Daily digest for Security Boulevard, on December 3, 2022

Davi Ottenheimer posted: "If you read the tragic suicide news about American service in the military, you may sense a tone of responsibility."One suicide is too many and MARMC leadership is taking a proactive approach to support the team, improve mental fitness, and manage the str" Security Boulevard Kroger Says It's Lawful to Harass Workers Into Suicide Davi Ottenheimer Dec 3 If you read the tragic suicide news about American service in the military, you may sense a tone of responsibility. "One suicide is too many and MARMC leadership is taking a proactive approach to support the team, improve mental fitness, and manage the stress of its sailors," Rieger said. "We remain fully engaged with our sailors … Continue reading Kroger Says It's Lawful to Harass Workers Into Suicide → Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/12/kroger-says-its-lawful-to-harass-workers-into-suicide/ Powered by Jetpack

SignMyCode – Blog posted: " While purchasing the Code Signing Certificate, particularly EV Code Signing Certificate, we all came across the term Windows Defender SmartScreen. But, only a few understand the term correctly and purchase the right digital solution. SmartScreen has b" Security Boulevard The Fundamentals of Windows Defender SmartScreen SignMyCode – Blog Dec 3 While purchasing the Code Signing Certificate, particularly EV Code Signing Certificate, we all came across the term Windows Defender SmartScreen. But, only a few understand the term correctly and purchase the right digital solution. SmartScreen… Read More The Fundamentals of Windows Defender SmartScreen The post The Fundamentals of Windows Defender SmartScreen appeared first on SignMyCode - Blog. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/12/the-fundamentals-of-windows-defender-smartscreen/ Powered by Jetpack

CheapSSLWeb.com Resources posted: " While there is an increased adaptation of technology, it is also true that the rate of online attacks is also increasing. Every day, tons of cyber threats lurk around, and it just takes a lack of proper website security to compromise data worth millions." Security Boulevard 7 Cheap OV SSL Certificates of 2023 CheapSSLWeb.com Resources Dec 2 While there is an increased adaptation of technology, it is also true that the rate of online attacks is also increasing. Every day, tons of cyber threats lurk around, and it just takes a lack of proper website security to compromise data worth millions. To avoid such catastrophe, proper websiteRead More The post 7 Cheap OV SSL Certificates of 2023 appeared first on CheapSSLWeb.com Resources. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/12/7-cheap-ov-ssl-certificates-of-2023/ Powered by Jetpack

CheapSSLWeb.com Blog posted: " What is Symmetric Key Encryption and Why Does it Matter in the Modern World? The internet works in mysterious ways. Behind one website, multiple components and parts are working together to get the users access to the page. One of these components is " Security Boulevard What is Symmetric Key Encryption? [An In-Depth Guide] CheapSSLWeb.com Blog Dec 2 What is Symmetric Key Encryption and Why Does it Matter in the Modern World? The internet works in mysterious ways. Behind one website, multiple components and parts are working together to get the users access to the page. One of these components is encryption, which essentially secures the connection betweenRead More The post What is Symmetric Key Encryption? [An In-Depth Guide] appeared first on CheapSSLWeb.com Blog. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/12/what-is-symmetric-key-encryption-an-in-depth-guide/ Powered by Jetpack

NuData Security posted: "Fraudsters are always adapting to take advantage of any weakness they can find, and as consumer habits changed across 2022, attacks have changed alongside them. The post Consumer & Risk Trends Q4 2022 appeared first on NuData Security, A Mastercard C" Security Boulevard Consumer & Risk Trends Q4 2022 NuData Security Dec 2 Fraudsters are always adapting to take advantage of any weakness they can find, and as consumer habits changed across 2022, attacks have changed alongside them. The post Consumer & Risk Trends Q4 2022 appeared first on NuData Security, A Mastercard Company. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1947867 Powered by Jetpack

Bruce Schneier posted: "At a GMC plant. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here. " Security Boulevard Friday Squid Blogging: Legend of the Indiana Oil-Pit Squid Bruce Schneier Dec 2 At a GMC plant. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1947865 Powered by Jetpack

