Daily digest for Security Boulevard, on September 28, 2023

Ashlee Benge posted: " More than a week after it suffered a crippling ransomware attack, the hotel giant MGM is struggling to recover. The attack, linked to the ransomware-as-a-service (RaaS) group known as ALPHV, or BlackCat, caused slot machines and ATMs in MGM's Las Vegas " Security Boulevard What we know about BlackCat and the MGM hack Ashlee Benge Sep 28 More than a week after it suffered a crippling ransomware attack, the hotel giant MGM is struggling to recover. The attack, linked to the ransomware-as-a-service (RaaS) group known as ALPHV, or BlackCat, caused slot machines and ATMs in MGM's Las Vegas hotels to go dark and forced hotel staff to revert to pencil and paper while guests queued for hours in lines to check in and out of their rooms.   Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/what-we-know-about-blackcat-and-the-mgm-hack/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Ernest-admin posted: "Sternx Technology is proud to announce that we have achieved AICPA SOC 2 certification, affirming our commitment to providing secure and reliable cybersecurity solutions to our clients. This prestigious certification demonstrates that our information secu" Security Boulevard AICPA SOC 2 Compliance: A Milestone for SternX Technology Ernest-admin Sep 28 SternX Technology achieves AICPA SOC 2 compliance, ensuring the security, integrity, confidentiality, and privacy of their systems and data. The post AICPA SOC 2 Compliance: A Milestone for SternX Technology appeared first on SternX Technology. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/aicpa-soc-2-compliance-a-milestone-for-sternx-technology/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Grip Security Blog posted: "Grip Security Workshops: Adopt GenAI SecurelySep 28, 2023Sep 28, 2023In this special Grip Workshop, we share strategies and real-world examples. Grip enables security teams to navigate the future of innovation together, with identity-first SaaS security t" Security Boulevard Grip Security Blog 2023-09-28 02:14:51 Grip Security Blog Sep 28 Grip Security Workshops: Adopt GenAI Securely Sep 28, 2023 Sep 28, 2023 In this special Grip Workshop, we share strategies and real-world examples. Grip enables security teams to navigate the future of innovation together, with identity-first SaaS security that is consistent, contextual, and continuous. Scott Shelton Sr.Technical Account Manager, Grip Security Josh Mayfield VP Product Marketing, Grip Security Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1990680

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Grip Security Blog posted: "Grip Security Workshops: 4 Keys to Digital Trust Sep 27, 2023Sep 27, 2023Every day, employees are using SaaS and creating a new, dynamic identity perimeter that is the top target of attacks. This creates an identity security challenge that is growing bigg" Security Boulevard Grip Security Blog 2023-09-28 02:11:54 Grip Security Blog Sep 28 Grip Security Workshops: 4 Keys to Digital Trust Sep 27, 2023 Sep 27, 2023 Every day, employees are using SaaS and creating a new, dynamic identity perimeter that is the top target of attacks. This creates an identity security challenge that is growing bigger moment-by-moment. In such an environment, how do organization achieve digital trust across the sprawling SaaS-Identity risk landscape? Josh Fedor Presidio Jason Stallard Presidio Josh Mayfield VP, Grip Security Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1990682

