Tuesday, September 10, 2024

Security Boulevard

The Home of the Security Bloggers Network

Community Chats Webinars Library

Home
Security Creators Network
Webinars
Events
- Upcoming Events
- On-Demand Events
Sponsored Content
Chat
Library
Related Sites
Media Kit
About
Sponsor

Analytics
AppSec
CISO
Cloud
DevOps
GRC
Identity
Incident Response
IoT / ICS
Threats / Breaches
More
Humor

Hot Topics

Risk Assessment and Gap Analysis for Industrial Control System infrastructure: the core essentials
Just-in-Time Access: Key Benefits for Cloud Platforms
AI-Powered Deepfake Scams Wreak Havoc on Businesses
Sedexp Malware: The Stealthy Linux Threat Evading Detection
Seventh Sense Unveils Revolutionary Privacy-Preserving Face-Based Public Key Infrastructure and eID Solution

Humor Security Bloggers Network

Home » Cybersecurity » Humor » Randall Munroe’s XKCD ‘Daytime Firefly’

Randall Munroe’s XKCD ‘Daytime Firefly’

by Marc Handelman on July 31, 2023

via the comic artistry and dry wit of Randall Munroe, resident at XKCD!

*** This is a Security Bloggers Network syndicated blog from Infosecurity.US authored by Marc Handelman. Read the original post at: https://xkcd.com/2808/

July 31, 2023July 31, 2023 Marc Handelman Humor, Randall Munroe, Sarcasm, satire, XKCD

← Must-See Sessions at the Black Hat USA 2023 Conference
How Generative AI Will Transform Cybersecurity →

Techstrong TV

Click full-screen to enable volume control

Watch latest episodes and shows

Upcoming Webinars

AppSec for the Win: Proven Best Practices that Work

The AI Efficiency Edge: Empowering Your Teams with Okta & Amazon Q

Connectivity Cloud: The Last Great Cloud Transformation — Security Consolidation

Case of the Common Vulnerability? Secure Guardrails Can Help!

Podcast

Listen to all of our podcasts

Press Releases

GoPlus's Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

Subscribe to our Newsletters

More Humor

Humor Security Bloggers Network

Randall Munroe’s XKCD ‘Slingshots’

September 9, 2024 Marc Handelman | Yesterday 0

Analytics & Intelligence AppSec Cyberlaw Cybersecurity Data Privacy Data Security Deep Fake and Other Social Engineering Tactics DevSecOps Editorial Calendar Endpoint Featured Governance, Risk & Compliance Humor Identity & Access Identity and Access Management Incident Response Industry Spotlight Malware Most Read This Week Network Security News Popular Post Ransomware Regulatory Compliance Securing the Edge Security at the Edge Security Awareness Security Boulevard (Original) Security Operations Social - Facebook Social - LinkedIn Social - X Social Engineering Spotlight Threat Intelligence Threats & Breaches Zero-Trust

Russian ‘WhisperGate’ Hacks: 5 More Indicted

September 6, 2024 Richi Jennings | 3 days ago 0

Humor Security Bloggers Network

Randall Munroe’s XKCD ‘Lava Lakes’

September 5, 2024 Marc Handelman | 4 days ago 0

Application Security Cloud Security Cybersecurity Data Privacy Data Security Deep Fake and Other Social Engineering Tactics DevOps DevSecOps Digital Transformation Editorial Calendar Endpoint Featured Governance, Risk & Compliance Humor Identity & Access Identity and Access Management Incident Response Industry Spotlight Insider Threats Mobile Security Most Read This Week News Popular Post Regulatory Compliance Securing the Edge Security at the Edge Security Awareness Security Boulevard (Original) Security Challenges and Opportunities of Remote Work Security Operations Social - Facebook Social - LinkedIn Social - X Social Engineering Software Supply Chain Security Spotlight Threats & Breaches Vulnerabilities Zero-Trust

Yikes, YubiKey Vulnerable — ‘EUCLEAK’ FIDO FAIL?

September 4, 2024 Richi Jennings | Sep 04 0

Most Read on the Boulevard

Choosing the Best Cybersecurity Prioritization Method for Your Organization

Why and How to Secure GenAI Investments From Day Zero

RansomHub Emerges in Rapidly Evolving Ransomware Landscape

Is Cloud Security Ready for a Pivot to Behavioral Detection & Response

Russian ‘WhisperGate’ Hacks: 5 More Indicted

An Introduction to Trackers and the Data They Collect

Frustration Trying to Opt-Out After the National Public Data Breach

Protecting NATO Secret and Foreign Government Information

Unify & Conquer: How Open XDR Streamlines Your Security Operations

Cyber Insurers Are Not Your Friend – Why a Warranty May Be a Better Option

Industry Spotlight

Cloud Security Cybersecurity Data Privacy Data Security Endpoint Featured Industry Spotlight Mobile Security Network Security News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight

White House Wants to Tighten Internet Routing Security

September 4, 2024 Jeffrey Burt | Sep 04 0

API Security Application Security AppSec Cloud Security Cloud Security Cyberlaw Cybersecurity Data Privacy Editorial Calendar Featured Governance, Risk & Compliance Humor Identity & Access Incident Response Industry Spotlight Most Read This Week Network Security News Popular Post Securing the Cloud Security Awareness Security Boulevard (Original) Security Challenges and Opportunities of Remote Work Security Operations Social - Facebook Social - LinkedIn Social - X Software Supply Chain Security Spotlight Threats & Breaches Vulnerabilities Zero-Trust

China Cyberwar Coming? Versa’s Vice: Volt Typhoon’s Target

August 28, 2024 Richi Jennings | Aug 28 0

AI and ML in Security Analytics & Intelligence AppSec Cloud Security Cloud Security Cyberlaw Cybersecurity Data Privacy Deep Fake and Other Social Engineering Tactics DevOps DevSecOps Editorial Calendar Endpoint Featured Governance, Risk & Compliance Humor Incident Response Industry Spotlight IOT IoT & ICS Security Most Read This Week News Popular Post Regulatory Compliance Securing the Cloud Securing the Edge Security at the Edge Security Awareness Security Boulevard (Original) Security Operations Social - Facebook Social - LinkedIn Social - X Social Engineering Spotlight Threat Intelligence Threats & Breaches Zero-Trust

‘Terrorgram’ Telegram Terrorists Trash Transformers — Grid in Peril

August 27, 2024 Richi Jennings | Aug 27 0

Top Stories

Cybersecurity Deep Fake and Other Social Engineering Tactics Featured News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Social Engineering Spotlight Threats & Breaches Vulnerabilities

AI-Powered Deepfake Scams Wreak Havoc on Businesses

September 10, 2024 Nathan Eddy | 1 hour ago 0

Analytics & Intelligence CISO Suite CISO Talk Cybersecurity Featured News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X

Security Budget Growth Slows, but Spending Remains Elevated

September 9, 2024 Nathan Eddy | Yesterday 0

Cloud Security Cybersecurity Data Security Featured Incident Response Malware Network Security News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Social Engineering Spotlight Threat Intelligence

Threat Actors Abuse Red Team Tool MacroPack to Deliver Malware

September 6, 2024 Jeffrey Burt | 3 days ago 0

Security Humor

Randall Munroe’s XKCD ‘Slingshots’

Randall Munroe’s XKCD ‘Slingshots’

Download Free eBook

Managing the AppSec Toolstack

Join the Community

Add your blog to Security Creators Network
Write for Security Boulevard
Bloggers Meetup and Awards
Ask a Question
Email: [email protected]

Useful Links

About
Media Kit
Sponsor Info
Copyright
TOS
DMCA Compliance Statement
Privacy Policy

Related Sites

Techstrong Group
Cloud Native Now
DevOps.com
Digital CxO
Techstrong Research
Techstrong TV
Techstrong.tv Podcast
DevOps Chat
DevOps Dozen
DevOps TV

Powered by Techstrong Group

Copyright © 2024 Techstrong Group Inc. All rights reserved.

Application Security Check Up

Step 1 of 7

14%

Does someone in your organization write software?(Required)

Yes

No

What portion of your cyber risk is Application Security (AppSec)? (Select one)(Required)

We over-focus on AppSec

We focus on AppSec to match the risk

We under-focus on AppSec

What are the biggest challenges you face implementing a robust AppSec strategy? (Select all that apply)

Lack of budget

Insufficient skilled personnel

Complexity of integrating security into the development lifecycle

Resistance from development teams

Keeping up with evolving security threats

Lack of executive buy-in

Other (please specify)

Other

Which DevSecOps practices are widely used for actively developed projects (not legacy) (Select all that apply):(Required)

Automated unit and functional tests for quality run in the pipeline with merge blocking

Automated application security testing (AST) in development and (SAST/IAST) runs in the pipeline

Automated AST tools to find vulnerabilities in the code you import (SCA) run in the pipeline

Merge blocking at current policy level for AST checks

Secrets management so no secrets stored in source code repositories

How do you assess and mitigate risk of For NON actively developed products (legacy) (Select all that apply):

In-production scans using DAST products like Qualys, Nessus, etc.

Periodic penetration testing

Periodic running of AST tools

Manual code reviews by security specialists

Use of third-party security assessment services

No assessment or mitigation effort is happening

How do you resolve the security issues found? (Select all that apply):(Required)

Findings are manually triaged

Findings are communicated to engineering via mostly manual processes

Finding above a certain severity automatically populate engineering backlogs

Service level agreements (SLAs) are enforced based on severity

An exception process exists to allow the business to accept risk

The exception process is rarely used and must be renewed periodically

Which best describes security training for your developers? (Select all that apply)(Required)

Monthly

Quarterly

Annually

As part of onboarding

Just-in-time via integration with AST tools when a vulnerability is found

No formal training provided

Δ