Security Boulevard

It’s all about the data.  One thing is clear. The “business value” of data continues to grow, making it an organization’s primary piece of intellectual property. And from

The post Storage & Data Protection Trends & Innovations To Watch in 2025 appeared first on Continuity™.

The post Storage & Data Protection Trends & Innovations To Watch in 2025 appeared first on Security Boulevard.

Authors/Presenters:Min Chen, Zhikun Zhang, Tianhao Wang, Michael Backes, Yang Zhang

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.

Permalink

The post USENIX Security ’23 – FACE-AUDITOR: Data Auditing in Facial Recognition Systems appeared first on Security Boulevard.

The ransomware space is becoming increasingly fragmented in the wake of law enforcement actions against BlackCat, LockBit, and others, spawning more threat groups and giving rise to prolific newcomers like RansomHub, according to a report by Searchlight Cyber.

The post RansomHub Emerges in Rapidly Evolving Ransomware Landscape appeared first on Security Boulevard.

Threat monitoring and detection, such as Network Detection and Response (NDR), provide a complement to enhance a threat exposure management strategy.

The post Choosing the Best Cybersecurity Prioritization Method for Your Organization appeared first on Security Boulevard.

Season 3, Episode 13: Cato Network’s Etay Maor provides fresh research on the abuse of unpatched log4j libraries.

The post Log4j Continues to act as Organizational Vulnerability appeared first on Security Boulevard.

Understanding how CASBs are developed and how to use them effectively can assist them in safeguarding their cloud-based assets against evolving threats.

The post Cloud Access Security Brokers (CASBs): Are They Still Relevant? appeared first on Security Boulevard.

Over the past decade, Bitcoin’s value has increased more than 200-fold. Similarly, other cryptocurrencies have also seen significant

The post Cryptominers in the Cloud appeared first on ARMO.

The post Cryptominers in the Cloud appeared first on Security Boulevard.

Cybersecurity has never been something to set once and leave running in the background — it is a constantly evolving landscape. While the migration of data and applications to the cloud provides numerous business benefits, many organizations struggle to secure their networks against rapidly changing cyberthreats. Ransomware attackers have understood the value of targeting smaller..

The post Pool Your Cybersecurity Resources to Build the Perfect Security Ecosystem appeared first on Security Boulevard.

Recently, multiple high-severity vulnerabilities were discovered in Intel Microcode that could potentially lead to privilege escalation. Canonical, the organization behind Ubuntu, has acted swiftly by releasing security updates to address these vulnerabilities. This article explores the details of these vulnerabilities and offers essential guidance on safeguarding your Ubuntu systems.   Overview of Intel Microcode Vulnerabilities […]

The post High-Severity Intel Microcode Vulnerabilities Fixed in Ubuntu appeared first on TuxCare.

The post High-Severity Intel Microcode Vulnerabilities Fixed in Ubuntu appeared first on Security Boulevard.

As per recent reports, a Moscow hacker has been charged in the US on various accounts of cybercrime. Charges leveled against the hacker include allegedly stealing data, extorting victims, and laundering ransom payments since 2021. In this article, learn more about the threat actor his activities, and cover details about the charges. Deniss Zolotarjovs: The […]

The post Moscow Hacker Extradited To US For Cybercrime Involvement appeared first on TuxCare.

The post Moscow Hacker Extradited To US For Cybercrime Involvement appeared first on Security Boulevard.

The Evolution of Identity and Access Management (IAM)
madhav
Thu, 09/05/2024 - 05:03

The evolution of Identity and Access Management (IAM) has been a fascinating journey, shaped by technological advancements, security challenges, and evolving business needs. In the early days, IAM wasn’t even called IAM, and organizations implemented basic user authentication mechanisms to control access to their systems. As technology advanced and businesses became more reliant on digital systems, the need for more comprehensive IAM solutions became apparent. The development of IAM continued as organizations sought to manage the growing complexity of user identities and access rights across multiple systems and applications.

The progress of IAM has resulted in the inclusion of functionalities like single sign-on, multi-factor authentication, adaptive access controls, and identity governance. Additionally, IAM solutions now integrate with diverse systems and applications, offering organizations the flexibility to manage user identities and access rights across hybrid IT environments.

Furthermore, IAM has become an integral component of cybersecurity strategies, addressing compliance requirements and providing enhanced visibility and control over user access to critical resources. Overall, the evolution of IAM has been driven by the need to adapt to the complexities of modern IT ecosystems while ensuring robust security and seamless user experience.