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Deborah Erlanger posted: " What is DORA (EU)? The DORA Regulation (No. 2022/2554), known as the Digital Operational Resilience Act, is an important EU law about cybersecurity for financial institutions like banks or credit institutions. More than just having security for defense, " Security Boulevard DORA EU Deborah Erlanger Sep 28 What is DORA (EU)? The DORA Regulation (No. 2022/2554), known as the Digital Operational Resilience Act, is an important EU law about cybersecurity for financial institutions like banks or credit institutions. More than just having security for defense, it is about resilience.  The 'FinTech Action Plan,' (2018) by the European Commission emphasized the need to […] The post DORA EU appeared first on Centraleyes. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/dora-eu/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Gaurav Banga posted: "It was great to chat last week on the topic of the new SEC Rules with my good friend Ed Amoroso (President of TAG Cyber, Professor at NYU and the former CSO of AT&T). A link to the recording of our discussion is here: And if listening to videos is not" Security Boulevard Webinar Highlights – Mastering the new SEC Regs Gaurav Banga Sep 27 It was great to chat last week on the topic of the new SEC Rules with my good friend Ed Amoroso (President of TAG Cyber, Professor at NYU and the former CSO of AT&T). A link to the recording of our discussion is here: And if listening to videos is not your thing, here is … Read More Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/webinar-highlights-mastering-the-new-sec-regs/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Pierre Noujeim posted: "Open-source threat intelligence (OSINT) is a valuable asset to pull from during incident investigations. However, doing this for every alert is monotonous and can be prone to human errors. When using SOAR security tools, you can build IoC enrichment direc" Security Boulevard Automated Incident Response with AlienVault and Smart SOAR Pierre Noujeim Sep 27 Open-source threat intelligence (OSINT) is a valuable asset to pull from during incident investigations. However, doing this for every alert is monotonous and can be prone to human errors. When using SOAR security tools, you can build IoC enrichment directly into playbooks and automatically populate incident tickets with notable information from the community. One popular […] The post Automated Incident Response with AlienVault and Smart SOAR appeared first on D3 Security. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/automated-incident-response-with-alienvault-and-smart-soar/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Matt Kelly posted: " The automotive industry is one of the largest in the world, with sales estimated at $2.95 trillion for 2022. It's also an industry undergoing profound change thanks to global supply chains and digital transformation — which means that the security an" Security Boulevard Step on It: What to Know About TISAX Compliance in the Automotive Market Matt Kelly Sep 27 The automotive industry is one of the largest in the world, with sales estimated at $2.95 trillion for 2022. It's also an industry undergoing profound change thanks to global supply chains and digital transformation — which means that the security and compliance demands for the auto industry are undergoing profound change, too. Let's start with... The post Step on It: What to Know About TISAX Compliance in the Automotive Market appeared first on Hyperproof. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/step-on-it-what-to-know-about-tisax-compliance-in-the-automotive-market-2/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Ianni Le posted: "A European-based organization in the transportation industry needed a way to protect its data with a solution that could mitigate sophisticated threats and move beyond basic threat detection capabilities. It required a holistic solution that could continu" Security Boulevard Protecting Critical Infrastructure From Ransomware with LogRhythm NDR Ianni Le Sep 27 A European-based organization in the transportation industry needed a way to protect its data with a solution that could mitigate sophisticated threats and move beyond basic threat detection capabilities. It required a holistic solution that could continuously monitor and analyze… The post Protecting Critical Infrastructure From Ransomware with LogRhythm NDR appeared first on LogRhythm. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/protecting-critical-infrastructure-from-ransomware-with-logrhythm-ndr/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

NSFOCUS posted: " Overview Recently, NSFOCUS CERT found that Google officially fixed a heap buffer overflow vulnerability (CVE-2023-4863). Due to a flaw in the WebP module, an attacker triggered the vulnerability by inducing users to visit a malicious website, which ul" Security Boulevard Google LibWebP Arbitrary Code Execution Vulnerability (CVE-2023-5129) Notification NSFOCUS Sep 27 Overview Recently, NSFOCUS CERT found that Google officially fixed a heap buffer overflow vulnerability (CVE-2023-4863). Due to a flaw in the WebP module, an attacker triggered the vulnerability by inducing users to visit a malicious website, which ultimately led to arbitrary code execution on the target system. At present, it has been detected that the […] The post Google LibWebP Arbitrary Code Execution Vulnerability (CVE-2023-5129) Notification appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/google-libwebp-arbitrary-code-execution-vulnerability-cve-2023-5129-notification/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Marc Handelman posted: "Many thanks to Israel's Tel Aviv University for publishing their presenter's tremendous Cyber Week 2023 security content on the Tel Aviv University's TAUVOD YouTube channel. Permalink" Security Boulevard Cyber Week 2023 & The Israel National Cyber Directorate Presents – Scaling up Cyber Capacity Building: The Sectoral Approach to Critical Infrastructure Protection Marc Handelman Sep 27 Many thanks to Israel's Tel Aviv University for publishing their presenter's tremendous Cyber Week 2023 security content on the Tel Aviv University's TAUVOD YouTube channel. Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/cyber-week-2023-the-israel-national-cyber-directorate-presents-scaling-up-cyber-capacity-building-the-sectoral-approach-to-critical-infrastructure-protection/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Jeffrey Burt posted: "Hackers are using a bogus download page for Bitwarden's password manager solution to target Windows users with a new remote access trojan (RAT) that's designed to steal credentials and a range of information about the compromised system. Threat intelli" Security Boulevard ZenRAT Targets Windows Users with Fake Bitwarden Site Jeffrey Burt Sep 27 Hackers are using a bogus download page for Bitwarden's password manager solution to target Windows users with a new remote access trojan (RAT) that's designed to steal credentials and a range of information about the compromised system. Threat intelligence researchers with cybersecurity firm Proofpoint are still sorting through all aspects of the ZenRAT malware, including […] Read more of this post Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/zenrat-targets-windows-users-with-fake-bitwarden-site/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

