2022, Blog and Security

Zero Trust Security for NIS2 compliance: What you need to know

CIO

SEPTEMBER 12, 2023

Over 100,00 organizations are expected to be impacted by Network and Information Security Directive (NIS2) cybersecurity standards that European Union (EU) member states must implement by October 2024. [i] This concept of least-privilege access is fundamental to Zero Trust Security practices.

Security

Security Compliance Network Policies

How Zero Trust can help align the CIO and CISO

CIO

SEPTEMBER 20, 2023

The role of the CIO (Chief Information Officer) and CISO (Chief Information Security Officer) have become increasingly important in recent years as organizations place more emphasis on digital transformation and information security. billion in 2022. The recent executive order signed by the U.S.

Artificial Inteligence

Artificial Inteligence Artificial Intelligence Compliance Machine Learning

Accelerating Real Time Security Outcomes with Precision AI

Palo Alto Networks

MAY 7, 2024

New capabilities enable customers to counter AI with AI, secure AI by design and simplify security. To help our customers combat new threats while also leveraging the promise of efficient security, Palo Alto Networks is introducing Precision AI TM. What Does AI Mean for Cybersecurity? How Should Security Teams React?

Generative AI

Generative AI Firewall Network Enterprise

Bipartisan Cybersecurity Legislation — Continuing the Progress in 2022

Palo Alto Networks

JANUARY 25, 2022

Fortunately, the strong bipartisan consensus on cybersecurity threats has led to bipartisan interest in cybersecurity legislation. With the 2022 legislative calendar now in full swing, we see cybersecurity policy activity coalescing around several worthwhile pillars of activity. You can’t secure what you can’t see.

Security

Security Government Network Policies

Cybersecurity Snapshot: Cyber Agencies Offer Secure AI Tips, while Stanford Issues In-Depth AI Trends Analysis, Including of AI Security

Tenable

APRIL 19, 2024

Check out recommendations for securing AI systems from the Five Eyes cybersecurity agencies. 1 - Multinational cyber agencies issue best practices for secure AI deployment Looking for best practices on how to securely deploy artificial intelligence (AI) systems? And don’t miss the latest CIS Benchmarks updates.

Artificial Inteligence

Artificial Inteligence Trends Technical Advisors Analysis

Top 5 Cybersecurity Career Path Options in 2022

Coding Dojo

MARCH 21, 2022

Cybersecurity as an industry has exploded since the turn of the century – and the global COVID pandemic has pushed … Read more >>. The post Top 5 Cybersecurity Career Path Options in 2022 appeared first on Coding Dojo Blog.

Industry

Learning From the Past — Ten 2022 Cybersecurity Events to Know

Palo Alto Networks

DECEMBER 29, 2022

While it might seem counterintuitive to revisit last week’s newspaper for valuable information, “Those who cannot remember the past are condemned to repeat it.” Stepping back to recollect the security events from the recent past is particularly important, as the risk of repeating past mistakes is particularly high. Beginning on Jan.

Malware

Malware Linux Telecommunications Government

Cybersecurity Snapshot: A Look Back at Key 2023 Cyber Data for GenAI, Cloud Security, Vulnerability Management, OT, Cyber Regulations and more

Tenable

DECEMBER 22, 2023

As we bid adieu to 2023, we highlight major trends that impacted cybersecurity professionals in the past 12 months. Learn how the cyber world changed in areas including artificial intelligence, CNAPP, IAM security, government oversight and OT security. Cybersecurity teams were no exception.

Artificial Inteligence

Artificial Inteligence Technical Review Cloud Artificial Intelligence

5 Tech Roles Still In Demand in 2022

Hacker Earth Developers Blog

OCTOBER 17, 2022

5 – Cybersecurity specialist. The description of this role is pretty self-explanatory, it is to keep computer information systems and all the data in them safe! Their job revolves around the creation of cybersecurity and defense programs and software to be used in the business sphere. Information Security.

