transparency

Cybersecurity Insights with Contrast CISO David Lindner | 05/16/25

Cybersecurity Insights with Contrast CISO David Lindner | 05/16/25

| | Accountability, Application Security, CISO, Cybersecurity, Data Prioritization, European Vulnerability Database (EUVD), Operational Vulnerabilities, risk management, Security Vendors, transparency, vulnerability database
Insight No. 1 — Security vendor alert Regarding the open letter that hit a nerve at RSAC this year for calling out lack of reliability, accountability and transparency on the part of ...
AppSec Observer
social engineering, social red teams, cybersecurity,

In a Social Engineering Showdown: AI Takes Red Teams to the Mat 

| | AI, GenAI teams, Red Teams, social engineering, transparency
That AI has gotten much more proficient in social engineering is a revelation that's not surprising, but still sets alarm bells ringing ...
Security Boulevard
Beyond open vs. closed: Understanding the spectrum of AI transparency

Beyond open vs. closed: Understanding the spectrum of AI transparency

| | Artificial Intelligence, generative AI, open source, open-source-software, transparency
Artificial intelligence (AI) is transforming industries, from software development to cybersecurity. But as AI adoption grows, so does the discussion around its accessibility and transparency. Unlike traditional software, where the concept of ...
2024 Sonatype Blog
Cybersecurity Insights with Contrast CISO David Lindner | 02/27/25

Cybersecurity Insights with Contrast CISO David Lindner | 02/27/25

| | Application Detection and Response (ADR), cybersecurity culture, cybersecurity incident reporting, Detection & Response, extended detection response, Ransomware, transparency
Insight #1 - Veracode report: Flaw fix times increase 47% since 2020 Veracode’s 2025 State of Software Security report exposes a troubling trend — flaw fix times have surged 47%, jumping from ...
AppSec Observer
Cybersecurity Insights with Contrast CISO David Lindner | 02/21/25

Cybersecurity Insights with Contrast CISO David Lindner | 02/21/25

| | Application Detection and Response (ADR), cybersecurity culture, cybersecurity incident reporting, Detection & Response, extended detection response, Ransomware, transparency
Want credibility? Don’t hide in a closet after a security incident Be transparent with stakeholders during a security incident by clearly communicating what is being done and when they can expect updates ...
AppSec Observer
A person signing secrecy

FortiJump: Yet Another Critical Fortinet 0-Day RCE

| | Carl Windsor, CVE-2024-47575, FG-IR-24-423, fgfmsd, Fortigate, FortiGate devices, FortiGate Flaw, FortiJump, Fortinet, Inc., responsible disclosure, responsible disclosure program, SB Blogwatch, transparency
FortiFAIL: Remote code execution vulnerability still not acknowledged by Fortinet after 10+  days’ exploitation ...
Security Boulevard
Cybersecurity Insights with Contrast CISO David Lindner | 5/31/24

Cybersecurity Insights with Contrast CISO David Lindner | 5/31/24

| | AI, Malware, runtime security, social engineering, transparency
Insight #1 Transparency isn't just about promising action, it's about proving it. It means sharing the data and results that show you're following through on your commitments ...
AppSec Observer
Cybersecurity Insights with Contrast CISO David Lindner | 1/5/24

Cybersecurity Insights with Contrast CISO David Lindner | 1/5/24

| | runtime security, transparency
Insight #1 In light of 23andMe blaming victims for their data getting breached, I have two things to ask: Users, please stop reusing passwords. Providers, please start requiring multifactor authentication (MFA) ...
AppSec Observer
Cybersecurity Insights with Contrast CISO David Lindner | 12/15/23

Cybersecurity Insights with Contrast CISO David Lindner | 12/15/23

| | runtime security, transparency
Insight #1 2023 saw the "transparency" movement continue for software organizations. In 2024, this will continue, and we as software organizations should fully embrace it and start following frameworks like the Minimum ...
AppSec Observer

Spying through Push Notifications

| | metadata, national security policy, Privacy, spyware, surveillance, transparency, Uncategorized
When you get a push notification on your Apple or Google phone, those notifications go through Apple and Google servers. Which means that those companies can spy on them—either for their own ...
Schneier on Security
Load more