Daily digest for Security Boulevard, on April 28, 2023

Michael Vizard posted: "At the RSA Cybersecurity 2023 conference, Flashpoint this week launched a cybersecurity intelligence platform that promises to streamline workflows by providing a unified real-time view of the relevant data and information pertaining to a specific cyberat" Security Boulevard Flashpoint Adds Ignite Cybersecurity Intelligence Platform Michael Vizard Apr 28 At the RSA Cybersecurity 2023 conference, Flashpoint this week launched a cybersecurity intelligence platform that promises to streamline workflows by providing a unified real-time view of the relevant data and information pertaining to a specific cyberattack or a newly discovered vulnerability. Matt Howell, vice president of product for Flashpoint, said the Flashpoint Ignite platform makes […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/flashpoint-adds-ignite-cybersecurity-intelligence-platform/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

GuardRails posted: " The field of healthcare has witnessed an unprecedented growth and advancement in the past few years, thanks to the widespread adoption of technological innovations. From electronic health records (EHRs) to telemedicine, the healthcare industry has co" Security Boulevard Protecting Patient Privacy: Top 5 AppSec Trends in Healthcare for 2023 GuardRails Apr 28 Stay informed about AppSec trends in healthcare. Learn about the latest trends to safeguard your organization's data, systems, and patients The post Protecting Patient Privacy: Top 5 AppSec Trends in Healthcare for 2023 appeared first on GuardRails. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/protecting-patient-privacy-top-5-appsec-trends-in-healthcare-for-2023/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Indusface posted: "As APIs continue to increase across industries, so too do the threats to their security. The OWASP API Top 10 list is an essential resource for businesses looking to secure their application programming interfaces. OWASP is best known for releasing the to" Security Boulevard What's New in OWASP API Top 10 2023RC: The Latest Changes and Enhancements Indusface Apr 28 The OWASP API Top 10 2023 list has quite a few changes from the 2019 Top 10 API security risks. Here is updated OWASP API Top 10 2023 RC List. The post What's New in OWASP API Top 10 2023RC: The Latest Changes and Enhancements appeared first on Indusface. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/whats-new-in-owasp-api-top-10-2023rc-the-latest-changes-and-enhancements/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Deepti Sachdeva posted: " Introduction In today's digital landscape, security is more important than ever. As organizations continue to rely on technology to conduct business operations and handle sensitive information, the need for strong security controls and framework" Security Boulevard "Ensuring Trust and Security: Insights on SOC2 Compliance and Best Practices." Deepti Sachdeva Apr 28 Introduction In today's digital landscape, security is more important than ever. As organizations continue to rely on technology to conduct business operations and handle sensitive information, the need for strong security controls and frameworks becomes increasingly critical. SOC 2 is a widely recognized auditing standard developed by the American Institute of Certified Public Accountants (AICPA) […] The post "Ensuring Trust and Security: Insights on SOC2 Compliance and Best Practices." appeared first on Kratikal Blogs. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/ensuring-trust-and-security-insights-on-soc2-compliance-and-best-practices/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

BrianKrebs posted: "A shocking number of organizations — including banks and healthcare providers — are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem from a misc" Security Boulevard Many Public Salesforce Sites are Leaking Private Data BrianKrebs Apr 27 A shocking number of organizations -- including banks and healthcare providers -- are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem from a misconfiguration in Salesforce Community that allows an unauthenticated user to access records that should only be available after logging in. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/many-public-salesforce-sites-are-leaking-private-data/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Tim Mackey posted: " CISA's draft self-attestation form, published today, is a step in the right direction in demystifying EO 14028 compliance." Security Boulevard We're one step closer to knowing how to comply with EO 14028 Tim Mackey Apr 27 CISA's draft self-attestation form, published today, is a step in the right direction in demystifying EO 14028 compliance. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/were-one-step-closer-to-knowing-how-to-comply-with-eo-14028/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Clearswift posted: "Email impersonation is the fastest growing and most successful means of bypassing email security controls. In Q4 2022, the response-based and credential theft attacks that make up email impersonation reached their highest percentage of share of all email " Security Boulevard Top Tactics of BEC Attacks in 2023 Clearswift Apr 27 Email impersonation is the fastest growing and most successful means of bypassing email security controls. In Q4 2022, the response-based and credential theft attacks that make up email impersonation reached their highest percentage of share of all email threat volume, contributing to more than 97% of attacks reported by end users. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1973364