ltabo posted: " Meet the Ona: Stefan Popa ltabo Wed, 09/27/2023 - 18:12 Today, we announced a series of strategic expansion efforts, including a new product research and development center in Romania, as well as the introduction of St" Security Boulevard Meet the Ona: Stefan Popa ltabo Sep 27 Meet the Ona: Stefan Popa ltabo Wed, 09/27/2023 - 18:12 Today, we announced a series of strategic expansion efforts, including a new product research and development center in Romania, as well as the introduction of Stefan Popa, Ph.D, MBA, as Director of Engineering and Site Leader.    Can you tell us a little bit about your background? I have 18+ years experience in IT&C R&D working for global IT companies: 7+ years as a software developer and 11+ years in various management roles putting together, leading and managing software development teams - mid-sized to large teams. Most of my experience is local in Bucharest / Romania, but I have also managed remote teams, teams based in Minsk / Belarus,  Brno / Czech Republic and Edinburgh / UK. I have built my software development / research and management expertise while working for Intel, Freescale Semiconductor, Deloitte Digital, Honeywell, SolarWinds and Microsoft. I have a PhD (2012) in systems science / computer science studying information exchange computational models in biological systems from Politehnica University Bucharest. And an MBA in general management from Vienna University of Economics and Business (2017).   What brought you to Onapsis? I have prior experience with greenfield local setups for IT&C R&D global IT companies where I have created software development departments from scratch. Onapsis just opened in Romania and we are planning to create a 250+ people R&D engineering site over the next 3 years which will contribute to securing our clients business applications.   What was the biggest factor for you joining the Onapsis team? The biggest factor for me joining the Onapsis team is this initial moment of setting up the local presence and the cybersecurity domain, which I am passionate about while working in different roles.   What are you most excited about to be leading our team in Romania? I am most excited about the opportunity I have to be able to contribute to creating a significant R&D engineering presence in Romania working in cybersecurity. This location has such an innovative technical talent which is attracted by this domain.   What do you think is the biggest opportunity for the team there? The biggest opportunity for the team is that it will be working on building up engineering and research capability developing end-user cybersecurity products, which will help Onapsis better secure our global clients' business applications while leveraging the local innovative technical talent. Onapsis Life onapsislife meet the ona Virginia Satrom Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/meet-the-ona-stefan-popa/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Avast Blog posted: " In a vast world of online threats, certain terms can stand out for their mysterious nature and vague implications. They sound technical, jargony, and are often dismissed as too hard for us to get into. Today we're offering a guide, a sort of comp" Security Boulevard RATs, rootkits, and ransomware (oh my!) Avast Blog Sep 27 In a vast world of online threats, certain terms can stand out for their mysterious nature and vague implications. They sound technical, jargony, and are often dismissed as too hard for us to get into. Today we're offering a guide, a sort of compass, to help simplify a few of those terms, and enable you to navigate around some of the latest dangers from the Avast Threat Report.   Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/rats-rootkits-and-ransomware-oh-my/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Dancho Danchev posted: "Dear blog readers,I'm soliciting your anonymous and pseudo anonymous tips including actual personally identifiable information on the bad guys on my newly launched Dark Web Onion where I promise to communicate your tips and personally identifiable informa" Security Boulevard My New Dark Web Onion – Soliciting Your Input On Personally Identifiable Information on the Bad Guys Dancho Danchev Sep 27 Dear blog readers, I'm soliciting your anonymous and pseudo anonymous tips including actual personally identifiable information on the bad guys on my newly launched Dark Web Onion where I promise to communicate your tips and personally identifiable information on the bad guys to a vast network of contacts who might find it useful and relevant. Sample things you can submit include basically anything related to personally identifiable information on the bad guys and I promise that I will do my best to communicate your information to a vast network of people who might need it. My Dark Web Onion address that's soliciting your tips and anonymous and pseudo anonymous personally identifiable information on the bad guys is - http://pq3w6omkmjkfqcqaeh3auoykmk4qh6l3ngiiuksr5yypfcf4kq7qbzid.onion Thank you and I hope that I will soon begin receiving submissions of personally identifiable information on the bad guys which I'll do my best to communicate to a vast network of people who need it. Stay tuned! Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1990652