Understanding the critical stages in developing IAM is crucial to appreciate its transformative impact on modern cybersecurity and access control practices.

Traditional IAM

The early stages of IAM predominantly focused on basic user authentication and authorization processes. Users were typically provided simple username and password credentials to access systems and applications. However, as cyber threats became more sophisticated, it became evident that traditional IAM methods were insufficient to ensure robust security measures.

Single Sign-On (SSO)

As organizations increasingly rely on multiple applications and systems, the demand for a more seamless and efficient IAM solution became apparent. This led to the emergence of Single Sign-On (SSO) capabilities, which enabled users to access multiple systems and applications using a single set of credentials. SSO greatly improved user experience and simplified access management for IT teams.

Role-Based Access Control (RBAC)

RBAC marked a significant advancement in IAM by introducing a more granular approach to access management. This model allowed organizations to define specific roles and allocate appropriate permissions to users based on their respective roles. By adhering to the principle of least privilege, RBAC enhanced security by limiting unnecessary access rights.

Identity Governance and Administration (IGA)

With the increasing complexity of managing identities and access rights across large enterprises, Identity Governance and Administration (IGA) solutions emerged to address these challenges. IGA platforms offered features for identity lifecycle management, role management, access certifications, and policy enforcement. This empowered organizations to streamline their IAM processes and maintain compliance with regulatory standards.

Adaptive Authentication and Zero Trust

The evolving nature of digital infrastructure, particularly the prevalence of cloud-based services and mobile devices, called for a paradigm shift in IAM. Adaptive authentication and Zero Trust principles were introduced to verify user identities and assess the security posture of devices and applications in real-time. This dynamic approach enabled organizations to adopt a more agile and risk-aware strategy for access management.

Identity as a Service (IDaaS)

As organizations embraced cloud technologies, Identity as a Service (IDaaS) solutions emerged as a scalable and flexible IAM option. IDaaS offerings provided capabilities such as identity federation, multi-factor authentication, and centralized identity management across diverse IT environments, bridging on-premises and cloud-based applications.

The Emergence of CIAM

Customer Identity and Access Management (CIAM) has evolved significantly within the Identity and Access Management (IAM) space. Initially, IAM focused primarily on managing internal users within an organization. However, as businesses began to shift their focus towards improving customer experiences, the need for a specialized approach to managing external identities became evident. This led to the emergence of CIAM solutions tailored specifically for managing customer identities, providing a seamless and secure experience across various digital channels.

Unlike traditional IAM, CIAM places a strong emphasis on user experience, social login, self-service registration, and consent management to meet the unique needs of customers. As a result, CIAM has become a crucial component of the broader IAM landscape, addressing the distinct requirements of customer-facing applications and services while complementing traditional IAM solutions geared towards employee identities and enterprise security.

Today, CIAM platforms are expected to provide a 360-degree view of the customer, support omni-channel engagement, and ensure compliance with data privacy regulations such as GDPR and CCPA. The future of CIAM is likely to revolve around enhanced personalization, advanced security features, and greater interoperability with emerging technologies like artificial intelligence and blockchain.

Continuous Authentication and Beyond

Looking ahead, the future of IAM is poised to encompass continuous authentication methods that leverage cutting-edge technologies such as biometrics, behavioral analytics, and AI-driven risk assessments. Additionally, the concept of Identity Fabric is gaining attention, aiming to integrate IAM, security, and customer experience within a unified platform, reflecting the increasing convergence of these domains.

The evolution of IAM has been an ongoing response to the dynamic interplay between technology, security threats, and organizational requirements. As businesses continue to navigate the complexities of digital transformation, IAM will remain at the forefront of ensuring robust, adaptive, and user-centric access management while staying resilient in the face of evolving cybersecurity challenges.

This evolution will involve a stronger focus on identity governance, risk-based authentication, and continuous monitoring to proactively mitigate security threats. Additionally, IAM for the workforce is expected to integrate more seamlessly with business processes, enabling a frictionless user experience while maintaining stringent security protocols.

Identity & Access Management Access Control Cloud Security

Guido Gerrits | Field Channel Director, EMEA
More About This Author > Schema

basic

The post The Evolution of Identity and Access Management (IAM) appeared first on Security Boulevard.

