Tenable

MARCH 6, 2024

Background On March 4, JetBrains published a blog post regarding two security issues affecting TeamCity On-Premises , a software solution for build management. In the March 4 release notes , no mention was made of what security issues were patched, however later in the day, a blog post regarding the release of TeamCity 2023.11.4

Authentication 114

Authentication Malware Energy Groups 114

Tenable

JANUARY 31, 2024

Frequently asked questions for four CVEs affecting Ivanti Connect Secure and Policy Secure Gateways, with three of the vulnerabilities having been exploited in the wild as zero-days. Released January 10 CVE-2024-21887 Ivanti Connect Secure and Ivanti Policy Secure Command Injection Vulnerability 9.1

Policies 63

Policies Malware Authentication Software Review 63

Tenable

FEBRUARY 2, 2024

CISA is calling on router makers to improve security, because attackers like Volt Typhoon compromise routers to breach critical infrastructure systems. And a cyber expert calls on universities to beef up security instruction in computer science programs. Meanwhile, data breaches hit an all-time high in the U.S. So said the U.S.

Infrastructure 122

Infrastructure Open Source ChatGPT Software Review 122

Tenable

MARCH 1, 2024

Check out what’s new in NIST’s makeover of its Cybersecurity Framework. Also, how to assess the cybersecurity capabilities of a generative AI LLM. And the most prevalent malware in Q4. 1 - NIST’s Cybersecurity Framework 2.0 1 - NIST’s Cybersecurity Framework 2.0 The Cybersecurity Framework at 10.and

Artificial Inteligence 74

Artificial Inteligence Malware Generative AI Government 74

Palo Alto Networks

APRIL 19, 2024

On April 10, 2024 Palo Alto Networks Product Security Incident Response Team (PSIRT) learned of a suspicious exfiltration attempt at a customer site from Volexity's Steven Adair. Volexity and Unit 42 Threat Brief have more information about the type of malware seen in these attacks and indicators of threat activity.

Firewall 131

Firewall Systems Review Malware Software Review 131

Lacework

FEBRUARY 15, 2024

This blog features some content from our new eBook: 4 keys to cloud security for financial services. Download the eBook for more discussion on financial services industry trends and how these organizations can become cyber secure in 2024. Security talent pools are painfully small. Let’s face it.

eBook 64

eBook Artificial Intelligence Artificial Inteligence Healthcare 64

Tenable

APRIL 19, 2024

Check out recommendations for securing AI systems from the Five Eyes cybersecurity agencies. 1 - Multinational cyber agencies issue best practices for secure AI deployment Looking for best practices on how to securely deploy artificial intelligence (AI) systems? And don’t miss the latest CIS Benchmarks updates.

Artificial Inteligence 74

Artificial Inteligence Trends Technical Advisors Analysis 74

Infinidat

JUNE 6, 2024

The Proverbial “Water Cooler” Discussions 2024: Key Topics that Drive Enterprise Storage Conversations (Part One) Adriana Andronescu Thu, 06/06/2024 - 09:19 Talk about storage – this is your opportunity to react to what is being discussed around the proverbial “water cooler” in enterprise storage industry circles, online, in-person, and otherwise.

Storage 59

Storage Enterprise Malware Systems Review 59

Palo Alto Networks

MARCH 12, 2024

Applied AI in cybersecurity has many unique challenges, and we will take a look into a few of them that we are considering the most important. One — Lack of Labeled Data Unlike many other fields, data and labels are scarce in the cybersecurity space and usually require highly skilled labor to generate. This is unique to cybersecurity.

Systems Review 107

Systems Review Training Study Malware 107

Tenable

JANUARY 19, 2024

In addition, the latest on the Androxgh0st malware. Cybersecurity and Infrastructure Security (CISA) agency and the Federal Bureau of Investigation (FBI) said this week. To mitigate this risk, the agencies recommendations include: Using drones built with secure-by-design principles, such as those manufactured in the U.S.

Infrastructure 72

Infrastructure Malware Government Technical Review 72

Tenable

FEBRUARY 16, 2024

Plus, JCDC will put special focus on critical infrastructure security in 2024. Meanwhile, CISA and OpenSSF shine a spotlight on the security of software package repositories. has promise, there are clear limitations,” Mark Sherman, one of the researchers, wrote in the blog post “ Using ChatGPT to Analyze Your Code?

ChatGPT 71

ChatGPT Software Review Analysis Infrastructure 71

Tenable

DECEMBER 22, 2023

As we bid adieu to 2023, we highlight major trends that impacted cybersecurity professionals in the past 12 months. Learn how the cyber world changed in areas including artificial intelligence, CNAPP, IAM security, government oversight and OT security. Cybersecurity teams were no exception.

