#security-baselines
#security-baselines
[ follow ]
#cybersecurity #data-breach #vulnerabilities #ai-security #cloud-security #compliance #ai #access-control #security
fromComputerworld
15 hours agoA core infrastructure engineer pleads guilty to federal charges in insider attack
Rhyne's attack involved unauthorized remote desktop sessions, deletion of network administrator accounts, and changing of passwords, showcasing significant security vulnerabilities.
Information security
#data-breach
Privacy professionals
fromSilicon Canals
23 hours agoA fintech app asked users for their passports - then left 360,000 files unprotected for five years - Silicon Canals
A money transfer app exposed over 360,000 sensitive files on a public server for nearly five years, including unencrypted personal documents.
fromWIRED
1 day agoCBP Facility Codes Sure Seem to Have Leaked Via Online Flashcards
The public Quizlet set contained information about alleged codes for specific facility entrances. 'Checkpoint doors code?' asked one card, with a specific four-digit combination listed in response.
Privacy professionals
fromTechCrunch
2 days agoHasbro says it was hacked, and may take 'several weeks' to recover | TechCrunch
Hasbro detected an intrusion on March 28, prompting the company to take down some of its systems. Parts of Hasbro's website appeared down, with error messages indicating maintenance.
Privacy professionals
#ai-security
Software development
fromThe Hacker News
2 weeks agoHow Ceros Gives Security Teams Visibility and Control in Claude Code
AI coding agents like Claude Code operate outside existing enterprise security controls, requiring new machine-level security infrastructure to provide visibility, policy enforcement, and audit trails.
Information security
fromThe Hacker News
2 weeks agoAI is Everywhere, But CISOs are Still Securing It with Yesterday's Skills and Tools, Study Finds
Security leaders lack adequate tools and skills to defend AI systems, with visibility gaps and skills shortages creating critical vulnerabilities in AI infrastructure security.
Software development
fromThe Hacker News
2 weeks agoHow Ceros Gives Security Teams Visibility and Control in Claude Code
AI coding agents like Claude Code operate outside existing enterprise security controls, requiring new machine-level security infrastructure to provide visibility, policy enforcement, and audit trails.
Information security
fromThe Hacker News
2 weeks agoAI is Everywhere, But CISOs are Still Securing It with Yesterday's Skills and Tools, Study Finds
Security leaders lack adequate tools and skills to defend AI systems, with visibility gaps and skills shortages creating critical vulnerabilities in AI infrastructure security.
Privacy professionals
fromMedCity News
2 weeks agoThe Evolving Landscape of Privacy and Cybersecurity: Essential Strategies for Legal and Compliance Professionals - MedCity News
Organizations must combine strong controls with comprehensive employee training and accountability culture to effectively protect sensitive data and comply with evolving privacy laws.
Privacy professionals
fromThe US Sun
2 weeks agoSmall businesses sleepwalking into cybersecurity crisis, expert warns
One in five UK SMEs would close within three months following a data breach, with businesses losing up to £100k annually on unbudgeted security fixes despite risky practices like public Wi-Fi use and minimal cybersecurity training.
Privacy professionals
fromDataBreaches.Net
1 month agoShutdown Stalls Compliance Plans for Cyber Breach Reporting Rule - DataBreaches.Net
A partial government shutdown delays the DHS cybersecurity incident reporting rule, leaving companies uncertain about compliance requirements and enforcement timelines.
fromSecuritymagazine
2 months agoThe New Battleground of Cybersecurity
I've always had what I would consider a hacker mindset, a curiosity to take things apart, understand them, and use that knowledge to solve problems. That mindset took me on a circuitous route into the cybersecurity industry; after being kicked out of high school for hacking computer systems, I worked a range of jobs, managing office supply companies by day and cracking Wi-Fi networks by night until I started a Digital Forensics degree which led me to the world of security research.
