DevSecOps

No, Elon — X DDoS was NOT by Ukraine
Richi Jennings | | Cloudflare DDoS Protection, cyber attacks during ukraine war, cyber attacks russia, Dark Storm Team, ddos, DDoS attack, Denial of Service, Denial of Service (DoS) attacks, denial of service attacks, denial of service vulnerability, distributed denial of service, Distributed denial of service (DDoS) attacks, distributed denial of service attack, Elon Musk, elon musk twitter, hacktivism ukraine cyber-attacks, Russia, Russia-Ukraine, russia-ukraine conflict, Russia's War on Ukraine, SB Blogwatch, social media, Social Media Attack, social media attacks, social media cyber attacks, Social Media Cybercrime, Social Media Exploits, Ukraine, ukraine conflict, Ukraine Cyber War, Ukraine-Russia War, Ukraine/European Security, X
X marks the botnet: Outage outrage was a Ukrainian cyberattack, implies our favorite African billionaire comedy villain ...
Security Boulevard

Eric Brüggemann on Code Intelligence Launching Spark
Eric Brüggemann, CEO of Code Intelligence, introduces Spark, their new AI-driven security testing tool. Spark automates vulnerability detection by integrating into CI/CD pipelines and eliminating the need for developers to manually write ...
Security Boulevard

Understanding Application Detection and Response (ADR) | Contrast Security
Contrast Marketing | | ADR, Application Detection and Response (ADR), Application Security (AppSec), Data breach, Runtime Application Security Protection (RASP), Security Operations Center (SOC), Software Composition Analysis (SCA), Threat Detection and Response, vulnerability, Web Application Firewall (WAF), zero-days
The Application Security (AppSec) landscape is changing fast. With recent high-profile breaches and a wave of new Application Detection and Response (ADR) solutions hitting the market, it's crucial to understand why legacy ...

Election Security: Here’s What We Should Really Be Worried About
Rather than buying into unfounded claims of how fragile our election technology is, perhaps we should recognize its proven strengths and focus on improving from there ...
Security Boulevard

Apple Enrages IT — 45-Day Cert Expiration Fury
Richi Jennings | | 90-day certificates, 90-day TLS certificate validity, Apple, Apple Safari, browser, Browser Security, CA/B Forum, CA/Browser Forum, CAB Forum, certificate, Certificate and Key Lifecycle Management, Certificate and Key Management, Certificate Automation, mobile safari, Safari, SB Blogwatch, Sectigo
CA/B testing: Ludicrous proposal draws ire from “furious” systems administrators ...
Security Boulevard

(In)Fidelity Admits Data Breach 8 Weeks Ago — 77K PII Lost
Richi Jennings | | Access control, Access control and Identity Management, access control issues, Access Controls, and Access Control in Security+, asset management, Authentication, authorization, Banking/Fintech, broken access controls, cloud data access control, cybersecurity access controls, cybersecurity in fintech, data access control, Fidelity Investments, Fintech, fintech industry, fintech sector, improper access control, SB Blogwatch
FMR FAIL: Huge investment firm won’t say how it was hacked ...
Security Boulevard

Biggest Ever DDoS is Threat to OT Critical Infrastructure
Richi Jennings | | Analyzing DDoS Attacks, application-layer DDoS attacks, Cloudflare DDoS Protection, Critical Infrastructure, critical infrastructure attack, critical infrastructure attacks, Critical Infrastructure Security and Resilience Month, cyber attack on critical infrastructure, ddos, DDoS amplification, DDoS attack, distributed denial of service, Distributed denial of service (DDoS) attacks, distributed denial of service attack, ICS, ICS/SCADA systems, industrial control systems, Infrastructure, iot, operational technologies, operational technology, operational technology security, OT, SB Blogwatch, US critical infrastructure
Egyptian River Floods: Operational technology (OT) targeted in “world record” 3.8 Tb/s distributed denial of service (DDoS) ...
Security Boulevard

Kia’s Huge Security Hole: FIXED (Finally)
Richi Jennings | | Car Dealer, connected car security, Connected Cars, connected vehicle, Connected Vehicles, connected-car, Consumer IoT, Internet of things, Internet of Things (IoT), Internet of Things (IoT) Security, Internet of Things cyber security, iot, Kia, Korea, SB Blogwatch, South Korea, southkorea
Connected cars considered crud: Kia promises bug never exploited. But even 10-year-old cars were vulnerable ...
Security Boulevard

CrowdStrike Gets Grilled By U.S. Lawmakers Over Faulty Software Update
In what has become an annual ritual between Silicon Valley and the Beltway, a House subcommittee pressed a tech company over a glitch. And the company promised to do better. During a ...
Security Boulevard

E2EE is MIA in iPhone/Android Chat — GSMA Gonna Fix it
Richi Jennings | | android, Apple, Apple iOS, Apple iPhone, china, E2EE, end-to-end, end-to-end encryption, google, Great Firewall of China, GSMA, iChat, imessage, ios, iOS 18, iPhone, iphone security, MLS, RCS, RCS protocol, SB Blogwatch, SMS, SMS messages
No More Barf-Green Bubbles? GSM Association is “excited” to bring Apple and Google closer together, but encryption is still lacking ...
Security Boulevard