Artificial Inteligence 76

Artificial Inteligence Technical Review Cloud Artificial Intelligence 76

Tenable

OCTOBER 6, 2023

A SANS Institute survey found that budgets for ICS/OT security have shrunk, and advises on how to do more with less. In addition, CISA’s Cybersecurity Awareness Month campaign challenges tech vendors to build safer products. For more information about ICS/OT security, check out these Tenable blogs and videos: “ Three U.S.

Budget 65

Budget Report Survey Open Source 65

Palo Alto Networks

JANUARY 10, 2024

{{interview_audio_title}} 00:00 00:00 Volume Slider 10s 10s 10s 10s Seek Slider “AI’s Impact in Cybersecurity” is a weekly blog series based on interviews with a variety of experts at Palo Alto Networks and Unit 42 with roles in AI research, product management, consulting, engineering and more.

Artificial Inteligence 104

Artificial Inteligence Artificial Intelligence Generative AI Malware 104

Tenable

OCTOBER 20, 2023

Plus, check out a guide packed with anti-phishing tips, and another one full of IAM security best practices. Also, discover the skills that cybersecurity recruiters value the most. 1 - Study: CISOs bet on GenAI, integrated cybersecurity suites In: Defensive generative AI technology and integrated cybersecurity suites.

Generative AI 72

Generative AI Authentication Survey Malware 72

Tenable

FEBRUARY 9, 2024

critical infrastructure IT and operational technology security teams, listen up. So said cybersecurity agencies from the U.S., Cybersecurity and Infrastructure Security Agency (CISA) said in a statement. Dive into six things that are top of mind for the week ending February 9.

Weak Development Team 67

Weak Development Team Infrastructure Generative AI Artificial Inteligence 67

Tenable

OCTOBER 27, 2023

Check out how organizations’ enthusiasm over generative AI is fueling artificial intelligence adoption for cybersecurity. Also, why boards of directors feel more comfortable with cybersecurity. business and IT pros involved in cybersecurity. business and IT pros involved in cybersecurity. And much more!

Artificial Inteligence 64

Artificial Inteligence Artificial Intelligence Technical Review Backup 64

Tenable

SEPTEMBER 1, 2023

Plus, the QakBot botnet got torn down, but the malware threat remains – what CISA suggests you do. 1 – NCSC: Be careful when deploying AI chatbots at work When adopting AI chatbots powered by large language models (LLMs), like ChatGPT, organizations should go slow and make sure they understand these tools’ cybersecurity risks.

ChatGPT 63

ChatGPT Artificial Inteligence Tools Malware 63

Lacework

JANUARY 24, 2024

In 2022, the Lacework Labs team discovered a new, large-scale threat called AndroxGh0st, a Python malware being used to exploit AWS keys. More alarmingly, this malware has been used by hackers to build a botnet, which is a network of compromised computers, to then be used for additional credential theft and launching further cyberattacks.

Malware 59

Malware AWS Network Analysis 59

Palo Alto Networks

MAY 21, 2024

According to our 2024 Unit 42 Incident Response Report , 90% of SOCs say they rely on manual processes. SOC Analysts Are Burnt Out Everyone knows there is still a shortage of cybersecurity professionals. Intrusion Detection System (IDS) A known malware signature is detected on a system (a potential malware infection).

Malware 101

Malware Report Analysis Network 101

Palo Alto Networks

MAY 30, 2024

Local Cybersecurity Cloud Infrastructure to Support Digital Transformation Digital transformation is at the heart of the Kingdom of Saudi Arabia’s ambitious Vision 2030 program as the nation looks to future-proof its economy and enhance people’s lives. This will help them meet their data residency needs.

Infrastructure 62

Infrastructure Cloud Tourism Firewall 62

O'Reilly Media - Ideas

APRIL 2, 2024

AI news is infiltrating other sections of Trends (particularly Programming and Security)—but that’s also hardly news. However, the attack raises a lot of troubling questions about security—including the question of how we know software is trustworthy. Security A supply-chain compromise added a backdoor to Linux’s xz package.

Artificial Inteligence 75

Artificial Inteligence Trends Open Source Linux 75

Lacework

FEBRUARY 7, 2024

Securing the cloud is a race against time. As security researchers, we’re constantly analyzing and anticipating cyber threats. In this blog, we’ll explore the motivations of bad actors, the top threats the Lacework Labs team is seeing, and practical ways to lock down your cloud and protect your data.

