Daily digest for Security Boulevard, on April 26, 2023

Avast Blog posted: " September 15, 2008: The bankruptcy of Lehman Brothers triggers a 4.5% one-day drop in the Dow Jones Industrial Average, then the largest decline since the attacks of September 11, 2001.   " Security Boulevard SMB cyber safety: De-risking catastrophic events Avast Blog Apr 26 September 15, 2008: The bankruptcy of Lehman Brothers triggers a 4.5% one-day drop in the Dow Jones Industrial Average, then the largest decline since the attacks of September 11, 2001.   Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/smb-cyber-safety-de-risking-catastrophic-events/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Sue Poremba posted: "When the Cybersecurity and Infrastructure Security Agency (CISA) announced its guidelines to promote better security of the software supply chain, the agency touted the software bill of materials (SBOM) as "a key building block in software security and so" Security Boulevard SBOMs' Role in Open Source Security Sue Poremba Apr 26 When the Cybersecurity and Infrastructure Security Agency (CISA) announced its guidelines to promote better security of the software supply chain, the agency touted the software bill of materials (SBOM) as "a key building block in software security and software supply chain risk management." One of the key areas in CISA's strategy is to improve security […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/sboms-role-in-open-source-security/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Jemin Desai posted: "To develop a WordPress website, you need to select a theme. However, sometimes, the theme doesn't align with your business objectives and lacks in providing features to stakeholders. To prevent such conditions, the best way is to perform WordPress t" Security Boulevard 7 Steps to Customize Your WordPress Website Jemin Desai Apr 26 To develop a WordPress website, you need to select a theme. However, sometimes, the theme doesn't align with your business objectives and lacks in providing features to stakeholders. To prevent such conditions, the best way is to perform WordPress theme customization. Customizing a WordPress website helps integrate required plugins, provide impeccable functionalities and revamp [...] The post 7 Steps to Customize Your WordPress Website appeared first on POSITIWISE. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/7-steps-to-customize-your-wordpress-website/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Rachel Stoward posted: " There just aren't enough cyber security professionals out there to meet the demand for their skills. The estimated personnel shortfall in the UK cyber workforce in 2022 was over 14,000.  When hiring, you may not be able to tick off every box on your l" Security Boulevard Which 'Soft Skills' Are Important When Hiring Your Cyber Security Team?  Rachel Stoward Apr 26 There just aren't enough cyber security professionals out there to meet the demand for their skills. The estimated personnel shortfall […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/which-soft-skills-are-important-when-hiring-your-cyber-security-team/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Victor Cheung posted: " If you're " Security Boulevard Why Micro-Segment Networks? – Importance, Strategy & Best Practices Victor Cheung Apr 26 If you're aiming to secure your organization's network and data, then micro-segmentation is definitely worth your attention. If your company uses a traditional network architecture, then all devices are connected to one network where everything connected to the network can communicate freely with one another. The problem with this approach is that the network and all devices are vulnerable to attack. When an attacker compromises one device with access to the network, the attacker can compromise other devices by moving laterally across the network. One of the best solutions to the mentioned security threat is micro-segmentation, and it can do more than just secure your organization's network and data. As its name implies, micro-segmentation segments a network into smaller networks. But how is this done, and why is it important? TABLE OF CONTENTS What is Network Micro-Segmentation? How Does Micro-Segmentation Work? Micro-Segmentation's Importance: More than just Security Micro-Segmentation Should be Part of a Larger Strategy Top 5 Micro-Segmentation Best Practices Mamori.io Simplifies Micro-Segmentation and ZTNA What is Network Micro-Segmentation? Micro-segmentation divides a network into smaller, isolated and secure zones, allowing organizations to apply unique security controls over each zone's access to data and applications based on their security requirements. Segments can be created by workloads, applications, hosts, operating systems and virtual machines. How Does Micro-Segmentation Work? If you don't know how micro-segmentation works, then you'll have no idea on how it should be deployed in your organization. Micro-segmentation secures a network by allowing a particular type of traffic and blocking all other traffic. It is beyond perimeter security and firewalls. Here are a few ways how micro-segmentation works: Network-based micro-segmentation: This approach segments a network based on IP addresses, subnets, or virtual local area network (VLAN). Application-based micro-segmentation: This approach creates segments based on applications, where each application can be placed in its own segment. User-based micro-segmentation: This involves segmenting a network based on user roles or identities. Policy-based micro-segmentation: This approach involves segmenting a network based on specific security policies or compliance requirements. Host-based micro-segmentation: This involves creating segments based on devices and typically requires agents installed on those devices. Based on this and your knowledge on your company's network and resources, you should have an idea on how to micro-segment your network. But before we get to that, you need to establish a goal