Daily digest for Security Boulevard, on October 1, 2022

David Lindner, Director, Application Security posted: " Skip to content " Security Boulevard Cybersecurity Awareness Month Champion | See Yourself in Cyber | Contrast Security David Lindner, Director, Application Security Oct 1 Another year has passed, and once again Contrast is proud to be a Champion for Cybersecurity Awareness Month throughout October, to help in promoting global awareness of online safety and privacy. Co-led by the National Cyber Security Alliance and the Cybersecurity and Infrastructure Security Agency (CISA) of the U.S. Department of Homeland Security, this annual campaign is a global effort between businesses, government agencies, colleges and universities, associations, nonprofit organizations, and individuals and is designed to raise awareness and help everyone stay safe online. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/10/cybersecurity-awareness-month-champion-see-yourself-in-cyber-contrast-security/ Powered by Jetpack

Bruce Schneier posted: "Japanese scientists are trying to breed the oval squid in captivity. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here. " Security Boulevard Friday Squid Blogging: Breeding the Oval Squid Bruce Schneier Sep 30 Japanese scientists are trying to breed the oval squid in captivity. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1940202 Powered by Jetpack

Jamie Holderman posted: " Provide comprehensive cloud workload protection Engage and stop threats faster with Active XDR for hybrid environments Neutralize threats and prevent network-based attacks Detect and respond faster to threat" Security Boulevard Get Ready for Cybersecurity Awareness Month Jamie Holderman Sep 30 The post Get Ready for Cybersecurity Awareness Month appeared first on Fidelis Cybersecurity. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/get-ready-for-cybersecurity-awareness-month/ Powered by Jetpack

Teri Robinson posted: "Protesters against the Iran regime are getting a boost to aid their efforts from hacking groups who are using Telegram, Signal and the dark web to get around government restrictions. "Key activities are data leaking and selling, including officials' ph" Security Boulevard Hackers Use Telegram, Signal, Dark Web to Help Iranian Protesters Teri Robinson Sep 30 Protesters against the Iran regime are getting a boost to aid their efforts from hacking groups who are using Telegram, Signal and the dark web to get around government restrictions. "Key activities are data leaking and selling, including officials' phone numbers and emails, and maps of sensitive locations. CPR sees the sharing of open VPN […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/hackers-use-telegram-signal-dark-web-to-help-iranian-protesters/ Powered by Jetpack

Canming Jiang posted: " /*! elementor - v3.6.7 - 03-07-2022 */ .elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-vi" Security Boulevard Preparing for Cyber Insurance? 6 Questions to Ask Your IT Team Today Canming Jiang Sep 30 The list of companies that have experienced data breaches in 2022 continues to grow, including Meta, Samsung, Twilio, Twitter, Uber and more.  If these companies – with their large, dedicated cybersecurity teams – are vulnerable, so is every other company. No wonder the cyber insurance market is expected to grow at a compound average rate of almost 25 percent […] The post Preparing for Cyber Insurance? 6 Questions to Ask Your IT Team Today appeared first on Datawiza. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/preparing-for-cyber-insurance-6-questions-to-ask-your-it-team-today/ Powered by Jetpack

Aaron Linskens posted: "This week in malware, we discovered and analyzed 135 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries. Malicious packages caught by SonatypeWe caught the following this week via Sonatype's automated ma" Security Boulevard This Week in Malware – 135 Packages Target npm and PyPI Registries Aaron Linskens Sep 30 This week in malware, we discovered and analyzed 135 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/this-week-in-malware-135-packages-target-npm-and-pypi-registries/ Powered by Jetpack

Joseph Vigorito posted: " As many of you may now know, the Department of Homeland Security is making a significant investment to address cybersecurity risks and threats to information systems owned or operated by, or on " Security Boulevard New DHS Cybersecurity Grant Program – Seceon Offers Expertise in Developing Your Cyber Plan Joseph Vigorito Sep 30 As many of you may now know, the Department of Homeland Security is making a significant investment to address cybersecurity risks and threats to information systems owned or operated by, or on behalf of, state, local and territorial governments. The post New DHS Cybersecurity Grant Program – Seceon Offers Expertise in Developing Your Cyber Plan appeared first on Seceon. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/new-dhs-cybersecurity-grant-program-seceon-offers-expertise-in-developing-your-cyber-plan/ Powered by Jetpack