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

John P. Gormally, SR posted: "Why Overthinking Risk Will Turn You into StoneRisk is an enabler of Analysis Paralysis.Organizations invest vast amounts of money, time, and human capital in identifying, analyzing, and reporting potential risks within their domain. While this exercise is" Security Boulevard Why Overthinking Risk Will Turn You into Stone John P. Gormally, SR Apr 27 Why Overthinking Risk Will Turn You into Stone Risk is an enabler of Analysis Paralysis. Organizations invest vast amounts of money, time, and human capital in identifying, analyzing, and reporting potential risks within their domain. While this exercise is often required for compliance and security mandates, this also leads to analysis and paralysis. Risk exists no matter what an organization is involved in. From being in the cloud to moving to a third-world country to reduce, these decisions ultimately lead to either a profitable outcome or a complete disaster. Risk management helps find the balance between profitability and avoiding disaster. The analysis behind that science could give you a total refresh. Recently, I was involved in a risk-based analysis project, and I can see the value in the various steps and data collection requirements. However, like anything in IT, it could be more straightforward and open to interpretation. That is a formula for paralysis. I am huge fan of the NIST 800–53 Risk Management Framework, including its seven steps process: Prepare Categorize Select Implement Assess Authorize Monitor The question here is, do we need all seven to have an effective Risk Management Framework? What steps could be consolidated or eliminated to help optimize the time, cost, and resources to develop a more agile and fluid risk framework? This framework would be ideal for a regulated industry, however for most unregulated industries, I would recommend: Preparation: The risk strategy should be incorporated already into the Security Operations and Incident response workflow. Select: If the organization already uses NIST-800–53, select the most appropriate adaptive controls to help protect the most critical resources. Implementation: Deploy all adaptive controls, including email security, MFA, Zero-trust, and XDR, to support the NIST-800–53 controls selected. Monitoring: Without monitoring, the organization will be at a higher level of risk. These four categories can help any size organization. Prepare your strategy with the selected adaptive controls to protect the most critical assets with a solid implementation, security operations, and monitoring team, including an MSSP. Most risk activities overlap existing IT and SecOps processes. Leveraging what already exists helps reduce the cost and complexity of managing risk. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/why-overthinking-risk-will-turn-you-into-stone/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Marc Handelman posted: "Our thanks to USENIX for publishing their Presenter's outstanding USENIX Enigma '23 Conference content on the organization's' YouTube channel. Permalink" Security Boulevard USENIX Enigma 2023 – Lana Ramjit, Cornell Tech – 'Technology Abuse Clinics For Survivors Of Intimate Partner Violence' Marc Handelman Apr 27 Our thanks to USENIX for publishing their Presenter's outstanding USENIX Enigma '23 Conference content on the organization's' YouTube channel. Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/usenix-enigma-2023-lana-ramjit-cornell-tech-technology-abuse-clinics-for-survivors-of-intimate-partner-violence/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

John Waller posted: " With the continued move to the cloud, cloud detection and response helps security teams defend their cloud applications and infrastructure. " Security Boulevard Cloud detection and response, a key asset for cloud security John Waller Apr 27 With the continued move to the cloud, cloud detection and response helps security teams defend their cloud applications and infrastructure.  Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/cloud-detection-and-response-a-key-asset-for-cloud-security/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Grip Security Blog posted: "Forbes: 18 Surprising Features Mobile Devices May Offer Within 10 YearsApr 25, 2023Apr 25, 202318 members of Forbes Technology Council speculate about some of the functions and features mobile devices might have within 10 years and how those advances will" Security Boulevard Grip Security Blog 2023-04-27 14:06:16 Grip Security Blog Apr 27 Forbes: 18 Surprising Features Mobile Devices May Offer Within 10 Years Apr 25, 2023 Apr 25, 2023 18 members of Forbes Technology Council speculate about some of the functions and features mobile devices might have within 10 years and how those advances will change what users can do with them. This is some text inside of a div block. This is some text inside of a div block. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1973331

