Security Boulevard

When it comes to healthcare data security, HIPAA is the name everyone knows. It’s been around for decades, laying down the law on handling patient information. But what if I told you there’s another player in town? I’m talking about the HICP—the “Health Industry Cybersecurity Practices” publication. If you haven’t heard of it, you’re not […]

The post HICP vs. HIPAA: Understanding the Differences and Their Impact on Healthcare Compliance appeared first on Centraleyes.

The post HICP vs. HIPAA: Understanding the Differences and Their Impact on Healthcare Compliance appeared first on Security Boulevard.

Perfectl in an impressive piece of malware:

The malware has been circulating since at least 2021. It gets installed by exploiting more than 20,000 common misconfigurations, a capability that may make millions of machines connected to the Internet potential targets, researchers from Aqua Security said. It can also exploit CVE-2023-33246, a vulnerability with a severity rating of 10 out of 10 that was patched last year in Apache RocketMQ, a messaging and streaming platform that’s found on many Linux machines.

The researchers are calling the malware Perfctl, the name of a malicious component that surreptitiously mines cryptocurrency. The unknown developers of the malware gave the process a name that combines the perf Linux monitoring tool and ctl, an abbreviation commonly used with command line tools. A signature characteristic of Perfctl is its use of process and file names that are identical or similar to those commonly found in Linux environments. The naming convention is one of the many ways the malware attempts to escape notice of infected users...

The post Perfectl Malware appeared first on Security Boulevard.

As global markets become more interconnected and businesses strive for agility and cost-efficiency, outsourcing software development has become a strategic choice for companies worldwide. The...Read More

The post India, Latin America, or Vietnam: Where Should You Outsource Software Development in 2024? appeared first on ISHIR | Software Development India.

The post India, Latin America, or Vietnam: Where Should You Outsource Software Development in 2024? appeared first on Security Boulevard.

Publicly exposed, critically vulnerable and highly privileged workloads are putting organizations at risk of cloud data losses and cyberattacks, according to a Tenable report, which labeled the vulnerabilities a “toxic cloud triad”.

The post Toxic Triad of Cloud Vulnerabilities Puts Businesses at Risk appeared first on Security Boulevard.

A Proclamation on Indigenous Peoples’ Day, 2021

Since time immemorial, American Indians, Alaska Natives, and Native Hawaiians have built vibrant and diverse cultures — safeguarding land, language, spirit, knowledge, and tradition across the generations. On Indigenous Peoples’ Day, our Nation celebrates the invaluable contributions and resilience of Indigenous peoples, recognizes their inherent sovereignty, and commits to honoring the Federal Government’s trust and treaty obligations to Tribal Nations.

Our country was conceived on a promise of equality and opportunity for all people — a promise that, despite the extraordinary progress we have made through the years, we have never fully lived up to. That is especially true when it comes to upholding the rights and dignity of the Indigenous people who were here long before colonization of the Americas began. For generations, Federal policies systematically sought to assimilate and displace Native people and eradicate Native cultures. Today, we recognize Indigenous peoples’ resilience and strength as well as the immeasurable positive impact that they have made on every aspect of American society. We also recommit to supporting a new, brighter future of promise and equity for Tribal Nations — a future grounded in Tribal sovereignty and respect for the human rights of Indigenous people in the Americas and around the world.

In the first week of my Administration, I issued a memorandum reaffirming our Nation’s solemn trust and treaty obligations to American Indian and Alaska Native Tribal Nations and directed the heads of executive departments and agencies to engage in regular, meaningful, and robust consultation with Tribal officials. It is a priority of my Administration to make respect for Tribal sovereignty and self-governance the cornerstone of Federal Indian policy. History demonstrates that Native American people — and our Nation as a whole — are best served when Tribal governments are empowered to lead their communities and when Federal officials listen to and work together with Tribal leaders when formulating Federal policy that affects Tribal Nations.

The contributions that Indigenous peoples have made throughout history — in public service, entrepreneurship, scholarship, the arts, and countless other fields — are integral to our Nation, our culture, and our society. Indigenous peoples have served, and continue to serve, in the United States Armed Forces with distinction and honor — at one of the highest rates of any group — defending our security every day. And Native Americans have been on the front lines of the COVID-19 pandemic, working essential jobs and carrying us through our gravest moments. Further, in recognition that the pandemic has harmed Indigenous peoples at an alarming and disproportionate rate, Native communities have led the way in connecting people with vaccination, boasting some of the highest rates of any racial or ethnic group.