Semperis Research Team posted: "Cyberattacks targeting Active Directory are on the upswing, putting pressure on AD, identity, and security teams to monitor the constantly shifting AD-focused threat landscape. To help IT pros better understand and guard against attacks involving AD, the " Security Boulevard Identity Attack Watch: September 2022 Semperis Research Team Sep 30 Cyberattacks targeting Active Directory are on the upswing, putting pressure on AD, identity, and security teams to monitor the constantly shifting AD-focused threat landscape. To help IT pros better understand and guard against attacks involving AD, the Semperis Research Team offers this monthly roundup of recent cyberattacks that used AD to introduce or propagate malware. ... The post Identity Attack Watch: September 2022 appeared first on Semperis. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/identity-attack-watch-september-2022/ Powered by Jetpack

Marc Handelman posted: "Our sincere thanks to BSidesLV for publishing their outstanding conference videos on the organization's YouTube channel. Permalink" Security Boulevard BSidesLV 2022 Lucky13 CommonGround – Robert "TProphet" Walker's 'The Exclave Experience: Relocating To 'Almost Canada" Marc Handelman Sep 30 Our sincere thanks to BSidesLV for publishing their outstanding conference videos on the organization's YouTube channel. Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/bsideslv-2022-lucky13-commonground-robert-tprophet-walkers-the-exclave-experience-relocating-to-almost-canada/ Powered by Jetpack

Mackenzie Jackson posted: "Most organizations today are software development companies. It doesn't matter much if you are building the latest in cloud computing services or manufacturing paint, you most likely have a team of software engineers building proprietary systems an" Security Boulevard Poisoning the source – How and why attackers are targeting developer accounts Mackenzie Jackson Sep 30 Most organizations today are software development companies. It doesn't matter much if you are building the latest in cloud computing services or manufacturing paint, you most likely have a team of software engineers building proprietary systems and at the very least you rely heavily on commercial software to Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/poisoning-the-source-how-and-why-attackers-are-targeting-developer-accounts/ Powered by Jetpack

Richi Jennings posted: "슬기론 인민의 이 영광Weird things are happening on LinkedIn. Scammers, believed to be working for North Korea, are creating fake profiles and targeting job applicants.3/ Hey, hey, #DPRK, how many people will you scam today? In today's #SBBlogwatch, we piece togeth" Security Boulevard Warning: N. Korean Job Scams Push Trojans via LinkedIn – Security Boulevard Richi Jennings Sep 30 슬기론 인민의 이 영광 Weird things are happening on LinkedIn. Scammers, believed to be working for North Korea, are creating fake profiles and targeting job applicants. 3/ Hey, hey, #DPRK, how many people will you scam today? In today's #SBBlogwatch, we piece together the puzzle. At @TechstrongGroup's @SecurityBlvd: https://t.co/MpJMRwpATu — @Richi Jennings (@RiCHi) September 30, 2022 Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1940183 Powered by Jetpack

Richi Jennings posted: "Weird things are happening on LinkedIn. Scammers, believed to be working for North Korea, are creating fake profiles and targeting job applicants. It seems they're targeting certain companies so they can steal private information with Trojans. Sneakily" Security Boulevard Warning: N. Korean Job Scams Push Trojans via LinkedIn Richi Jennings Sep 30 Hey, hey, DPRK, how many people will you scam today? Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/north-korea-job-scam-trojan-linkedin-richixbw/ Powered by Jetpack

Tom Kellermann, SVP Cyber Strategy, Contrast Security posted: " Skip to content " Security Boulevard Defend from within | Intrusion suppression with runtime protection, continuous monitoring & application security | Contrast SecurityDefend from within Tom Kellermann, SVP Cyber Strategy, Contrast Security Sep 30 The enemy is at the gates. The enemy is inside our computer networks. The enemy is within our very code, training its sights on the technology that runs the world.  Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/defend-from-within-intrusion-suppression-with-runtime-protection-continuous-monitoring-application-security-contrast-securitydefend-from-within/ Powered by Jetpack