on why you want to micro-segment in the first place. In other words, why would you want to go through the trouble of micro-segmenting your network? Micro-Segmentation's Importance: More than just Security At its essence, micro-segmentation is important because it help organizations achieve their desired level of security and become compliant. Below are reasons why micro-segmentation is important: Reduced Attack Surface: An attacker looking to steal data from your organization requires access to your network. If all devices, apps and database are connected to the network, then the attacker can potentially take ALL the data. With micro-segmentation, the surface area of the attack is greatly limited because the attacker cannot move laterally across networks. Even if the attacker penetrates one network, data within other segments are completely shielded from the attacker. Granular Security Controls: Because each segmented network has its own set of security policies, more granular security controls can be applied. One network with less sensitive data can have a set of security controls, while another network or networks with more sensitive data can have more restrictive security and access controls. Improved Regulatory Compliance: Not all data or systems are subject to regulatory compliance. Thus, administrators can unique networks that are subject to compliance, and create compliance policies that only applies to those networks.    Protect Critical Data & Apps: Systems that have access to critical data and applications can be segmented from the main network for an additional layer of security. This goes back to the concept of reducing attack surface, so an attacker who breaches the network will be blocked from accessing the segmented network with access to critical data and applications. Ease of Management: As opposed to creating countless security rules in one network, micro-segmentation allows create pockets of policies based on each segment's security needs. For instance, systems subject to regulatory compliance can be segmented with its own security policies, separate from the rest of the systems and their own set of controls. Also, a segmented network makes it easier to isolate security incidents and identify threats. Better Performance: Sometimes, network traffic can become congested and adversely affect the performance of critical applications. Micro-segmentation enables organizations to segment critical applications so they have the bandwidth to operate efficiently. Micro-segmentation may seem like a reliable solution to protect your critical data. However, it is only one security layer. It should be used as part of a greater data access and security strategy. Micro-Segmentation Should be Part of a Larger Strategy First, micro-segmentation is NOT a strategy on its own. Instead, it should be part of a larger data access and security strategy. That's because micro-segmentation is a feature that only governs the network, whereas your larger data security strategy includes security controls on other layers such as endpoint protection, two factor authentication (2FA), Privileged Access Management (PAM), intrusion detection, and more. Here, we'll discuss which strategies micro-segmentation typically fits into.   Micro-Segmentation as Part of a Cybersecurity Strategy A cybersecurity strategy often involves several components – risk assessment, security policies, network security, endpoint security and incident response. Microsegmentation assists with network security with its ability to divide networks into segment, allowing each segment to have its set of security policies. Although microsegmentation is just one layer of security, it plays a crucial role when it comes to stopping ransomware hackers by preventing them from moving laterally after breaching a network. In concept, this works similarly to PAM for cybersecurity, both of which reduces the attack surface in different ways.   However, it is important to note that microsegmentation alone is not enough to fully stop a cybercriminal. Other features, such as network traffic monitoring and alerts, as well as intrusion detection and blocking, are also necessary, shown in the image below. With smaller network segments, suspicious activities are typically more easily identified, greatly speeding up incident response plans. Micro-Segmentation as Part of a Zero Trust Security Strategy Zero Trust is a security strategy that requires any device, user, or application to be verified and authenticated before granting access to any resources. Typically, organizations deploy microsegmentation as part of a Zero Trust security strategy and apply authentication and access controls down to each network segment. This approach is called Zero Trust Network Access (ZTNA), where segmentation can be based on identity and role-based workloads. In other words, the network can identify which workload a device or user has access to (based on policy settings) and direct that person or application to the appropriate network or micro-segmented network. Top 5 Micro-Segmentation Best Practices Before you start implementing micro-segmentation, it is essential to understand a few basic best practices and common use cases so you won't have to fix and rebuild your network. Follow the Principle of Least Privilege When someone has access to your network, it doesn't mean that they should have access to everything or be allowed to do anything they want. Every person or application has a specific role and requires access to certain resources to complete their job. That's why it's crucial to implement least privileged access to restrict what a person can access and what activities they are authorized to perform. At Mamori.io, our Privileged Access Management solution (M4PAM) restricts a person's access down to the database level. Microsegment for Third-Party Access In most cases, you have no control over how third parties handle your data. They might leave their laptop unlocked while away from their desk or leave your sensitive files sitting on their