Ailine Contreras posted: " We've heard about Zero Trust for years, yet the strategy has been slow to gain traction. Thanks to the growing adoption of cloud services and the enormous changes in working patterns, including hybrid and remote work, Zero Trust is gaining momentum. It's" Security Boulevard Why Zero Trust Security Matters Now Ailine Contreras Dec 2 It's no longer a question of why you need Zero Trust, but how soon can you adopt the strategy. In this webinar, LogRhythm CISO Andrew Hollister, discusses the importance of Zero Trust and reveals best practices to adopt this security architecture to ensure success. The post Why Zero Trust Security Matters Now appeared first on LogRhythm. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1947869 Powered by Jetpack

Felicia Zhang posted: "Follow along with our series of holiday cybersecurity tips. We will be updating this blog daily and posting tips on our social media up until Dec. 24th. Think of it as an advent calendar, curated for security professionals! We hope that this series will s" Security Boulevard 24 Security Lessons to Remember This Holiday Season Felicia Zhang Dec 2 Daily cybersecurity tips to fight against holiday scams this season. Think of it as an advent calendar, curated for security professionals! Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/12/24-security-lessons-to-remember-this-holiday-season/ Powered by Jetpack

Kaustubh Jagtap posted: " .bs-section.bs-section-22a6f594be9f54931f9fc2ec4251f72802be576e{ background-image: url(https://www.safebreach.com/wp-content/uploads/2022/01/blog_banner.png);background-position: center center;background-size: cover;} Dec 2, 2022 SafeBreach Cov" Security Boulevard SafeBreach Coverage for US-CERT Alert (AA22-335A) – Cuba Ransomware Kaustubh Jagtap Dec 2 SafeBreach coverage for US-CERT Alert (AA22-335A) - Cuba Ransomware The post SafeBreach Coverage for US-CERT Alert (AA22-335A) – Cuba Ransomware appeared first on SafeBreach. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/12/safebreach-coverage-for-us-cert-alert-aa22-335a-cuba-ransomware/ Powered by Jetpack

Bruce Schneier posted: "We know that complexity is the worst enemy of security, because it makes attack easier and defense harder. This becomes catastrophic as the effects of that attack become greater. In A Hacker's Mind (coming in February 2023), I write: Our societal sy" Security Boulevard Existential Risk and the Fermi Paradox Bruce Schneier Dec 2 We know that complexity is the worst enemy of security, because it makes attack easier and defense harder. This becomes catastrophic as the effects of that attack become greater. In A Hacker's Mind (coming in February 2023), I write: Our societal systems, in general, may have grown fairer and more just over the centuries, but progress isn't linear or equitable. The trajectory may appear to be upwards when viewed in hindsight, but from a more granular point of view there are a lot of ups and downs. It's a "noisy" process. Technology changes the amplitude of the noise. Those near-term ups and downs are getting more severe. And while that might not affect the long-term trajectories, they drastically affect all of us living in the short term. This is how the twentieth century could—statistically—both be the most peaceful in human history and also contain the most deadly wars... Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/12/existential-risk-and-the-fermi-paradox/ Powered by Jetpack

Marc Handelman posted: "Our thanks to USENIX for publishing their Presenter's USENIX Security '22 Conference tremendous content on the organization's' YouTube channel. Permalink" Security Boulevard USENIX Security '22 – Martin R. Albrecht, Raphael Eikenberg, Kenneth G. Paterson 'Breaking Bridgefy, Again: Adopting Libsignal Is Not Enough' Marc Handelman Dec 2 Our thanks to USENIX for publishing their Presenter's USENIX Security '22 Conference tremendous content on the organization's' YouTube channel. Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/12/usenix-security-22-martin-r-albrecht-raphael-eikenberg-kenneth-g-paterson-breaking-bridgefy-again-adopting-libsignal-is-not-enough/ Powered by Jetpack

Grip Security Blog posted: "Forbes: 14 Essential Considerations For A Business Building Its First Mobile AppNov 15, 2022Nov 15, 202214 members of Forbes Technology Council share some essential considerations for a business building its first mobile app.This is some text inside of a " Security Boulevard Grip Security Blog 2022-12-02 14:56:48 Grip Security Blog Dec 2 Forbes: 14 Essential Considerations For A Business Building Its First Mobile App Nov 15, 2022 Nov 15, 2022 14 members of Forbes Technology Council share some essential considerations for a business building its first mobile app. This is some text inside of a div block. This is some text inside of a div block. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1947876 Powered by Jetpack