Artificial Inteligence

Artificial Inteligence Security Artificial Intelligence Blockchain

Navigating the road ahead for automotive cybersecurity

Synopsys

FEBRUARY 22, 2022

With challenging cybersecurity requirements on the horizon for automotive companies in 2022, security teams can look to BSIMM12 for guidance. The post Navigating the road ahead for automotive cybersecurity appeared first on Software Integrity Blog.

Automotive

Automotive Software Company Testing

Remembering the startups we lost in 2022

TechCrunch

DECEMBER 20, 2022

But even with that in mind, 2022 just hit different. Securities and Exchange Commission (SEC) had officially charged Bankman-Fried with defrauding investors. Proving that home automation can be a tough nut to crack, Insteon abruptly shut down in mid-April 2022, turning off its cloud servers without giving customers any warning.

Technical Review

Technical Review Real Estate Software Review Mobile

What Does 2022 Hold For Your Cloud Security Practice?

Lacework

DECEMBER 9, 2021

The end of the year is upon us and as we face the approach of a new one, we’re thinking ahead and reflecting on the state of cybersecurity. from What Does 2022 Hold For Your Cloud Security Practice? The post What Does 2022 Hold For Your Cloud Security Practice? For us that means predictions.

Cloud

The Most In-Demand Cybersecurity Certifications (2022)

Coding Dojo

NOVEMBER 7, 2022

You might already be aware that cybersecurity is a growing profession. But are you aware of how to land your first cybersecurity job? You might even be aware that it’s the fastest-growing tech progression in the United States.

Technology

Technology How To

DevOps World 2022: Using SBOMs to Secure the Software Supply Chain

DevOps.com

SEPTEMBER 9, 2022

As supply chain attacks become increasingly prevalent, visibility is emerging as a necessity in cybersecurity. One way to improve visibility and secure your software supply chain is with a software bill of materials (SBOM). The post DevOps World 2022: Using SBOMs to Secure the Software Supply Chain appeared first on DevOps.com.

DevOps

DevOps Software Open Source Continuous Delivery

October Patch Tuesday 2022

Ivanti

OCTOBER 11, 2022

October is Cybersecurity Awareness Month. It is a good month to educate the masses on security related topics in the hopes that the world may shift toward being a little more cyber secure. Microsoft advises it will release the additional Exchange fixes when they are ready, but does provide mitigates in a blog post.

Software Review

Software Review Technical Advisors Windows Technical Review

The Time Is Now to Secure the Future

Palo Alto Networks

OCTOBER 5, 2023

With an ever-growing attack surface in an increasingly interconnected world, there has never been a more critical time to educate and train a cybersecurity workforce with the advanced skills required for meaningful jobs that complement technological innovation. JR Gumarin presents at the 2020 in-person Secure the Future competition.

Technical Review

Technical Review Education Transportation Network

Cybersecurity Snapshot: Cyber Pros Say How AI Is Changing Their Work, While the FBI Reports Ransomware Hit Critical Infrastructure Hard in 2023

Tenable

MARCH 8, 2024

Plus, a survey shows how artificial intelligence is impacting cybersecurity jobs. billion, a hefty 22% jump over 2022. That’s according to ISC2’s survey “AI in Cyber 2024: Is the Cybersecurity Profession Ready?”, based on a poll of 1,123 cybersecurity pros. Source: “AI in Cyber 2024: Is the Cybersecurity Profession Ready?”

Infrastructure

Infrastructure Report Software Review Artificial Intelligence

AA23-250A: Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475

Tenable

SEPTEMBER 7, 2023

AA23-250A: Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475 A joint Cybersecurity Advisory examines the exploitation of two critical vulnerabilities by nation-state threat actors. The vulnerability is caused by the use of an outdated version of Apache Santuario, an XML security software library.