The Federal Government has a solemn obligation to lift up and invest in the future of Indigenous people and empower Tribal Nations to govern their own communities and make their own decisions. We must never forget the centuries-long campaign of violence, displacement, assimilation, and terror wrought upon Native communities and Tribal Nations throughout our country. Today, we acknowledge the significant sacrifices made by Native peoples to this country — and recognize their many ongoing contributions to our Nation.

On Indigenous Peoples’ Day, we honor America’s first inhabitants and the Tribal Nations that continue to thrive today. I encourage everyone to celebrate and recognize the many Indigenous communities and cultures that make up our great country.

NOW, THEREFORE, I, JOSEPH R. BIDEN JR., President of the United States of America, do hereby proclaim October 11, 2021, as Indigenous Peoples’ Day. I call upon the people of the United States to observe this day with appropriate ceremonies and activities. I also direct that the flag of the United States be displayed on all public buildings on the appointed day in honor of our diverse history and the Indigenous peoples who contribute to shaping this Nation.

IN WITNESS WHEREOF, I have hereunto set my hand this eighth day of October, in the year of our Lord two thousand twenty-one, and of the Independence of the United States of America the two hundred and forty-sixth.

JOSEPH R. BIDEN JR.

Permalink

The post Happy United States of America Indigenous Peoples’ Day appeared first on Security Boulevard.

Scytale makes Tekpon’s Top Compliance Software list again for seamless solutions and expert guidance. Discover why businesses choose us!

The post Scytale Makes Tekpon’s Top Compliance Software List (Again!) appeared first on Scytale.

The post Scytale Makes Tekpon’s Top Compliance Software List (Again!) appeared first on Security Boulevard.

Infosecurity.US Wishes Our Family, Friends And All Canadians Everywhere, A Safe And Happy Thanksgiving 14 October 2024! / Infosecurity.US souhaite à notre famille, à nos amis et à tous les Canadiens Partout, un Thanksgiving sûr et joyeux 14 octobre 2024 !

The post Happy Canadian Thanksgiving / Joyeux Canadien Action de Grâce appeared first on Security Boulevard.

What is the KCDPA? The Kentucky Consumer Data Protection Act (KCDPA) is a state-level privacy law designed to safeguard the personal information of Kentucky residents. Like other state privacy regulations, KCDPA sets rules for how businesses collect, use, store, and share consumer data. The law aims to ensure that individuals have greater control over their […]

The post Kentucky Consumer Data Protection Act (KCDPA) appeared first on Centraleyes.

The post Kentucky Consumer Data Protection Act (KCDPA) appeared first on Security Boulevard.

In the milestone 350th episode of the Shared Security Podcast, the hosts reflect on 15 years of podcasting, and the podcast’s evolution from its beginnings in 2009. They discuss the impact of a current hurricane on Florida, offering advice on using iPhone and Android satellite communication features during emergencies. The ‘Aware Much’ segment focuses on […]

The post Emergency Satellite Messaging, Stagnation in User Cybersecurity Habits appeared first on Shared Security Podcast.

The post Emergency Satellite Messaging, Stagnation in User Cybersecurity Habits appeared first on Security Boulevard.

Executive Summary Researchers at the Spark Research Lab (University of Texas at Austin)1, under the supervision of Symmetry CEO Professor...

The post ConfusedPilot: UT Austin & Symmetry Systems Uncover Novel Attack on RAG-based AI Systems appeared first on Symmetry Systems.

The post ConfusedPilot: UT Austin & Symmetry Systems Uncover Novel Attack on RAG-based AI Systems appeared first on Security Boulevard.

Authors/Presenters:Vaibhav Singh, Tusher Chakraborty, Suraj Jog, Om Chabra, Deepak Vasisht, Ranveer Chandra

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – Spectrumize: Spectrum-Efficient Satellite Networks for the Internet of Things appeared first on Security Boulevard.

One of the biggest dilemmas for security teams is when to patch vulnerabilities. This is a classic “Patch-22” situation—patching immediately can be time-consuming and disruptive, but waiting leaves your organization exposed to cyber threats. It’s a tough balancing act between fixing vulnerabilities and maintaining business continuity.  With cyberattacks evolving and becoming more frequent, waiting to […]

The post Patch-22: The Catch of Waiting to Fix Cybersecurity Vulnerabilities  appeared first on VERITI.

The post Patch-22: The Catch of Waiting to Fix Cybersecurity Vulnerabilities  appeared first on Security Boulevard.