Marc Handelman posted: " via the comic artistry and dry wit of Randall Munroe, r" Security Boulevard XKCD 'Historical Dates' Marc Handelman Sep 30 via the comic artistry and dry wit of Randall Munroe, resident at XKCD! Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/xkcd-historical-dates/ Powered by Jetpack

Pan Kamal posted: " Developer teams work hard to deliver high quality code that meets business requirements. Having an internal development team that produces source code is a huge investment for any size enterprise. Optimizing these investments creates the drive to deli" Security Boulevard Integrating code security with CI/CD and enterprise tools Pan Kamal Sep 30 Developer teams work hard to deliver high quality code that meets business requirements. Having an internal development team that produces source code is a huge investment for any size enterprise. Optimizing these investments creates the drive to deliver more code faster, with higher code quality and that is written to be secure as well.  End-to-end […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/integrating-code-security-with-ci-cd-and-enterprise-tools/ Powered by Jetpack

BrianKrebs posted: "Microsoft Corp. is investigating reports that attackers are exploiting two previously unknown vulnerabilities in Exchange Server, a technology many organizations rely on to send and receive email. Microsoft says it is expediting work on software patches t" Security Boulevard Microsoft: Two New 0-Day Flaws in Exchange Server BrianKrebs Sep 30 Microsoft Corp. is investigating reports that attackers are exploiting two previously unknown vulnerabilities in Exchange Server, a technology many organizations rely on to send and receive email. Microsoft says it is expediting work on software patches to plug the security holes. In the meantime, it is urging a subset of Exchange customers to enable a setting that could help mitigate ongoing attacks. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/microsoft-two-new-0-day-flaws-in-exchange-server/ Powered by Jetpack

Gabi Stapel posted: "On September 29, Microsoft security researchers announced two new zero-day vulnerabilities, CVE-2022-41040 and CVE-2022-41082 affecting Microsoft Exchange Server. The vulnerabilities allow remote code execution (RCE) when used in tandem. It is important t" Security Boulevard Microsoft Exchange Server Vulnerabilities CVE-2022-41040 and CVE-2022-41082 Gabi Stapel Sep 30 On September 29, Microsoft security researchers announced two new zero-day vulnerabilities, CVE-2022-41040 and CVE-2022-41082 affecting Microsoft Exchange Server. The vulnerabilities allow remote code execution (RCE) when used in tandem. It is important to note that both require authenticated access to the desired server before exploitation. Trend Micro gave the two vulnerabilities severity ratings of 8.8 […] The post Microsoft Exchange Server Vulnerabilities CVE-2022-41040 and CVE-2022-41082 appeared first on Blog. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/microsoft-exchange-server-vulnerabilities-cve-2022-41040-and-cve-2022-41082/ Powered by Jetpack

Chuck Randolph posted: "Legal and compliance teams engage with nearly every aspect of the organization, from labor law to contracts, to cybersecurity. The role they play to reduce workplace violence and other security risks often go unnoticed and are seldom discussed. It's worth" Security Boulevard Legal and compliance teams: Where do they fit in the physical security picture? Chuck Randolph Sep 30 Legal and compliance teams engage with nearly every aspect of the organization, from labor law to contracts, to cybersecurity. The role they play to reduce workplace violence and other security risks often go unnoticed and are seldom discussed. It's worth having those discussions, because legal and compliance teams often set workplace violence policies, interpret regulations… The post Legal and compliance teams: Where do they fit in the physical security picture? appeared first on Ontic. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/legal-and-compliance-teams-where-do-they-fit-in-the-physical-security-picture/ Powered by Jetpack

Zbigniew Banach posted: " A cybersecurity framework provides a formal and comprehensive set of guidelines to help organizations define their security policies, assess cybersecurity posture, and improve resilience. Cybersecurity frameworks specify security controls, risk assessmen" Security Boulevard How cybersecurity frameworks apply to web application security Zbigniew Banach Sep 30 Cybersecurity frameworks are formalized sets of guidelines for defining cybersecurity policies. This post explains why they are so useful and how you can use the most popular NIST framework when building your application security program. The post How cybersecurity frameworks apply to web application security appeared first on Invicti. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/09/how-cybersecurity-frameworks-apply-to-web-application-security/ Powered by Jetpack