Science
Information security
fromSecuritymagazine
3 days agoThe Rising Tide of Executive Protection: Corporations Ramp Up Security in an Era of Heightened Threats
Companies are increasingly investing in executive protection due to rising threats, making it a strategic necessity for business continuity and resilience.
fromInfoQ
2 months agoWhat Testers Can Do to Ensure Software Security
A secure software development life cycle means baking security into plan, design, build, test, and maintenance, rather than sprinkling it on at the end, Sara Martinez said in her talk Ensuring Software Security at Online TestConf. Testers aren't bug finders but early defenders, building security and quality in from the first sprint. Culture first, automation second, continuous testing and monitoring all the way; that's how you make security a habit instead of a fire drill, she argued.
Software development
Information security
fromComputerWeekly.com
2 weeks agoBeyond integration theatre: Building stronger cyber platforms | Computer Weekly
Integration layers between security platforms, not the platforms themselves, have become the primary enterprise security risk requiring rigorous governance of delegated trust.
Information security
fromThe Hacker News
2 weeks agoWhy Security Validation Is Becoming Agentic
Security validation tools operate in silos while attackers exploit interconnected systems, creating a structural blind spot that Agentic Exposure Validation can address through continuous, autonomous, context-aware assessment.
Information security
fromComputerWeekly.com
3 weeks agoHow CISOs can build a truly unified and resilient security platform | Computer Weekly
Modern enterprise security requires rethinking architecture from perimeter defense to distributed asset protection across decentralized networks and cloud environments.
Information security
fromComputerWeekly.com
3 weeks agoVulnerability reports: Increase in quantity, decrease in quality? | Computer Weekly
Bug bounty programs face sustainability challenges due to increased low-quality submissions, prompting cURL founder Daniel Stenberg to shut down his HackerOne program and switch to GitHub for vulnerability reporting.
Information security
fromThe Hacker News
3 weeks agoDozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices
SAP released security updates for two critical vulnerabilities enabling arbitrary code execution: CVE-2019-17571 in Quotation Management Insurance and CVE-2026-27685 in NetWeaver Enterprise Portal Administration.
Information security
fromSecuritymagazine
3 weeks agoWhy Security Culture Metrics Matter More Than Dashboards
Traditional cybersecurity metrics create false confidence by masking hidden risks; culture metrics measuring employee engagement and responsiveness are essential for actual security effectiveness.
Information security
fromSecuritymagazine
1 month agoThe Great Security Culture Shift: Building a Proactive Defense in an Era of Advanced Threats and Social Engineering
Hackers exploit DLL side-loading on trusted platforms like LinkedIn to deliver malware through seemingly legitimate file attachments, bypassing traditional security defenses and compromising entire corporate networks.
Information security
fromwww.housingwire.com
2 months agoReducing risk: The importance of administrative access responsibilities
Clearly defined and strictly managed administrative access reduces cybersecurity risk while preserving operational efficiency in real estate, title insurance, and mortgage systems.
Information security
fromSecuritymagazine
1 month agoUnderstanding Breaches Before and After They Happen: What Every Organization Should Know
Most security breaches result from neglected fundamentals—human error, unpatched systems, weak authentication, and poor network segmentation—rather than advanced, novel exploits.
fromSecuritymagazine
1 month agoPlenty of Associations, But Not Enough Association
I belong to six professional organizations. Or maybe it's 13, 19, 26, or 47. I can't be sure. The ones where I pay dues or volunteer I know well: ASIS International, the Life Safety Alliance, Chartered Security Professionals, and a couple of others. Then come the niche and industry-specific associations like the International Council of Shopping Centers, public-private partnerships such as OSAC and Infragard, and the countless ASIS Communities.
Information security
fromThe Hacker News
2 months agoSecuring the Mid-Market Across the Complete Threat Lifecycle
For mid-market organizations, cybersecurity is a constant balancing act. Proactive, preventative security measures are essential to protect an expanding attack surface. Combined with effective protection that blocks threats, they play a critical role in stopping cyberattacks before damage is done. The challenge is that many security tools add complexity and cost that most mid-market businesses can't absorb. With limited budgets and lean IT and security teams, organizations often focus on detection and response.
Information security
[ Load more ]