Daily digest for Security Boulevard, on April 4, 2023

Sue Poremba posted: "No one wants a repeat of the SUNBURST cyberattack, but without any action to improve cybersecurity within the software supply chain, another SUNBURST—or worse—attack is inevitable. And we still may see a devastating attack that takes down critical infr" Security Boulevard White House Moves to Address Software Supply Chain Security Sue Poremba Apr 4 No one wants a repeat of the SUNBURST cyberattack, but without any action to improve cybersecurity within the software supply chain, another SUNBURST—or worse—attack is inevitable. And we still may see a devastating attack that takes down critical infrastructure or cripples major business systems, but at least there are steps being made to finally address […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/white-house-moves-to-address-software-supply-chain-security/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Cyborg Security posted: " Are you ready to take your threat hunting skills to the next level? Learning to threat hunt can be challenging, but it doesn't have to be. That's why Cyborg Security is excited to announce another first-of-its-kind interactive threat hunting " Security Boulevard Threat Hunting Workshop: Hunting for Impact Cyborg Security Apr 4 Are you ready to take your threat hunting skills to the next level? Learning to threat hunt can be challenging, but it doesn't have to be. That's why Cyborg Security is excited to announce another first-of-its-kind interactive threat hunting workshop where anyone can learn how to threat hunt in a safe, fun, and dynamic environment! […] The post Threat Hunting Workshop: Hunting for Impact appeared first on Cyborg Security. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/threat-hunting-workshop-hunting-for-impact/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Avast Blog posted: " The Avast Threat Labs have identified a new data extortion scam targeting companies. The scam is designed to look like it's coming from a ransomware or data extortion cyber gang and is sent via email to employees of different companies, addressin" Security Boulevard New data extortion email campaign copying ransomware gang techniques Avast Blog Apr 4 The Avast Threat Labs have identified a new data extortion scam targeting companies. The scam is designed to look like it's coming from a ransomware or data extortion cyber gang and is sent via email to employees of different companies, addressing them by their full name. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/new-data-extortion-email-campaign-copying-ransomware-gang-techniques/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Avast Blog posted: " Spring cleaning provides the perfect opportunity to declutter both your physical and digital homes. Although digital clutter doesn't leave a physical trace, it can undoubtedly take up significant mental space. A messy digital environment can trig" Security Boulevard Cyber spring cleaning: Decluttering your digital home Avast Blog Apr 4 Spring cleaning provides the perfect opportunity to declutter both your physical and digital homes. Although digital clutter doesn't leave a physical trace, it can undoubtedly take up significant mental space. A messy digital environment can trigger stress, hinder productivity, and increase vulnerability to cyber threats.   Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/cyber-spring-cleaning-decluttering-your-digital-home/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Unork - Webflow Ecommerce website template posted: "Over the past few weeks, the launch of ChatGPT with GPT-4.0 capability, new ChatGPT APIs, and ChatGPT plugins (which connect to external services like Kayak and Instacart) has generated a surge in interest and utilization of the service. In this post, we " Security Boulevard Security Digest: Be Careful what You Share with ChatGPT | Haekka Blog Unork - Webflow Ecommerce website template Apr 4 Over the past few weeks, the launch of ChatGPT with GPT-4.0 capability, new ChatGPT APIs, and ChatGPT plugins (which connect to external services like Kayak and Instacart) has generated a surge in interest and utilization of the service. In this post, we talk about concerns and stats around sharing of sensitive data with ChatGPT. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1970866

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Geertjan Wielenga posted: " Azul is excited to be a gold sponsor of Devnexus 2023. Organized by the Atlanta Java Users Group, Devnexus is the longest-running and largest Java/Java Platform Conference in the USA, now in its 18th year. And this year, I'm excited to announce that w" Security Boulevard 5 Tips for Devnexus 2023 Geertjan Wielenga Apr 3 Here are four tips for making the most of Devnexus 2023, based on my first-hand experience and conversations with other attendees. The post 5 Tips for Devnexus 2023 appeared first on Azul | Better Java Performance, Superior Java Support. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/5-tips-for-devnexus-2023/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Cyborg Security posted: " Join us for a unique interactive threat hunting management workshop where Cyborg Security's Senior Threat Hunter, Scott Poley, will guide you through the critical aspect of managing a threat hunting program. This workshop is designed for managers, " Security Boulevard Top Cover – Threat Hunting Management Workshop: From KPIs to Metrics Cyborg Security Apr 3 Join us for a unique interactive threat hunting management workshop where Cyborg Security's Senior Threat Hunter, Scott Poley, will guide you through the critical aspect of managing a threat hunting program.  