Firewall

Firewall Software Review Technical Review Systems Review

CXO Cybersecurity Imperatives 2022: A Threat-Intel Informed Approach

Palo Alto Networks

JANUARY 14, 2022

From a cybersecurity perspective, this year was a doozy. In 2022, the most critical investment of time and effort would be to adopt a proactive cybersecurity strategy focused on understanding the most credible threats to your business, and to develop preparedness and sustainable cyber resilience for your organization.

Systems Review

Systems Review Technical Review Sustainability Strategic Planning

Cybersecurity Snapshot: SANS Offers Tips for Maximizing Smaller OT Security Budgets

Tenable

OCTOBER 6, 2023

A SANS Institute survey found that budgets for ICS/OT security have shrunk, and advises on how to do more with less. In addition, CISA’s Cybersecurity Awareness Month campaign challenges tech vendors to build safer products. in 2022 to 21.8% Security Spotlight - The Ransomware Ecosystem Tenable.ot And much more!

Budget

Budget Report Survey Open Source

DORA Report 2022: The Magnitude of Software Supply Chain Security

DevOps.com

APRIL 25, 2023

The term ‘software supply chain security’ (SSC) can be interpreted in many ways. Following the White House executive order in May 2021 and the European Cyber Resilience Act (CRA) of 2022, both governments and corporations are taking a more active role in ensuring their software is secure.

Report

Report Software Government Continuous Delivery

Cybersecurity Snapshot: How To Boost the Cybersecurity of AI Systems While Minimizing Risks

Tenable

JANUARY 12, 2024

Check out expert recommendations for deploying AI tools securely. 1 - How to ensure AI helps, not hurts, cybersecurity How can organizations use artificial intelligence (AI) in a way that’s safe and that benefits cybersecurity? In addition, cyber insurance demand is forecast to grow robustly. And much more!

Systems Review

Systems Review System Technical Review Development Team Review

Elevate Cybersecurity with PRISMA IDs

Prisma Clud

AUGUST 22, 2023

In the cybersecurity maze, finding and addressing vulnerabilities is like chasing shadows. Not All Vulnerabilities Have a CVE ID Full Disclosure Vulnerabilities need to go through a responsible disclosure process, which begins with security researchers reporting found vulnerabilities to the vulnerable project safely. Let's explore how.

Weak Development Team

Weak Development Team Open Source Systems Review Software Review

Cybersecurity Snapshot: Salary Trends, Ransomware Summit, Next-gen MFA

Tenable

NOVEMBER 4, 2022

Get the latest on salary trends for CISOs and cybersecurity pros; CISA’s call for adopting phishing-resistant MFA; the White House’s ransomware summit; and more! and Canada improved this year compared with 2021 as employers paid up to retain their cybersecurity chiefs amidst a shortage of qualified candidates for these jobs.

Trends

Trends Authentication Recruiting Banking

CVE-2022-22972: VMware Patches Additional Workspace ONE Access Vulnerabilities (VMSA-2022-0014)

Tenable

MAY 18, 2022

Organizations and government agencies are strongly advised to patch two newly disclosed vulnerabilities in VMware products, following warnings from VMware and the Cybersecurity and Infrastructure Security Agency. CVE-2022-22972. CVE-2022-22973. Background. Description. Authentication Bypass Vulnerability.

Authentication

Authentication Internet Infrastructure Research

2022 software security predictions that should be on your radar

Synopsys

DECEMBER 16, 2021

Our 2022 software security predictions are in. The experts weigh in on the trends and how they’ll shape cybersecurity efforts in the new year. The post 2022 software security predictions that should be on your radar appeared first on Software Integrity Blog.

Software

Software Trends Research

Cybersecurity Snapshot: Cyber Pros Taxed by Overwork, Understaffing and Lack of Support, as Stress Takes a Toll

Tenable

SEPTEMBER 8, 2023

Life is getting harder for cybersecurity pros, but there are ways to improve working conditions. Meanwhile, there’s a new, free attack-emulation tool for OT security teams. government is alerting about exploits to CVE-2022-47966 and CVE-2022-42475. Check out what a study found. Plus, the U.S.