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Andy Suderman posted: "A Platform, sometimes called an "internal developer platform," is a unified infrastructure that allows development teams in a company to deliver applications rapidly and consistently. Out of the box, Kubernetes is a very powerful platform, but it's too co" Security Boulevard Building a Kubernetes Platform: How & Why to Apply Governance and Policy Andy Suderman Apr 27 A Platform, sometimes called an "internal developer platform," is a unified infrastructure that allows development teams in a company to deliver applications rapidly and consistently. Out of the box, Kubernetes is a very powerful platform, but it's too complicated and feature-rich to put in front of development teams as an internal developer platform without having some guardrails in place. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/building-a-kubernetes-platform-how-why-to-apply-governance-and-policy/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Josh Thorngren posted: " From humble beginnings in basic IT configuration automation, DevOps has become the de facto standard for organizations looking to ship software faster. "Shift left" approaches combined development processes and methodologies with trad" Security Boulevard DevOps vs. DevSecOps Process: How to Ensure Your Organization Has a Security Mindset Josh Thorngren Apr 27 In this blog post, we'll explore the shift from DevOps to DevSecOps and discuss some practical tips for your organization when moving from DevOps to DevSecOps. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/devops-vs-devsecops-process-how-to-ensure-your-organization-has-a-security-mindset/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Michelle McLean posted: "What a week we're having – and it's only Thursday! RSA has been action-packed, meeting with customers, showing off our new product enhancements, and booking time with new prospects. Interest in API security is running at an all-time high, as more organiza" Security Boulevard Salt Security Wins Stevie® Award for Most Innovative Tech Company of the Year Michelle McLean Apr 27 What a week we're having – and it's only Thursday! RSA has been action-packed, meeting with customers, showing off our new product enhancements, and booking time with new prospects. Interest in API security is running at an all-time high, as more organizations recognize what Salt saw years ago, that APIs entirely upend the security playing field! And the awards keep coming – our second award of the week came today, with us winning a Stevie® Award for "Most Innovative Tech Company of the Year" in the 2023 American Business Awards®. On Monday we picked up our trophy for winning 'Hot Company' in API security in the Global InfoSec Awards. But that's not all! In between these two awards, CRN included the Salt Security API Protection Platform among the "20 Hottest Cybersecurity Products at RSA 2023." To be acknowledged among such industry leaders as Palo Alto Networks, SentinelOne, Google Cloud, and our very own partner CrowdStrike is truly an honor! Today's award represents the first time Salt has been recognized as a Stevie winner in the American Business Awards program. Salt won a Silver Stevie Award in the "Most Innovative Tech Company of the Year" category. Judges include many of the world's most-respected executives, entrepreneurs, innovators, and business educators. Being selected out of thousands of entrants for a Stevie Award testifies to the unique capabilities being delivered with the Salt Security API Protection Platform. As we have heard every day at RSA, API security has become a critical concern for today's digital transformation initiatives. Salt is proud to deliver a solution that gives organizations the context and adaptive intelligence that's needed to quickly detect and block API attacks, so companies can continue to innovate safely. There's still time to visit Salt at the RSA Conference (Moscone South). Please stop by to say hello and speak with one of our friendly API security experts. If you aren't at the show and want to connect or schedule a demo, go to https://content.salt.security/demo.html. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/salt-security-wins-stevie-award-for-most-innovative-tech-company-of-the-year/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Jon Gregalis posted: "Imperva Data Security Fabric and Fortanix Data Security Manager combine to provide end-to-end data security. Imperva, Inc., (@Imperva) the cybersecurity leader that protects critical applications, APIs, and data, anywhere at scale, and Fortanix, Inc. (@Fo" Security Boulevard Imperva® and Fortanix Partner to Protect Confidential Customer Data Jon Gregalis Apr 27 Imperva Data Security Fabric and Fortanix Data Security Manager combine to provide end-to-end data security. Imperva, Inc., (@Imperva) the cybersecurity leader that protects critical applications, APIs, and data, anywhere at scale, and Fortanix, Inc. (@Fortanix), the Data Security company powered by Confidential Computing, have signed a partnership agreement, and have each joined the other's strategic […] The post Imperva® and Fortanix Partner to Protect Confidential Customer Data appeared first on Blog. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/imperva-and-fortanix-partner-to-protect-confidential-customer-data/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Jenn Jeffers posted: "Bots-as-a-service (BaaS) is a cloud-based platform that offers pre-built bots to automate mundane tasks such as customer support, data entry, and information retrieval. This trend in app development helps businesses save time and increase productivity by " Security Boulevard Bots-as-a-Service (BaaS): A New Era of Automated Bot Attacks Jenn Jeffers Apr 27 Bots-as-a-service (BaaS) is a cloud-based platform that offers pre-built bots to automate mundane tasks such as customer support, data entry, and information retrieval. This trend in app development helps businesses save time and increase productivity by integrating bots into existing apps, enhancing their functionality and providing users with a seamless experience.  Bot management solutions can […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/bots-as-a-service-baas-a-new-era-of-automated-bot-attacks/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Marc Handelman posted: " via the comic art" Security Boulevard Randall Munroe's XKCD 'Definition of e' Marc Handelman Apr 27 via the comic artistry and dry wit of Randall Munroe, resident at XKCD! Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/randall-munroes-xkcd-definition-of-e/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Team Nuspire posted: "Spanning 32 pages and featuring statistics galore, there's a lot to unpack in the FBI's 2022 Internet Crime Report. The Bureau's Internet Crime Complaint Center (IC3) compiled the 2022 report based on 800,944 complaints of cyberattacks and incidents recei" Security Boulevard Lessons and Takeaways from the FBI's 2022 Internet Crime Report Team Nuspire Apr 27 Spanning 32 pages and featuring statistics galore, there's a lot to unpack in the FBI's 2022 Internet Crime Report. The Bureau's Internet Crime Complaint Center (IC3) compiled the 2022 report based on 800,944 complaints of cyberattacks and incidents received from members of the public. To save you from information overwhelm, this article presents the most pertinent findings from the report ... Read More The post Lessons and Takeaways from the FBI's 2022 Internet Crime Report appeared first on Nuspire. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/lessons-and-takeaways-from-the-fbis-2022-internet-crime-report/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110