Grip Security Blog posted: "CyberWire: Joint agency warning on Hive ransomwareNov 18, 2022Nov 18, 2022the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Health and Human Services (HHS) released a joint Cybers" Security Boulevard Grip Security Blog 2022-12-02 14:56:48 Grip Security Blog Dec 2 CyberWire: Joint agency warning on Hive ransomware Nov 18, 2022 Nov 18, 2022 the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Health and Human Services (HHS) released a joint Cybersecurity Advisory (CSA) on the Hive ransomware group. This is some text inside of a div block. This is some text inside of a div block. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1947873 Powered by Jetpack

Grip Security Blog posted: "" Security Boulevard Grip Security Blog 2022-12-02 14:56:48 Grip Security Blog Dec 2 Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1947871 Powered by Jetpack

Alexa Cardenas posted: "Most Common SSH Vulnerabilities & How to Avoid Them Alexa Cardenas Fri, 12/02/2022 - 10:55 4 views Most common SSH vulnerabilities Secure Shell uses encryption algorithms.  These algorithms change and as they age, they become more vulnerable" Security Boulevard Most Common SSH Vulnerabilities & How to Avoid Them Alexa Cardenas Dec 2 Most Common SSH Vulnerabilities & How to Avoid Them Alexa Cardenas Fri, 12/02/2022 - 10:55 4 views Most common SSH vulnerabilities Secure Shell uses encryption algorithms.  These algorithms change and as they age, they become more vulnerable.  When they become vulnerable bad guys can take advantage of that to do bad stuff.  Also, remember how users can use keys rather than a password to login? These SSH keys never expire.  So, imagine Susan is a system admin and she has access to several servers. She used SSH keygen to generate keys and she now can login to the systems via Secure Shell. Susan leaves the company, which doesn't impact the servers at all.  However, if nobody removes Susan's keys from the servers, she still has access. Or what if a malicious actor got a copy of Susan's keys?  Or someone else's keys?  There would be evidence of these things in SSH logs, but only if someone at Susan's company is monitoring those SSH logs. Another very useful capability of SSH and the use of keys is the ability to pivot from one machine to the next.  Imagine a sys admin logs into one server and performs a task.  They then can pivot from one server to the next without having to logout and the login to the next server.  They can then pivot from server 2 to 3, 3 to 4, on and on to perform whatever task they needed to do.  Very useful right?  But imagine if a bad guy gets access to one server.  He can then pivot from server 1 to 2, 2 to 3, etc.  It's never that easy in the real world.  The bad guy gets access to server 1 and then he/she hunts and pecks until they get access to another server and then repeat until they find something interesting/useful. Other common SSH vulnerabilities are exposed via configuration and settings. In most organization system administrators can disable or change most or all SSH configurations; these settings and configurations can significantly increase or reduce SSH security risks. Here are examples of these common configuration settings that reduce security risks: Disabling password-based authentication - choosing this configuration makes brute-force password attacks impossible. Disabling root account remote login - This prevents users from logging in as the root (super user) account.  If a user needs high level of privilege, there are things like sudo that will enable them to do this if their job requires this level of access. Allow or deny access based on user or IP address - this a Secure Shell server that supports a particular business unit or app team, only allow that app team to access the system. Port forwarding – (aka SSH Tunneling) is another useful capability for forwarding or tunneling application ports from client to server, or vice versa.  Imagine a Linux box being able to listen for incoming / public requests and based on the type of request (file server, printer, email, et.) it knows where to send (tunnel) the traffic to another internal server.  Very useful.  But port forwarding requires careful configuration and hardening to make sure bad stuff from the internet is not forwarded into the private network. What is key sprawl? Key sprawl, or a lack of SSH key management, is a common situation that increases other SSH security risks. Did you know a company with 5,000 servers can have as many as 600,000 keys?  Or that a company with 10,000 servers would easily have over 1,000,000 keys?  SSH experts at Venafi have worked with many organizations that have these numbers of active SSH keys. It's vital to note that SSH keys don't expire; while this can be convenient for SSH key management it is also a major vulnerability.  