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Richi Jennings posted: "The moral of the story: In the long run, the sharpest weapon of all is a kind and gentle spiritIn this week's #TheLongView:1⃣ #NetNeutrality is back on the @FCC's agenda, and2⃣ unused #London office gets Zucked.At @TechstrongGroup's @DevOpsDotCom: https:/" Security Boulevard FCC: Net Neutrality is a 'Thing' Again ¦ Meta Shutters Big UK Site – DevOps.com Richi Jennings Sep 27 The moral of the story: In the long run, the sharpest weapon of all is a kind and gentle spirit In this week's #TheLongView: 1⃣ #NetNeutrality is back on the @FCC's agenda, and 2⃣ unused #London office gets Zucked. At @TechstrongGroup's @DevOpsDotCom: https://t.co/8GDM0zf6OH #DevOps $META — @Richi Jennings (@RiCHi) September 27, 2023 Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/?p=1990658

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Michael Toback posted: " Introduction In today's digital age, the significance of robust cybersecurity for small and medium-sized businesses (SMBs) is more crucial than ever. The surge in cyber threats and attacks is relentless. These threats target businesses of al" Security Boulevard Unlock 2023's Top Benefits of Security as a Service! Michael Toback Sep 27 Introduction In today's digital age, the significance of robust cybersecurity for small and medium-sized businesses (SMBs) is more crucial than ever. The surge in cyber threats and attacks is relentless. These threats target businesses of all sizes, with SMBs often being the most vulnerable. The necessity for advanced, reliable security solutions is not just a … Unlock 2023's Top Benefits of Security as a Service! Read More » The post Unlock 2023's Top Benefits of Security as a Service! appeared first on Endpoint Security. Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/unlock-2023s-top-benefits-of-security-as-a-service/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Marc Handelman posted: " " Security Boulevard Randall Munroe's XKCD 'Lying' Marc Handelman Sep 27 via the comic artistry and dry wit of Randall Munroe, maker of XKCD! Permalink Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/randall-munroes-xkcd-lying/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110

Matthew P. Venne, stackArmor, Sr. Solutions Director posted: " By: Matthew Venne, Senior Solutions DirectorIn an increasingly interconnected world, securing digital assets and sensitive information has never been more critical. In a never-ending game of "cat and mous" Security Boulevard Implementing Zero Trust with Okta's Identity Engine Matthew P. Venne, stackArmor, Sr. Solutions Director Sep 27 By: Matthew Venne, Senior Solutions Director In an increasingly interconnected world, securing digital assets and sensitive information has never been more critical. In a never-ending game of "cat and mouse, malicious actors and cyber security professionals go back and forth trying to one-up each other.   As a result, the security required to protect digital assets […] Read more of this post Comment Unsubscribe to no longer receive posts from Security Boulevard. Change your email settings at manage subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://securityboulevard.com/2023/09/implementing-zero-trust-with-oktas-identity-engine/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110