Weak Development Team 111

Weak Development Team Malware Cloud Internet 111

O'Reilly Media - Ideas

MAY 7, 2024

It collects most of the prompts from his book and his blog; most are Creative Commons, requiring only attribution. Security GitHub allows a comment to specify a file that is automatically uploaded to the repository, with an automatically generated URL. The malware will then be loaded by software referencing the now-existent package.

Artificial Inteligence 76

Artificial Inteligence Trends Malware Open Source 76

Tenable

SEPTEMBER 2, 2022

Securing machine learning systems. Shifting security left – meaning, starting security checks earlier in the software development process – has been widely hailed. Most companies expect developers to do security code reviews, but many don’t provide them with security training. And much more! How much do CISOs earn?

Security 52

Security Software Review Artificial Inteligence Technical Review 52

Ivanti

AUGUST 28, 2023

In a previous blog post, I discussed the two main areas to audit before the European Union’s updated Network and Information Security Directive (NIS2) becomes ratified law in October 2024. Review your current supply chain security flaws.

Security 73

Security Technical Advisors Technical Review Compliance 73

O'Reilly Media - Ideas

JANUARY 25, 2024

Rachel Stephens provides two fascinating pieces of the puzzle in a recent article on the RedMonk blog , but those pieces don’t fit together exactly. Malicious operators have discovered that they can corrupt software archives, getting programmers to inadvertently incorporate malware into their software. That’s just a start.

Trends 116

Trends Technical Review Technology Artificial Inteligence 116

Ivanti

FEBRUARY 14, 2024

We want to thank our customers for their support and patience over the last few weeks as we navigate the recent issues affecting Ivanti Connect Secure, Policy Secure and ZTA gateways. The issues only affect Ivanti Connect Secure, Ivanti Policy Secure and ZTA gateways. Which products are affected?

Policies 49

Policies Technical Review Software Review Systems Review 49

Tenable

DECEMBER 29, 2023

As we reflect on the many accomplishments Tenable OT Security achieved in 2023, one thing is clear: we couldn’t have done it without the support and collaboration of our customers and partners. I can easily say 2023 was a good year for Tenable OT Security. We believe all cyber risk needs to be viewed, ultimately, as operational risk.

Systems Review 72

Systems Review Technical Review Software Review IoT 72

Palo Alto Networks

MARCH 7, 2024

Palo Alto Networks Unit 42 MDR Recognized as a Leader in the Frost Radar: Global Managed Detection and Response Market, 2024 Frost Radar™: Global Managed Detection and Response Market 2024 – s ource Frost & Sullivan We are pleased to announce that Unit 42 MDR has been named as a leader in the Frost Radar™: Global MDR Market evaluation.

Network 89

Network Research Report Malware 89

Infinidat

NOVEMBER 30, 2023

This optional component of our core InfiniSafe cyber security solution provides our customers with critical added functionality to help secure, understand, and be able to quickly recover any protected data that may be compromised by a ransomware or malware attack. Our announcement blog from May 2023 is here.

Malware 64

Malware Storage Machine Learning Artificial Inteligence 64

Palo Alto Networks

APRIL 15, 2024

Tackling Diverse SecOps Challenges Simultaneously Security operations teams are tasked with solving a variety of different challenges. At Palo Alto Networks, we’re committed to helping our customers tackle all of these challenges with a unified AI-based security platform. XDR 3.10 : Expanding beyond traditional endpoint security.

Cloud 98

Cloud Innovation Compliance Testing 98

Tenable

AUGUST 26, 2022

26 | The “platformization” of hybrid cloud security. Tackling IT/OT cybersecurity challenges. Tips for complying with HIPAA’s cybersecurity rule. 1 - IDC sees shift to “platformization” of hybrid cloud security. That’s according to IDC’s “Worldwide Cloud Workload Security Forecast, 2022-2026.” . And much more!

Weak Development Team 52

Weak Development Team Software Review Technical Review Budget 52

Palo Alto Networks

NOVEMBER 8, 2023

A proliferation of data and devices has been matched by increasingly sophisticated cybercriminals who continuously come up with new ways to evade traditional security measures. AI-Powered Network Security Is Vital to Protecting Modern Organizations Securing the modern connected organization requires an integrated, unified approach.

Cloud 84

Cloud Firewall Malware IoT 84

Gorilla Logic

NOVEMBER 2, 2022

We design, develop, and deploy responsive, security-first enterprise websites that combine high performance with ease of use so you can exceed customer expectations and thrive in a digital-first world. Strengthening cybersecurity to promote trust. In a data-driven, customer-centric world, trust matters more than ever.

PHP 52

PHP Web Development Linux Windows 52