Technical Review

Technical Review Systems Review Software Review Survey

The future of cyber security: 2022 predictions from Darktrace

Darktrace

JANUARY 7, 2022

In this blog, those experts look ahead, offering their predictions for cyber security in 2022. Darktrace experts were on the front lines throughout 2021 – a historic year of cyber-attacks.

2022 ASM Threat Report

Palo Alto Networks

APRIL 19, 2022

Seasoned security professionals know that while zero-days get the headlines, the real problems always come from the dozens of small decisions every day inside of an organization. End-of-Life Software = End-of-Life for Your Security. The Unmanaged Attack Surface Continues to Be Persistent and Complex. government.

Report

Report Weak Development Team Internet Storage

Cybersecurity Snapshot: CISOs Are Happier, but Dev Teams Still Lack Secure Coding Skills

Tenable

JANUARY 20, 2023

Plus, NIST mulls major makeover of its Cybersecurity Framework. Also, the struggle to develop secure apps is real. Then check out how Uncle Sam plans to use AI and ML to boost cybersecurity. Almost 70% of organizations' SDLCs are missing critical security processes. Learn all about the spike in CISO job satisfaction.

Software Review

Software Review Artificial Inteligence SDLC Technical Review

$18.2 Million Funding Available for Tribal Government Cybersecurity

Tenable

JANUARY 3, 2024

The Tribal Cybersecurity Grant Program (TCGP) is accepting applications through January 10, making $18.2 Recent ransomware attacks show the urgent need for tribal nations to strengthen their cybersecurity posture and reduce risk. Implement security protections commensurate with risk. A full list can be found here.

Government

Government Systems Review Technical Review Programming

Cybersecurity Snapshot: U.S. Gov’t Unpacks AI Threat to Banks, as NCSC Urges OT Teams to Protect Cloud SCADA Systems

Tenable

MARCH 29, 2024

The 52-page report, titled “ Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector, ” touches on cybersecurity and fraud protection; fraud threats; the regulatory landscape; and major challenges and opportunities. This week, the U.K.

Systems Review

Systems Review Weak Development Team Banking System

The UK’s National Cyber Strategy 2022 – An Evolution

Palo Alto Networks

JANUARY 28, 2022

The UK Government has once again shifted the cyber discourse with the recent publication of the National Cyber Strategy 2022 , marking a significant change in how the government views cybersecurity and solidifying its position as a global cyber power. Building Resilience and Securing the Digital Ecosystem.

Security

Security Strategy Telecommunications Government

2022 MSP Benchmark Survey Highlights: What High-Performing MSPs Do Differently

Kaseya

MARCH 21, 2022

With most businesses implementing long-term remote or hybrid work, there is a growing demand for managed services, such as cybersecurity, cloud management, compliance and remote monitoring, that can help streamline IT management for their remote workforce. Providing cybersecurity advice . General profile . M&A strategy .

Survey

Survey Performance Compliance Strategy

Cybersecurity Snapshot: Critical Infrastructure Orgs Must Beware of China-backed Volt Typhoon, Cyber Agencies Warn

Tenable

FEBRUARY 9, 2024

critical infrastructure IT and operational technology security teams, listen up. So said cybersecurity agencies from the U.S., Cybersecurity and Infrastructure Security Agency (CISA) said in a statement. Dive into six things that are top of mind for the week ending February 9.

Weak Development Team

Weak Development Team Infrastructure Generative AI Artificial Inteligence

Cybersecurity Snapshot: Log4j Anniversary, CI/CD Risks, Infostealers, Email Attacks, OT Security

Tenable

DECEMBER 9, 2022

It was at around this time last year that the discovery of the zero-day Log4Shell vulnerability in the ubiquitous Log4j open source component sent shockwaves through the worlds of IT and cybersecurity. . Tenable found that, as of October 1, 2022: 72% of organizations remain vulnerable to Log4Shell. Insecure System Configuration.

