Daily digest for Security Boulevard, on January 4, 2023

Gil Hecht posted: " Gartner recently emphasized the need for much stricter security in a recent report, "Hype Cycle for Storage and Data Protection Technologies, 2022." Gartner analyst Julia Palmer focused on emerging innovative storage and data protection technologies. She" Security Boulevard Gartner Promotes the Need for Heightened Storage & Backup Security to Combat Ransomware Gil Hecht Jan 4 Gartner recently emphasized the need for much stricter security in a recent report. Gartner analyst Julia Palmer focused on emerging innovative storage and data protection technologies. The post Gartner Promotes the Need for Heightened Storage & Backup Security to Combat Ransomware appeared first on Continuity. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/gartner-promotes-the-need-for-heightened-storage-backup-security-to-combat-ransomware-3/ Powered by Jetpack

Robert Vamosi posted: " How Mayhem Fits Into the Federal Guidance for Securing the Software Supply Chain Robert Vamosi · January 04, 2023 In a previous blog post, we looked at the federal government's recent release of the Securing The Software Supply Chain series, i" Security Boulevard How Mayhem Fits Into the Federal Guidance for Securing the Software Supply Chain Robert Vamosi Jan 4 In this blog post, we'll take a deeper look at the NIST guidance for software development. In particular, we'll look at PW 8.2 in NIST 800-218. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/how-mayhem-fits-into-the-federal-guidance-for-securing-the-software-supply-chain/ Powered by Jetpack

Joe Garber posted: " Phishing-resistant MFA is critical in today's world, and the industry knows it: In a recent survey conducted by Censuswide, one out of every two senior security and IT executives said that becoming more phishing resistant was their top cybersecurity prio" Security Boulevard Why Phishing-Resistant MFA is Critical in 2023, And How CBA Can Help Joe Garber Jan 4 Phishing-resistant MFA is critical in today's world, and the industry knows it: In a recent... The post Why Phishing-Resistant MFA is Critical in 2023, And How CBA Can Help appeared first on Axiad. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/why-phishing-resistant-mfa-is-critical-in-2023-and-how-cba-can-help/ Powered by Jetpack

Gilad David Maayan posted: "     What is Kubernetes Security? Kubernetes is a highly extensible and portable container orchestration platform commonly used by enterprises and various industries worldwide. This rapidly expanding ecosystem helps manage container work" Security Boulevard Locking Down Kubernetes: RBAC, Audit Logs, etcd Security and More Gilad David Maayan Jan 4     What is Kubernetes Security? Kubernetes is a highly extensible and portable container orchestration platform commonly used by enterprises and various industries worldwide. This rapidly expanding ecosystem helps manage container workloads and services at a massive scale. However, while some built-in features can help secure your Kubernetes workloads, complete coverage typically requires additional Kubernetes […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/locking-down-kubernetes-rbac-audit-logs-etcd-security-and-more/ Powered by Jetpack

Sumanth Kumar posted: "Policyholders prefer a digital style of interaction over a physical one. However, identity verification problems frequently stand out, which causes significant onboarding dropout rates. This blog article examines how to resolve this using an AI-powered ve" Security Boulevard Identity Verification in Insurance: ID checks & Face Match Sumanth Kumar Jan 3 Policyholders prefer a digital style of interaction over a physical one. However, identity verification problems frequently stand out, which causes significant onboarding dropout rates. This blog article examines how to resolve this using an AI-powered verification method. According to a recent study, 44% of those between the ages of 18 and 29 who had insurance […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/identity-verification-in-insurance-id-checks-face-match/ Powered by Jetpack

Davi Ottenheimer posted: "Russian soldiers had been gathered together into a building and told to watch Putin's new year's message. Some or even many allegedly turned on their cell phones. Then they were dead. Russia's defence ministry said on Wednesday that 89 servicemen were kil" Security Boulevard Hundreds of Russian Soldiers Using Cell Phones Were Just Targeted and Killed Davi Ottenheimer Jan 3 Russian soldiers had been gathered together into a building and told to watch Putin's new year's message. Some or even many allegedly turned on their cell phones. Then they were dead. Russia's defence ministry said on Wednesday that 89 servicemen were killed in the Ukrainian attack on Makiivka over the weekend, adding the main reason … Continue reading Hundreds of Russian Soldiers Using Cell Phones Were Just Targeted and Killed → Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/hundreds-of-russian-soldiers-using-cell-phones-were-just-targeted-and-killed/ Powered by Jetpack