We discussed vulnerabilities connected to users' SSH keys above. There are also security risks connected with "host keys," which are the other authentication method used to identify the Secure Shell server. How do automated secure shell processes work? When a Secure Shell client logs into a server for the first time, the server presents this 'host key' and essentially says "hi, this is me.  Here's my key.  Do you trust me?"  The user is supposed to know if they should trust this server because they should know the key.  Once the user says, "Yes, I know that key and, yes, I trust you" that key is added to what is called the known hosts file.  The next time the user goes to that server, the server presents its key. Because the key is already in the known hosts file, the user now automatically trusts the server and the "Do you trust me" message is no longer displayed.  This process is a good thing because it uniquely identifies each Secure Shell server.  However, the use of virtualization and automation tools that all organizations in the world use often create a significant problem because in many organizations there are hundreds or thousands or tens of thousands of different servers using with the same 'host key.  Unfortunately, this happens routinely in many, if not most organizations because servers are cloned after the host key was created.  If one of those servers were to get compromised a bad guy can now impersonate any server that uses the same key by leveraging a man in the middle attack.  With just over 20 new types of malwares in 2019 targeting SSH servers, and 2020 hot on its heels, one could see how even one compromised key could to infection with one of these types of malware, which would be potentially catastrophic. Here are examples of real world SSH threats: Kaiji (May 2020) targeting IoT and Linux hosts trying to brute-force root account authentication Infamous Sony breach (2014) was done with the use of stolen SSH key In May 2019 it was found that Cisco Nexus 9000 series has hardcoded root authorized key Late 2019 Kinsing Malware attacks targeting container environments Even popular pen-testing solutions like Metasploit have tools to discover SSH keys and perform pivoting attack, so one should not be super bright to attack your organization How to protect your SSH keys and certificates Now that you know about all these SSH vulnerabilities and security threats, what can you do to protect your organization? Luckily for you, Venafi has you covered. SSH Protect is your one stop shop for SSH machine identity discovery, inventory, visibility, and management. With this platform you can easily see what keys are being used where on your network, who has access, and choose when to rotate them. Get started today with a free SSH Risk Assessment from Venafi! Get a FREE & Confidential SSH Risk Assessment from Venafi! Related Posts All About SSH Key Management and SSH Machine Identities Using SSH Certificates Instead of SSH Keys How You Can Effectively Manage Your SSH Keys Towards Zero Trust Security Alexa Hernandez SSH Protecting your SSH certificates is vital to maintaining a secure and successful machine identity management program. When SSH machine identities are properly secured, this can lead to key sprawl, lost keys, lack of policy enforcement, data breach, and much more. Knowledge is power, so let's look at the most common SSH vulnerabilities so you can be sure your organization is protected from them! Do you know where all your SSH keys and certificates are? Take back control of your SSH machine identities. "> Off UTM Medium Resources UTM Source Blog UTM Campaign Recommended-Resources Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/12/most-common-ssh-vulnerabilities-how-to-avoid-them/ Powered by Jetpack

Guest Expert posted: " Keshav Malik Keshav is a full-time Security Engineer who loves to build and break stuff. He is constantly looking for new and exciting technologies and enjoys working with diverse technologies in his spare time. He loves music and plays ba" Security Boulevard 9 Things to Consider When Choosing an SCA Tool Guest Expert Dec 2 Software composition analysis is an essential part of application security. Here are the important factors to consider when selecting an SCA scanner to be sure it is well-suited to your needs. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/12/9-things-to-consider-when-choosing-an-sca-tool/ Powered by Jetpack

Marc Handelman posted: " via the webcomic talent of the inimitable Daniel Stori " Security Boulevard Daniel Stori's Turnoff.US – 'inside The Linux Kernel' Marc Handelman Dec 2 via the webcomic talent of the inimitable Daniel Stori at Turnoff.US! Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2022/12/daniel-storis-turnoff-us-inside-the-linux-kernel/ Powered by Jetpack