This workshop is designed for managers, executives, and security stakeholders who are looking to start, grow, and improve their organization's threat hunting capabilities. During […] The post Top Cover – Threat Hunting Management Workshop: From KPIs to Metrics appeared first on Cyborg Security. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/top-cover-threat-hunting-management-workshop-from-kpis-to-metrics/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Synopsys Cybersecurity Research Center posted: " Listed at #5 in the OWASP Top 10 list, security misconfiguration refers to vulnerabilities that result from an application's configuration. " Security Boulevard OWASP Top 10: Security misconfiguration Synopsys Cybersecurity Research Center Apr 3 Listed at #5 in the OWASP Top 10 list, security misconfiguration refers to vulnerabilities that result from an application's configuration.  Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/owasp-top-10-security-misconfiguration/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Cyborg Security posted: " Join us for a unique interactive threat hunting management workshop where Cyborg Security's Director of Threat Research, Brandon Denker, will guide you through the critical aspect of managing a threat hunting program. This workshop is designed" Security Boulevard Top Cover: The Threat Hunting Management Workshop Cyborg Security Apr 3 Join us for a unique interactive threat hunting management workshop where Cyborg Security's Director of Threat Research, Brandon Denker, will guide you through the critical aspect of managing a threat hunting program.  This workshop is designed for managers, executives, and security stakeholders who are looking to start, grow, and improve their organization's threat hunting capabilities. […] The post Top Cover: The Threat Hunting Management Workshop appeared first on Cyborg Security. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/top-cover-the-threat-hunting-management-workshop/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Erin Crapser posted: "New TrustRegister application introduces programmatic risk assessments, empowering companies to proactively surface risks and remediation plans, map to customer contracts, and understand potential business impact. Boston MA—APR. 4, 2023—TrustCloud, the pr" Security Boulevard TrustCloud Replaces Manual Risk Registers with Programmatic and Predictive Risk Tracking to Reduce Business Liability Erin Crapser Apr 3 New TrustRegister application introduces programmatic risk assessments, empowering companies to proactively surface risks and remediation plans, map to customer contracts, and understand potential business impact. Boston MA—APR. 4, 2023—TrustCloud, the programmatic, predictive Trust Assurance platform that elevates GRC into a profit center, announced today the release of the new TrustRegister application. TrustRegister allows software companies […] The post TrustCloud Replaces Manual Risk Registers with Programmatic and Predictive Risk Tracking to Reduce Business Liability first appeared on TrustCloud. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/trustcloud-replaces-manual-risk-registers-with-programmatic-and-predictive-risk-tracking-to-reduce-business-liability/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Mickey Bresman posted: "Active Directory (AD) is the core identity store for many organizations. As such, AD has also become a major target for bad actors. If attackers gain access to AD, they gain access to any resources in the organization. In a hybrid on-prem/cloud scenario, " Security Boulevard Why AD Modernization Is Critical to Your Cybersecurity Program Mickey Bresman Apr 3 Active Directory (AD) is the core identity store for many organizations. As such, AD has also become a major target for bad actors. If attackers gain access to AD, they gain access to any resources in the organization. In a hybrid on-prem/cloud scenario, which is common today, that includes access to the organization's cloud resources. ... The post Why AD Modernization Is Critical to Your Cybersecurity Program appeared first on Semperis. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/why-ad-modernization-is-critical-to-your-cybersecurity-program/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Natalie Anderson posted: "It's a tradition unlike any other. Last week, Apptega swept up 21 badges in G2's Spring Reports, improving upon its best-in-class total of 18 from the winter awards. Among several leadership and high-performer designations, Apptega notched "momentum" awar" Security Boulevard Apptega named GRC Momentum Leader in G2 Spring Reports Natalie Anderson Apr 3 It's a tradition unlike any other. Last week, Apptega swept up 21 badges in G2's Spring Reports, improving upon its best-in-class total of 18 from the winter awards. Among several leadership and high-performer designations, Apptega notched "momentum" awards for the GRC Platforms, Security Risk Analysis, and IT Risk Management categories. That label singles out companies and products that've achieved rapid market expansion and swift brand growth.   Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/apptega-named-grc-momentum-leader-in-g2-spring-reports/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Sift Trust and Safety Team posted: " Rapidly evolving technology has fueled fraud by making it easier for cybercriminals to collaborate and share information, but it's also made fraud more accessible to the everyday internet user. Below, our Trust and Safety Architects at Sift share their e" Security Boulevard Digital Trust & Safety Roundup: Payment fraud targets fintech, fraud industry insights, and Sift's newest product enhancements Sift Trust and Safety Team Apr 3 Explore findings from Sift's Digital Trust & Safety Index on payment fraud, read takeaways from MRC Vegas, and learn about Sift's spring product release. The post Digital Trust & Safety Roundup: Payment fraud targets fintech, fraud industry insights, and Sift's newest product enhancements appeared first on Sift Blog. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/digital-trust-safety-roundup-payment-fraud-targets-fintech-fraud-industry-insights-and-sifts-newest-product-enhancements/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Marc Handelman posted: " Our thanks to USENIX for publishing their Presenter's outstanding USENIX Security '22 Conference content on the organization's' YouTube channel. Permalink" Security Boulevard USENIX Security '22 – Fei Wang, Jianliang Wu, Yuhong Nan, Yousra Aafer, Xiangyu Zhang, Dongyan Xu, Mathias Payer – ' ProFactory: Improving IoT Security Via Formalized Protocol Customization' Marc Handelman Apr 3 Our thanks to USENIX for publishing their Presenter's outstanding USENIX Security '22 Conference content on the organization's' YouTube channel. Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/usenix-security-22-fei-wang-jianliang-wu-yuhong-nan-yousra-aafer-xiangyu-zhang-dongyan-xu-mathias-payer-profactory-improving-iot-security-via-formalized-protocol-customization/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

General (Ret) Keith Alexander and the IronNet Team posted: " In our third monthly global threat update, we briefly underscore some of the geopolitical, kinetic, and cyber trends/activity from the last month distilled in a few high-level takeaways. On March 7, Army Gen. Paul Nakasone, commander of U.S. Cyb" Security Boulevard IronNet Monthly Global Threat Update General (Ret) Keith Alexander and the IronNet Team Apr 3 In our third monthly global threat update, we briefly underscore some of the geopolitical, kinetic, and cyber trends/activity from the last month distilled in a few high-level takeaways. On March 7, Army Gen. Paul Nakasone, commander of U.S. Cyber Command and the director of the National Security Agency (NSA), presented to the Senate Armed Services Committee on the role of these organizations in preventing and defeating cyberattacks on the United States. In his speech, Gen. Nakasone stated, "China is learning from Russian actions in Ukraine and elsewhere" and further noted "the People's Republic of China (PRC) as our military's pacing challenge." We believe these two comments from his remarks are: A) particularly symbolic of the current shift in geopolitical dynamics, and B) strategic areas for the private sector to be considering as part of its corporate risk assessments. When considering the circumstances and risks (cyber and otherwise) stemming from the Ukraine-Russia War, it's important to also think of the additional geopolitical implications that may not be as apparent, like China's response to the war. The tension between China and the West is playing out in the news in the form of warnings from China about Taiwanese President Tsai Ing-wen visiting the U.S. and Central America, as well as coverage of China forming new alliances in the Middle East and acting as the middle-man in peace talks between Iran and Saudi Arabia. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/ironnet-monthly-global-threat-update-3/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Venafi Blog posted: "Despite an overall increase in security investment over the past decade, organizations are still plagued by data breaches. What's more, we're learning that many of the attacks that result in breaches misuse encryption in some way. (By comparison, just fou" Security Boulevard 7 Data Breach Case Studies Involving Human Error: Did Encryption Play a Role? Venafi Blog Apr 3 Despite an overall increase in security investment over the past decade, organizations are still plagued by data breaches. What's more, we're learning that many of the attacks that result in breaches misuse encryption in some way. (By comparison, just four percent of data breaches tracked by Gemalto's Breach Level Index were "secure breaches" in that the use of encryption rendered stolen data useless). Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1970741

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Michael Vizard posted: "NTT Ltd has launched a managed detection and response (MDR) security service based on Microsoft Sentinel, a security information event management (SIEM) platform hosted in the Azure cloud service. The NTT MDR service collects data from any user, device" Security Boulevard NTT Taps Microsoft to Provide MDR Service Michael Vizard Apr 3 NTT Ltd has launched a managed detection and response (MDR) security service based on Microsoft Sentinel, a security information event management (SIEM) platform hosted in the Azure cloud service. The NTT MDR service collects data from any user, device, application and infrastructure platform from any on-premises or cloud computing environment. That approach then makes it […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/ntt-taps-microsoft-to-provide-mdr-service/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Marc Handelman posted: " via the comic art" Security Boulevard Randall Munroe's XKCD 'Towed Messages' Marc Handelman Apr 3 via the comic artistry and dry wit of Randall Munroe, resident at XKCD! Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/04/randall-munroes-xkcd-towed-messages/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Learn how to build your website with our video tutorials on YouTube. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110