Lookout Blogs posted: "Over the winter holidays, Southwest Airlines, one of the U.S.' largest and most reputable airlines was forced to cancel around 45% of its scheduled flights. It's difficult to pinpoint the exact reason for this meltdown, but in my opinion this is likely du" Security Boulevard Avoid a Meltdown by Modernizing IT Security | Lookout Lookout Blogs Jan 3 Over the winter holidays, Southwest Airlines , one of the U.S.' largest and most reputable airlines was forced to cancel around 45% of its scheduled flights. It's difficult to pinpoint the exact reason for this meltdown, but in my opinion this is likely due to outdated infrastructure and IT sys... Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/avoid-a-meltdown-by-modernizing-it-security-lookout/ Powered by Jetpack

Bolster Research Labs posted: "DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a security protocol that protects brands from email-based impersonation, phishing, and other malicious attacks. The protocol helps to ensure that only emails from authorized source" Security Boulevard 4 Key Limitations of DMARC For Brand Protection Bolster Research Labs Jan 3 Learn about DMARC security and how to effectively implement and manage it to protect your brand from email impersonation and phishing attacks. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/4-key-limitations-of-dmarc-for-brand-protection/ Powered by Jetpack

Anton Chuvakin posted: "This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our fifth Threat Horizons Report (full version) that we just released (the official blog for #1 report, my unofficial blogs for #2, " Security Boulevard Google Cybersecurity Action Team Threat Horizons Report #5 Is Out! Anton Chuvakin Jan 3 This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our fifth Threat Horizons Report (full version) that we just released (the official blog for #1 report, my unofficial blogs for #2, #3 and #4). My favorite quotes from the report follow below: "Identity and trust relationships in and between cloud environments will continue to get more complex, challenging visibility and enabling threat actors to have wider and deeper impact on organizations. We anticipate an increase in targeting of identities that allow cross-platform authentication as actors recognise the value in compromising identities rather than endpoints. " [A.C. — this is one of our "intel-driven" predictions, and it just reminds everybody that even if you thought that 'identity in the cloud is important' than in reality it is even more important :-)] "The top malware used by short-term infections will still be cryptominers in 2023, but other forms of monetization, such as phishing or ransoming customer environments, could grow as well." [A.C. — to me, this reminds the security teams and SOCs in particular that in the cloud they need to move at cloud speed… A short-term system compromise is still compromise — and you are still owned, even if you are owned 1000 times of 10 minutes each :-)] "Threat actors diversified their initial access vectors. Weak passwords continued to be the most common factor at 41% of observed compromises. However, API key compromise [A.C. — take a look at this new resource!] played a role in nearly 20% of cases studied last quarter. […] In particular, the use of API compromise may suggest increased levels of automation by threat actors" [A.C. — while you talk about 'security automation' in general terms, attackers deploy new offensive automation…] Source: Google Cloud Threat Horizons Report 5 https://services.google.com/fh/files/blogs/gcat_threathorizons_full_jan2023.pdf "Mandiant estimated that 15 percent of their incident response investigations involved public cloud assets, demonstrating a shift in both enterprise planning and attacker operations against IT networks" [A.C. — this data point is from 2020, so treat this as a low boundary in 2023. This also reminds me that if you are owned, your cloud environment is probably also owned…] "Mandiant research indicates that threat actors are increasingly targeting backups to inhibit reconstitution after an attack. In addition, targeting, and in some cases creating, backups allows threat actors to engage in reconnaissance of affected organizations, escalate privileges, and gather intelligence. " [A.C. — not truly 'new news', but a useful reminder to those who assume, circa 2015, that 'backups solve ransomware'. It also reminds us that an unauthorized backup run is a solid indicator of compromise.] BTW, our advice here includes this gem: "Create IAM permissions that segment the access and roles needed for creation, deletion, and changes to backups, thereby ensuring that account compromises do not create a direct pathway to move to the backups. Monitor for events on backups and create alerts for these" While it sounds like an obvious tactic, it really is! And attackers do use it: "In Q3 Trust and Safety systems flagged free tier or trial accounts abusing Google Cloud resources by conducting outbound DDoS attacks. […] We observed the attackers creating cost-optimized GCE instances, and within 2 hours of creation 50% of these flagged projects triggered DDoS alerts." Now, go and read the report! Related posts: Google Cybersecurity Action Team Threat Horizons Report #4 Is Out! Google Cybersecurity Action Team Threat Horizons Report #3 Is Out! Google Cybersecurity Action Team Threat Horizons Report #2 Is Out! Illicit coin mining, ransomware, APTs target cloud users in first Google Cybersecurity Action Team Threat Horizons report All past and future reports are posted at Google Cybersecurity Action Team site. Google Cybersecurity Action Team Threat Horizons Report #5 Is Out! was originally published in Anton on Security on Medium, where people are continuing the conversation by highlighting and responding to this story. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/google-cybersecurity-action-team-threat-horizons-report-5-is-out/ Powered by Jetpack

