY 26, 2021
After SolarWinds Attack, Agencies Are Not Making Security Upgrades, GAO Reports More than five months after the SolarWinds supply chain attack came to light, federal agencies continue to struggle with supply chain security, according to a top GAO official who testified before a House committee
Supernova Attack Leveraged SolarWinds, Pulse Secure
Data Breach Today
APRIL 23, 2021
CISA Describes APT Group's Methods An advanced persistent threat group gained long-term access to an unnamed entity's network through its Ivanti Pulse Secure VPN and SolarWinds' Orion server and then installed Supernova malware, according to the U.S.
NSA Offers Tips on Securing Unified Communication Channels
Data Breach Today
JUNE 18, 2021
National Security Agency has released new guidance to help federal agencies as well as business enterprises protect their unified communications channels and voice/video over IP calls from cyberthreats Guidance Spells Out Best Risk Mitigation Practices The U.S.
Using an 'Intrinsic Security' Approach
Data Breach Today
NOVEMBER 19, 2020
Organizations need to build security into their cloud environments to help thwart cyberthreats, says Tom Com of VMware, who describes this "intrinsic security" approach
Tom Kellermann: Post-Election Security Analysis
Data Breach Today
NOVEMBER 10, 2020
election security measures seem to have worked. Cybersecurity Strategist Warns of Pre-Inauguration Nation-State Strikes The good news: U.S. The bad news: Disinformation and misinformation campaigns continue.
Live Webinar | Software Security: Prescriptive vs. Descriptive
Data Breach Today
APRIL 16, 2021
Effective software security means enabling the development team with the tools and training it needs to fix what they find. Join this session to find out best practices in remediating software vulnerabilities in smart ways
Can We Stop Pretending SMS Is Secure Now?
Krebs on Security
MARCH 16, 2021
SMS text messages were already the weakest link securing just about anything online, mainly because there are tens of thousands of employees at mobile stores who can be tricked or bribed into swapping control over a mobile phone number to someone else.
Let's personalize your content