Software Review

Software Review SMB Malware Development Team Review

Landmark EU Law Strengthens Cybersecurity of Critical Infrastructures

Palo Alto Networks

DECEMBER 20, 2022

The European Union (EU) adopted the revised Network and Information Security Directive (NIS2) in November 2022. It is especially important in a time of growing geopolitical tensions and cyberattacks where European citizens and their economies depend on a stable and secure digital infrastructure.

Security

Security Infrastructure Report Network

CVE-2022-42475: Fortinet Patches Zero Day in FortiOS SSL VPNs

Tenable

DECEMBER 12, 2022

CVE-2022-42475: Fortinet Patches Zero Day in FortiOS SSL VPNs Fortinet has patched a zero day buffer overflow in FortiOS that could lead to remote code execution. CVE-2022-42475 is a heap-based buffer overflow in several versions of ForiOS that received a CVSSv3 score of 9.3. Get more information. Background. Fortinet Advisory.

Software Review

Software Review Systems Review Firewall Report

CyRC Vulnerability Advisory: Denial-of-service vulnerabilities (CVE-2022-39063) in Open5GS

Synopsys

SEPTEMBER 14, 2022

CVE-2022-39063 is a vulnerability in the Open5GS project, an open source implementation of 5G components. The post CyRC Vulnerability Advisory: Denial-of-service vulnerabilities (CVE-2022-39063) in Open5GS appeared first on Application Security Blog.

Open Source

Open Source Applications Research Testing

Navigating Security Challenges Around OT in the DoD’s Manufacturing Lines

Tenable

APRIL 15, 2024

But, as it is more integrated into the DIB, OT introduces new security challenges. Ensuring the security of OT systems helps the DoD maintain operational effectiveness, essential to the mobilization, deployment and sustainability of military operations. The manufacturing sector has been steadily seeing more attacks in recent years.

Energy

Energy Analysis Scalability System

Microsoft’s November 2022 Patch Tuesday Addresses 62 CVEs (CVE-2022-41073)

Tenable

NOVEMBER 8, 2022

Microsoft’s November 2022 Patch Tuesday Addresses 62 CVEs (CVE-2022-41073) Microsoft addresses 62 CVEs including four zero-day vulnerabilities that were exploited in the wild. Microsoft patched 62 CVEs in its November 2022 Patch Tuesday release, with nine rated as critical, and 53 rated as important. 9 Critical. 53 Important.

Windows

Windows Azure Open Source Policies

CVE-2024-21762: Critical Fortinet FortiOS Out-of-Bound Write SSL VPN Vulnerability

Tenable

FEBRUARY 9, 2024

Fortinet vulnerabilities have been included as part of the top routinely exploited vulnerabilities lists over the last few years that have been published by the Cybersecurity and Infrastructure Security Agency (CISA) in partnership with other U.S. and international agencies.

Malware

Malware Authentication Infrastructure Analysis

Security Advisory: CVE-2022-26134 RCE in multiple Atlassian products

Lacework

JUNE 3, 2022

On Jun 2nd Lacework Labs was made aware of CVE-2022-26134 , a critical unauthenticated remote code execution vulnerability within Atlassian’s Confluence Server and Data Center products. At the time of this writing, CVE-2022-26134 does not have an official CVSS rating, but is expected to be high due to the impact of the vulnerability.

Software Review

Software Review Data Center Report Network

Cybersecurity Snapshot: 6 Things That Matter Right Now

Tenable

OCTOBER 14, 2022

14 | DevOps team culture is key for supply chain security | SecOps gets more challenging as attack surface expands | Weak credentials hurt cloud security | Incident responders grapple with stress | Security spending grows | And much more! . Topics that are top of mind for the week ending Oct.