Marc Handelman posted: "Our thanks to USENIX for publishing their Presenter's USENIX Security '22 Conference tremendous content on the organization's' YouTube channel. Permalink" Security Boulevard USENIX Security '22 – Yun Shen, Pierre-Antoine Vervier, Gianluca Stringhini 'A Large-Scale Temporal Measurement Of Android Malicious Apps: Persistence, Migration, And Lessons Learned' Marc Handelman Jan 3 Our thanks to USENIX for publishing their Presenter's USENIX Security '22 Conference tremendous content on the organization's' YouTube channel. Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/usenix-security-22-yun-shen-pierre-antoine-vervier-gianluca-stringhini-a-large-scale-temporal-measurement-of-android-malicious-apps-persistence-migration-and-lessons-learned/ Powered by Jetpack

Brent Sleeper posted: "What's the Difference Between CAPTCHA and reCAPTCHA? A common form of defense against bot and human-driven fraud, traditional CAPTCHAs (including reCAPTCHA, hCaptcha, and others) are widely used to fight malicious bots. From account takeovers to credentia" Security Boulevard What's the Difference between CAPTCHA and reCAPTCHA? Brent Sleeper Jan 3 What's the Difference Between CAPTCHA and reCAPTCHA? A common form of defense against bot and human-driven fraud, traditional CAPTCHAs (including reCAPTCHA, hCaptcha, and others) are widely used to fight malicious bots. From account takeovers to credential stuffing to hacking online traffic, organizations rely on these visual and audio challenges to protect their web properties.  All […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/whats-the-difference-between-captcha-and-recaptcha/ Powered by Jetpack

Synopsys Cybersecurity Research Center posted: "In this new Cybersecurity Research Center series, we analyze the OWASP Top 10, which is a list of the most common vulnerabilities in web applications.In application security, the Open Web Application Security Project (OWASP) Top 10 list is a valuable reso" Security Boulevard Cybersecurity Research Center Developer Series: The OWASP Top 10 Synopsys Cybersecurity Research Center Jan 3 In this new Cybersecurity Research Center series, we analyze the OWASP Top 10, which is a list of the most common vulnerabilities in web applications. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/cybersecurity-research-center-developer-series-the-owasp-top-10/ Powered by Jetpack

Theresa Mammarella posted: "  The "Sec" in DevSecOps introduces application security in an agile framework as part of a continuous development process, instead of as a secondary step to releasing software.  While adding security checks throughout the software development process has" Security Boulevard SCA and SAST: What Do They Do and How Can They Help Developers Like You? Theresa Mammarella Jan 3   Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/sca-and-sast-what-do-they-do-and-how-can-they-help-developers-like-you/ Powered by Jetpack

