Cybercriminals are coming for your loyalty points and messing with dynamic pricing—don’t let them win. Learn how to stay ahead and keep your customers protected.
The post Protecting Airlines: How to Stop Scraping and Loyalty Fraud appeared first on Security Boulevard.
Explore DDoS mitigation, from choosing providers to understanding network capacity, latency, SLAs, and how solutions like DataDome can protect your assets
The post How to Mitigate a DDoS Attack: A Comprehensive Guide for Businesses appeared first on Security Boulevard.
A report published by Google Cloud found nearly half (46%) of the observed security alerts involved a service account that was overprivileged.
The post Google Issues Cloud Security Wake-Up Call as Threats Evolve appeared first on Security Boulevard.
Discover how Sanoma reduced credential stuffing attacks by 99% with DataDome's real-time cyberfraud protection, while enjoying the benefits of easy integration and major time savings.
The post How Sanoma Saves Time & Protects User Accounts from Credential Stuffing Attacks appeared first on Security Boulevard.
The low-altitude economy is becoming an important force to promote economic growth by virtue of its innovative ability and huge development potential. From UAV logistics distribution to urban air traffic, from emergency rescue to aerial photography and mapping, the application scenarios of low-altitude economy have been continuously expanded, and the market scale has been expanding […]
The post Security Risks of Low-altitude Economy appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..
The post Security Risks of Low-altitude Economy appeared first on Security Boulevard.
Organizations today operate in dynamic and fast-paced environments, where multiple cross-functional teams are working together to develop, deploy, and manage infrastructure, cloud services and applications. These teams need digital certificates at nearly every stage for various purposes and at different times. The responsibility of issuing and managing these certificates often falls on the shoulders of […]
The post Certificate Management Self-Service Capabilities to Simplify Access and Boost Efficiency appeared first on Security Boulevard.
As we celebrate Data Privacy Day, Bernard Montel, Tenable’s EMEA Technical Director and Security Strategist, wants to remind us that we live in a digital world and that we need to protect it. With data breaches a daily occurrence, and AI changing the playing field, he urges everyone to “do better.”
Launched in April 2006 by the Council of Europe, Data Protection Day – or Data Privacy Day, as it’s known outside of Europe – is celebrated globally every year on January 28. Back in 2006, around 100 million records were compromised across various breaches in the U.S., according to data collated by Privacy Rights Clearing House. But in 2024, in just one data breach suffered by National Public Data (NPD), approximately 2.9 billion records were allegedly stolen.
Collectively, we have to do better.
The lifeblood of the organizationData is the essence of every company. It’s information about your customers, your employees, your intellectual property, your financial performance and more. Data also fuels innovation in the cloud. However, the volume and complexity in hybrid and multi-cloud environments make it increasingly complex to secure your business’s data.
Externally, data breaches can lead to mistrust and brand damage, as well as to lawsuits, fines and lost business. Internally, they can – and should – trigger increased scrutiny from the board, which will justifiably question the strength of the organization’s security posture.
When AI comes marching inWith data at the heart of everything, AI has completely changed the playing field this Data Privacy Day, adding a further layer of risk when it comes to protecting our information.
Organizations face the complex task of controlling AI deployment usage while also identifying vulnerabilities within AI tools and AI development packages. The adoption of AI increases the volume and variety of cloud data. In tandem, as AI applications become more sophisticated, they require more training data to learn from and function effectively. Thus, protecting cloud data is paramount to maintaining the integrity and security of your business’s AI usage.
Externally, threat actors are also looking to supercharge their activity with AI. It has been well documented how attackers are leveraging AI to write more sophisticated and effective malware for ransomware attacks, as well as to enhance phishing scams and more.
You can’t have privacy without securityTo take advantage of the unique opportunities offered by the cloud and AI, you must address the full spectrum of security responsibilities that accompany collecting, storing, and using data. These responsibilities include automatically and continuously scanning data assets, discovering and monitoring sensitive data, and alerting on any potential risk.
Protecting data in public cloud environments starts with three steps:
Let’s look at how the integration of data security posture management (DSPM) into a cloud native application protection plaform (CNAPP) can give you a comprehensive view of your cloud data and the risks associated with it.
DSPM is a set of ongoing processes and technologies that provides visibility into where sensitive data is stored, who has access to it, and how it's being used across your systems, providing analysis of the overall security posture around data itself, rather than just the infrastructure hosting it.
Meanwhile, CNAPP solutions replace a patchwork of siloed products that often cause more problems than they solve, such as multiple false positives and excessive alerts. Those individual products usually provide only partial coverage and often create overhead and friction with the products they’re supposed to work with. Most importantly, CNAPPs allow businesses to monitor the health of cloud native applications as a whole rather than individually monitoring cloud infrastructure and application security.
When DSPM is integrated into a CNAPP, it empowers the security team to obtain actionable data context that helps the team better prioritize risks and reduce the organization's exposure to customer data breaches and the compromise of AI resources and intellectual property.
How Tenable can helpWith Tenable Cloud Security, you can reduce risk by rapidly exposing and closing priority security gaps caused by misconfigurations, risky entitlements and vulnerabilities – in one powerful CNAPP. With integrated DSPM capabilities, Tenable Cloud Security continuously monitors your multi-cloud environment to discover and classify data types, assign sensitivity levels and prioritize data findings in the context of the entire cloud attack surface.