Security

Security Weak Development Team Retail Software Review

Zero Trust Security for NIS2 compliance: What you need to know

How Zero Trust can help align the CIO and CISO

Trending Sources

Accelerating Real Time Security Outcomes with Precision AI

Bipartisan Cybersecurity Legislation — Continuing the Progress in 2022

Cybersecurity Snapshot: Cyber Agencies Offer Secure AI Tips, while Stanford Issues In-Depth AI Trends Analysis, Including of AI Security

Top 5 Cybersecurity Career Path Options in 2022

Learning From the Past — Ten 2022 Cybersecurity Events to Know

Cybersecurity Snapshot: A Look Back at Key 2023 Cyber Data for GenAI, Cloud Security, Vulnerability Management, OT, Cyber Regulations and more

5 Tech Roles Still In Demand in 2022

Navigating the road ahead for automotive cybersecurity

Remembering the startups we lost in 2022

What Does 2022 Hold For Your Cloud Security Practice?

The Most In-Demand Cybersecurity Certifications (2022)

DevOps World 2022: Using SBOMs to Secure the Software Supply Chain

October Patch Tuesday 2022

The Time Is Now to Secure the Future

Cybersecurity Snapshot: Cyber Pros Say How AI Is Changing Their Work, While the FBI Reports Ransomware Hit Critical Infrastructure Hard in 2023

AA23-250A: Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475

CXO Cybersecurity Imperatives 2022: A Threat-Intel Informed Approach

Cybersecurity Snapshot: SANS Offers Tips for Maximizing Smaller OT Security Budgets

DORA Report 2022: The Magnitude of Software Supply Chain Security

Cybersecurity Snapshot: How To Boost the Cybersecurity of AI Systems While Minimizing Risks

Elevate Cybersecurity with PRISMA IDs

Cybersecurity Snapshot: Salary Trends, Ransomware Summit, Next-gen MFA

CVE-2022-22972: VMware Patches Additional Workspace ONE Access Vulnerabilities (VMSA-2022-0014)

2022 software security predictions that should be on your radar

Cybersecurity Snapshot: Cyber Pros Taxed by Overwork, Understaffing and Lack of Support, as Stress Takes a Toll

The future of cyber security: 2022 predictions from Darktrace

2022 ASM Threat Report

Cybersecurity Snapshot: CISOs Are Happier, but Dev Teams Still Lack Secure Coding Skills

$18.2 Million Funding Available for Tribal Government Cybersecurity

Cybersecurity Snapshot: U.S. Gov’t Unpacks AI Threat to Banks, as NCSC Urges OT Teams to Protect Cloud SCADA Systems

The UK’s National Cyber Strategy 2022 – An Evolution

2022 MSP Benchmark Survey Highlights: What High-Performing MSPs Do Differently

Cybersecurity Snapshot: Critical Infrastructure Orgs Must Beware of China-backed Volt Typhoon, Cyber Agencies Warn

Cybersecurity Snapshot: Log4j Anniversary, CI/CD Risks, Infostealers, Email Attacks, OT Security

Landmark EU Law Strengthens Cybersecurity of Critical Infrastructures

CVE-2022-42475: Fortinet Patches Zero Day in FortiOS SSL VPNs

CyRC Vulnerability Advisory: Denial-of-service vulnerabilities (CVE-2022-39063) in Open5GS

Navigating Security Challenges Around OT in the DoD’s Manufacturing Lines

Microsoft’s November 2022 Patch Tuesday Addresses 62 CVEs (CVE-2022-41073)

CVE-2024-21762: Critical Fortinet FortiOS Out-of-Bound Write SSL VPN Vulnerability

Security Advisory: CVE-2022-26134 RCE in multiple Atlassian products

Cybersecurity Snapshot: 6 Things That Matter Right Now

Stay Connected