In the world of SaaS ITDR, the journey taken matters. There are solutions that began from an ITDR perspective. They built threat-hunting capabilities to parse through any data set, look for anomalies, and flag any activity that looks suspicious.  It’s a reasonable approach taken by security organizations that lack a deep understanding of SaaS applications […]

The post A Powerful Approach to SaaS ITDR – Avoiding False Positives on Improbable Travel appeared first on Adaptive Shield.

The post A Powerful Approach to SaaS ITDR – Avoiding False Positives on Improbable Travel appeared first on Security Boulevard.

Torrance, Calif., Sept. 4, 2024, CyberNewsWire — AI SPERA, a leading Cyber Threat Intelligence (CTI) company, has achieved PCI DSS v4.0 certification for its flagship search engine solution, Criminal IP.

This accomplishment builds on last year’s attainment of PCI … (more…)

The post News alert: AI SPERA attains PCI DSS certification for its search engine solution ‘Criminal IP’ first appeared on The Last Watchdog.

The post News alert: AI SPERA attains PCI DSS certification for its search engine solution ‘Criminal IP’ appeared first on Security Boulevard.

Cary, NC, Sept. 4, 2024, CyberNewsWire — In a proactive response to the rapidly evolving landscape of cyber threats, INE Security, a global leader in cybersecurity and network training, today unveiled a crucial initiative aimed at fortifying corporate defenses … (more…)

The post News alert: INE Security releases a strategies guide for cyber threat preparedness, response capabilities first appeared on The Last Watchdog.

The post News alert: INE Security releases a strategies guide for cyber threat preparedness, response capabilities appeared first on Security Boulevard.

Singapore, Sept. 4, 2024, CyberNewsWire — Blackwired, the leading cyber observatory for disruptive cybersecurity technologies, has announced the launch of ThirdWatch?, a groundbreaking solution to identify direct threats facing an organization and its Third Parties.

ThirdWatch? is a subject-directed … (more…)

The post News alert: Blackwired launches ‘ThirdWatch?’ — an advanced third-party risk management platform first appeared on The Last Watchdog.

The post News alert: Blackwired launches ‘ThirdWatch?’ — an advanced third-party risk management platform appeared first on Security Boulevard.

The White House is urging internet network providers to take steps outlined in its roadmap to better secure the Border Gateway Protocol, a set of rule that are not widely known but are crucial to routing traffic around the internet.

The post White House Wants to Tighten Internet Routing Security appeared first on Security Boulevard.

Authors/Presenters:Daniel Moghimi

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.

Permalink

The post USENIX Security ’23 – Downfall: Exploiting Speculative Data Gathering appeared first on Security Boulevard.

As AWS continues to evolve, new services and permissions are frequently introduced to enhance functionality and security. This blog provides a comprehensive recap of new sensitive permissions and services added in August 2024. Our intention in sharing this is to flag the most important releases to keep your eye on and update your permissions and […]

The post August Recap: New AWS Sensitive Permissions and Services appeared first on Security Boulevard.

 

The decentralized finance (DeFi) and
cryptocurrency industries are being targeted by North Korean social engineering
schemes in highly personalized and convincing ways.

 

Here is an example that the FBI is showcasing:

1.      
A
person from your dream company, using the name of an old colleague, contacts
you on social media, mentioning a conference you both recently attended and
discussing shared interests.

2.      
He
asks if you're job hunting and reveals his company needs your skills, offering
a significant pay raise.  He arranges an
interview with his CTO and during the interview, the CTO gives you a
“pre-employment” test that involves troubleshooting code from some GitHub
repositories you do not recognize.

3.      
You
clone the repositories, execute the code, find the bugs, and pass the test with
flying colors.

 

Congrats - you have fallen for a well-disguised
social engineering scheme conducted by North Korean cyber actors. One of those
GitHub repositories was malicious and landed a malware dropper on your machine
which installed a key logger and acquired your credentials to access your
company’s network.

 

The North Korean attackers gain access and moving
laterally, eventually getting access to the seed phrases and security
signatures for your company’s cryptocurrency assets.  Shortly thereafter all the company’s crypto
assets disappear and everything you and your colleagues worked for is gone.

 

The threat is real.

 

Check out the full FBI public warning here: https://www.ic3.gov/Media/Y2024/PSA240903

The post FBI Warns of North Korea Attacks Against the Crypto Industry appeared first on Security Boulevard.

Disinformation is hardly new, yet its impact is undeniably amplified in the digital age. AI-enabled bots are amplifying the noise.

The post How Bots and AI Are Fueling Disinformation appeared first on Security Boulevard.