Marc Handelman posted: " via the respected" Security Boulevard Robert M. Lee's & Jeff Haas' Little Bobby Comic – 'WEEK 414' Marc Handelman Jan 3 via the respected security expertise of Robert M. Lee and the superlative illustration talents of Jeff Haas at Little Bobby Comic Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/robert-m-lees-jeff-haas-little-bobby-comic-week-414/ Powered by Jetpack

Pondurance posted: " History of the Breach LastPass first disclosed details of the breach in August 2022, and they have issued several updates over the past months with the most recent being just before Christmas (Dec 22 2022). Here is a summary of each discl" Security Boulevard LastPass Hacked – What Now? Pondurance Jan 3 History of the Breach LastPass first disclosed details of the breach in August 2022, and they have issued several updates over the past months with the most recent being just before Christmas (Dec 22 2022). Here is a summary of each disclosure on that timeline: August 25, 2022 Unauthorized party gained access to parts of... The post LastPass Hacked – What Now? appeared first on Pondurance. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/lastpass-hacked-what-now/ Powered by Jetpack

rezilion posted: "Regulatory demands now make an SBOM an essential in any organization. The Biden Administration released a memo in September 2022 that directs federal agencies to adopt guidelines from the National Institute of Standards and Technology (NIST) for securing " Security Boulevard The Regulatory Landscape Makes SBOMs a Must Have rezilion Jan 3 Regulatory demands now make an SBOM an essential in any organization. The Biden Administration released a memo in September 2022 that directs federal agencies to adopt guidelines from the National Institute of Standards and Technology (NIST) for securing software used by the federal government and attest to its security. The memo is directed to the ... The Regulatory Landscape Makes SBOMs a Must Have The post The Regulatory Landscape Makes SBOMs a Must Have appeared first on Rezilion. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/the-regulatory-landscape-makes-sboms-a-must-have/ Powered by Jetpack

Richi Jennings posted: "GOP: No FYP for UTikTok's days are numbered in the U.S.—if the GOP has its way. Because the app is "a sophisticated surveillance tool" that embodies China's "techno-totalitarian control," they say.3/ Can you feel which way the wind is blowing? The answer," Security Boulevard 'We Must Ban TikTok!' — Senate, House, FCC Agree – Security Boulevard Richi Jennings Jan 3 GOP: No FYP for U TikTok's days are numbered in the U.S.—if the GOP has its way. Because the app is "a sophisticated surveillance tool" that embodies China's "techno-totalitarian control," they say. 3/ Can you feel which way the wind is blowing? The answer, my friend, is in today's #SBBlogwatch. At @TechstrongGroup's @SecurityBlvd: https://t.co/muZCwiiOCS — @Richi Jennings (@RiCHi) January 3, 2023 Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1951232 Powered by Jetpack

Bruce Schneier posted: "A group of Chinese researchers have just published a paper claiming that they can—although they have not yet done so—break 2048-bit RSA. This is something to take seriously. It might not be correct, but it's not obviously wrong. We have " Security Boulevard Breaking RSA with a Quantum Computer Bruce Schneier Jan 3 A group of Chinese researchers have just published a paper claiming that they can—although they have not yet done so—break 2048-bit RSA. This is something to take seriously. It might not be correct, but it's not obviously wrong. We have long known from Shor's algorithm that factoring with a quantum computer is easy. But it takes a big quantum computer, on the orders of millions of qbits, to factor anything resembling the key sizes we use today. What the researchers have done is combine classical lattice reduction factoring techniques with a quantum approximate optimization algorithm. This means that they only need a quantum computer with 372 qbits, which is well within what's possible today. (The ... Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/breaking-rsa-with-a-quantum-computer/ Powered by Jetpack

Richi Jennings posted: "TikTok's days are numbered in the U.S.—if the GOP has its way. Because the app is "a sophisticated surveillance tool" that embodies China's "techno-totalitarian control," they say. House Republicans and the Trump-appointed FCC chair are stepping up the" Security Boulevard 'We Must Ban TikTok!' — Senate, House, FCC Agree Richi Jennings Jan 3 TikTok's days are numbered in the U.S.—if the GOP has its way. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/01/we-must-ban-tiktok-senate-house-fcc-agree/ Powered by Jetpack