Bad actors often take advantage of natural disasters, and especially hurricanes, in times of crisis. Hurricanes Helene and Milton pose significant new online threats, including misinformation and fraud.

The post Misinformation, Online Scams Surging Following Historic Hurricanes appeared first on Security Boulevard.

Authors/Presenters:Bill Tao, Om Chabra, Ishani Janveja, Indranil Gupta, Deepak Vasisht

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – Known Knowns and Unknowns: Near-Realtime Earth Observation Via Query Bifurcation In Serval appeared first on Security Boulevard.

In today’s complex cyber landscape, managing risks effectively isn’t just about identifying threats—it’s about understanding their impact and knowing how to prioritize vulnerabilities. With constant changes in the vulnerability landscape, security teams need tools that not only quantify risks but also enable them to act swiftly. This is where KnightVision, a core feature within CyberSaint’s CyberStrong platform, plays a pivotal role. By focusing on cyber risk quantification and vulnerability prioritization, KnightVision helps security leaders make data-driven decisions that strengthen their cybersecurity posture.

The post Transforming Cyber Risk Quantification and Vulnerability Prioritization with KnightVision appeared first on Security Boulevard.

Online brand impersonation is an insidious threat compared to more straightforward attacks. Ransomware, for example, is simply extortion. A cybercriminal encrypts your data, holds it hostage, and demands payment in exchange for encryption keys. The consequences of the attack are either the loss of data or the cost of the ransom (and associated downtime). Online […]

The post Cost of Online Brand Impersonation: Customer Acquisition and Loyalty first appeared on alluresecurity.

The post Cost of Online Brand Impersonation: Customer Acquisition and Loyalty appeared first on Security Boulevard.

This year’s Cyber Security Awareness Month theme is “Generation Cyber Safe: Because online security knows no age”, but what does that mean? The annual theme of

The post Generational security: The meaning behind this year’s Cyber Security Awareness Month theme appeared first on Security Boulevard.

The InCyber Forum Canada 2024 conference is an outstanding event, packed with multiple stages, many thought-leadership panels, and an expansive array of vendors showcasing their latest innovation.

Come join me in Montreal Canada, Oct 29th-30th, and check out our panel Protect your Data, Thrive in Business: Strike a Balance on the Trust & Safety stage (Oct 30th, from 2:40pm to 3:40pm).

Registration is open now and here is a bonus: an exclusive 50% discount code on registration, so you can enjoy all the sessions!

Registration link: https://2024.northamerica.forum-incyber.com/en/pe1/pe1-home.htm

Discount code is: ININ59XU2CF3

Panel Abstract: Protecting data while thriving in business is a delicate but much needed balance in today’s digital landscape. Companies are faced with the need to ensure the privacy and security of their customers’ data while continuing to innovate and grow. What are the best practices for striking the right balance?

Esteemed Panel:

• Luc Gagnon — Chief Technology Officer of the Canada Treasury Board
• Sandra Estok — Founder & CEO of Way2Protect
• Brandon Pugh — Director of Cybersecurity and Emerging Threats Policy at R Street Institute
• Tania Tanic — Founder & CEO of Brainstorm CyberRisque
• Matthew Rosenquist — CISO and Cybersecurity Strategist at Mercury Risk
• Nataliya Khylenko (moderator) — President & Founder of KhylenCo Consulting and AdaptAble Academy

The post InCyber Forum Canada 2024 appeared first on Security Boulevard.

In July, I wrote about my new book project on AI and democracy, to be published by MIT Press in fall 2025. My co-author and collaborator Nathan Sanders and I are hard at work writing.

At this point, we would like feedback on titles. Here are four possibilities:

1. Rewiring the Republic: How AI Will Transform our Politics, Government, and Citizenship
2. The Thinking State: How AI Can Improve Democracy
3. Better Run: How AI Can Make our Politics, Government, Citizenship More Efficient, Effective and Fair
4. AI and the New Future of Democracy: Changes in Politics, Government, and Citizenship...

The post More on My AI and Democracy Book appeared first on Security Boulevard.

Authors/Presenters:Lixin Liu, Yuanjie Li, Hewu Li, Jiabo Yang, Wei Liu, Jingyi Lan, Yufeng Wang, Jiarui Li, Jianping Wu, Qian Wu, Jun Liu, Zeqi Lai

Recipient: Outstanding Paper Award

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – Democratizing Direct-to-Cell Low Earth Orbit Satellite Networks appeared first on Security Boulevard.