desktop. In fact, many of the most notable breaches, such as Okta and Toyota, were caused by third-party data breaches. That's why a common practice is to microsegment a network for all third-party access and secure that third-party network with security policies to ensure that your data is protected from mishandling and misuse. Combine Similar Network Resources Data that requires lower security standards can be grouped into one network, while data and resources that require higher levels of security or compliance standards can be grouped into another. This practice simplifies your security policies for each network, especially when handling data regulated by compliance standards. Avoid Over or Under-Segment Many organizations, when they first implement micro-segmentation, often start with multiple segments because they assume it creates the highest level of security. However, over-segmentation not only hinders employee productivity but also creates more complications for the security team as there are too many networks to manage. On the other hand, under-segmentation would not provide the intended security, such as minimizing the attack surface for cyber criminals. Additionally, more granular security controls cannot be implemented if many resources are on the same network. Implement Zero Trust Network Access Micro-segmentation secures resources connected to a network by dividing them up. Equally important is how those networks are accessed in the first place. A compromised device with access to a network containing sensitive files can render all micro-segmentation efforts useless. That's why organizations need to implement Zero Trust Network Access (ZTNA), ensuring that all devices, users, or applications are verified and authenticated before accessing the network. Mamori.io Simplifies Micro-Segmentation and ZTNA Mamori.io provides several advantages for micro-segmentation by enabling IP and port-level access controls, which allow you to isolate access for Dev, QA, Staging, Production, and applications. This feature is especially useful when working with external consultants that helps you with your development work, who can access only the code repositories but not the test database. Additionally, Mamori.io uses a zero-trust model and can segment a network based on roles or identity workload. Furthermore, Mamori.io offers a ZTNA solution that secures all devices with an IP address through identity-based and two-factor authentication (2FA), enforces least privileged access, detects and blocks intrusions, and provides monitoring, alerting, and recording for audit reports. Micro-segmentation and ZTNA is just the tip of the iceberg of what Mamori.io can do. See how we can help prevent ransomware and achieve compliance with our all-in-one security and data privacy solution. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/why-micro-segment-networks-importance-strategy-best-practices/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Mark Allers posted: " Artificial intelligence (AI) works via a set of probabilities. When an AI algorithm provides a recommendation, under the hood, the algorithm will make a determination such as "this file has been classified and has a 29% chance of being malware". " Security Boulevard AI vs Zero Trust Mark Allers Apr 25 Artificial intelligence (AI) works via a set of probabilities. When an AI algorithm provides a recommendation, under the hood, the algorithm will make a determination such as "this file has been classified and has a 29% chance of being malware". What is the suitable threshold to raise concerns to the security engineer? 40% chance? 90% chance? The AI is never 100% sure if something is good or bad unless it has already seen it. All AI is based on machine learning algorithms. This means that to classify a piece of information or make a recommendation, it must be trained on a training dataset of historical information. This entails training the machine learning (ML) algorithm on a  training dataset of old or previously seen malware in the cybersecurity field. The ML algorithm attempts to create a model that can accurately classify this old malware with a high level of accuracy (high probability of classifying the historical malware correctly). This is an incredible feat of engineering, but this is also the Achilles Heel of AI.   Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/ai-vs-zero-trust/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Marc Handelman posted: "Our thanks to USENIX for publishing their Presenter's outstanding USENIX Security '22 Conference content on the organization's' YouTube channel. Permalink" Security Boulevard USENIX Security '22 – Xiaoyong Yuan, Lan Zhang – 'Membership Inference Attacks And Defenses In Neural Network Pruning' Marc Handelman Apr 25 Our thanks to USENIX for publishing their Presenter's outstanding USENIX Security '22 Conference content on the organization's' YouTube channel. Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/usenix-security-22-xiaoyong-yuan-lan-zhang-membership-inference-attacks-and-defenses-in-neural-network-pruning/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Debarati Biswas posted: "The multinational company, known to provide identity protection and cybersecurity services, Norton LifeLock notified customers in mid-January that over 6,000 of their customer accounts had been compromised as a result of a "stuffing" attack. S" Security Boulevard Certificate-Based Authentication Best Practices For Hardening Enterprise Security Debarati Biswas Apr 25 The multinational company, known to provide identity protection and cybersecurity services, Norton LifeLock notified customers in mid-January that over 6,000 of their customer accounts had been compromised as a result of a "stuffing" attack. Stuffing attacks occur when previously compromised passwords are used to gain access to accounts on various sites and services that use […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1973102

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110