At Tenable, we help you identify your weaknesses, detect your gaps and close your exposures quickly. This Data Privacy Day, do better by taking action to protect the data that your organization relies upon to function and that you’re trusted to protect, wherever it resides.
Learn more
The post What Makes This “Data Privacy Day” Different? appeared first on Security Boulevard.
The DOJ, which has move aggressively over the past year to find and shut down North Korea's numerous IT worker scams, indicts two U.S. citizens and three others for running a six-year operation the stole more than $866,000 from 10 U.S. companies that thought they were hiring legitimate IT pros.
The post U.S. Shuts Down Another N. Korean IT Worker Scam, Indicting 5 appeared first on Security Boulevard.
In this episode, Paul Asadoorian and Chase Snyder discuss the latest security threats and vulnerabilities affecting network appliances, particularly focusing on Avanti and Fortinet platforms. They explore the increasing risks associated with these devices, the need for improved security standards, and the challenges of risk management and visibility in network security. The conversation emphasizes the […]
The post BTS #44 - Network Appliances: A Growing Concern appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.
The post BTS #44 – Network Appliances: A Growing Concern appeared first on Security Boulevard.
Most organizations believe they have a solid process for managing vulnerabilities and exposures. Yet attackers continue to exploit vulnerabilities as one of the most common paths to breaches. This isn’t because these organizations use antiquated methods but because they struggle to keep up with all exposures. Security leaders can significantly reduce risk by adopting a …
The post Is Your Vulnerability Management Strategy Doing More Harm than Good? appeared first on Security Boulevard.
Gartner forecasts generative AI will be used in 17% of cyberattacks within the next two years. This is not surprising, given that we already see examples of threat actors using AI for their operations. The initial use case involves leveraging AI to simplify access to an environment.
The post AI-Enhanced Attacks Accelerate the Need for Hybrid, Multi-Cloud Network Security and Observability appeared first on Netography.
The post AI-Enhanced Attacks Accelerate the Need for Hybrid, Multi-Cloud Network Security and Observability appeared first on Security Boulevard.
Author/Presenter: Julia Dewitz-Würzelberger
Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.
The post DEF CON 32 – Simulating Attacks Against Hydroelectric Power Plants appeared first on Security Boulevard.
A large-scale phishing campaign is using PDF files and hidden malicious links, as well as posing at the U.S. Postal Service, in phishing campaign targeting mobile device users in hope that victims will divulge credentials and personal information, Zimperium researchers say.
The post Hackers Use Malicious PDFs, pose as USPS in Mobile Phishing Scam appeared first on Security Boulevard.
As the February 2nd deadline approaches, CISOs and CCOs face the pressing task of aligning their organizations with the EU AI Act’s stringent requirements. Chapter 1, Article 4 mandates AI literacy for all staff involved in AI operations, while Chapter 2, Article 5 prohibits certain practices that could infringe on fundamental rights. This article explores...
The post How to Prepare for EU AI Act Compliance by February 2nd appeared first on Hyperproof.
The post How to Prepare for EU AI Act Compliance by February 2nd appeared first on Security Boulevard.
AI agents like OpenAI Operator complicate fraud detection, demanding fraud prevention solutions that leverage behavioral analysis and client-side signals to properly assess user intent.
The post Why The Rise of AI Agents Demands a New Approach to Fraud Prevention appeared first on Security Boulevard.
via the comic humor & dry wit of Randall Munroe, creator of XKCD
The post Randall Munroe’s XKCD ‘T. Rex Evolution’ appeared first on Security Boulevard.
Cary, NC, Jan. 26, 2025, CyberNewswire — INE Security, a leading global provider of cybersecurity training and certifications, today announced a new initiative designed to accelerate compliance with the Department of Defense’s (DoD) newly streamlined Cybersecurity Maturity Model Certification … (more…)
The post News alert: INE Security announces new initiative to help companies accelerate CMMC 2.0 compliance first appeared on The Last Watchdog.
The post News alert: INE Security announces new initiative to help companies accelerate CMMC 2.0 compliance appeared first on Security Boulevard.
by Source Defense Ensuring compliance with PCI DSS 4.0, specifically requirements 6.4.3 and 11.6.1, is not just about meeting regulations—it’s about securing your customers’ trust and protecting your brand from emerging threats like Magecart and eSkimming. Achieving this requires more than just technology; it requires a trusted partner who can navigate the complexities of compliance.
The post Finding the Right Partner for PCI DSS 4.0.1 Compliance: Requirements 6.4.3 and 11.6.1 appeared first on Source Defense.
The post Finding the Right Partner for PCI DSS 4.0.1 Compliance: Requirements 6.4.3 and 11.6.1 appeared first on Security Boulevard.
Author/Presenter: Lacey Harbour
Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.
The post DEF CON 32 – 3DU Homo ex Machina appeared first on Security Boulevard.
Exabeam has extended the reach of its generative artificial intelligence (GenAI) capabilities to its LogRhythm security information event management platform which is designed to be deployed by internal IT teams.
The post Exabeam Extends Generative AI Reach to LogRhythm SIEM appeared first on Security Boulevard.
