Security Boulevard

What is the KCDPA? The Kentucky Consumer Data Protection Act (KCDPA) is a state-level privacy law designed to safeguard the personal information of Kentucky residents. Like other state privacy regulations, KCDPA sets rules for how businesses collect, use, store, and share consumer data. The law aims to ensure that individuals have greater control over their […]

The post Kentucky Consumer Data Protection Act (KCDPA) appeared first on Centraleyes.

The post Kentucky Consumer Data Protection Act (KCDPA) appeared first on Security Boulevard.

In the milestone 350th episode of the Shared Security Podcast, the hosts reflect on 15 years of podcasting, and the podcast’s evolution from its beginnings in 2009. They discuss the impact of a current hurricane on Florida, offering advice on using iPhone and Android satellite communication features during emergencies. The ‘Aware Much’ segment focuses on […]

The post Emergency Satellite Messaging, Stagnation in User Cybersecurity Habits appeared first on Shared Security Podcast.

The post Emergency Satellite Messaging, Stagnation in User Cybersecurity Habits appeared first on Security Boulevard.

Executive Summary Researchers at the Spark Research Lab (University of Texas at Austin)1, under the supervision of Symmetry CEO Professor...

The post ConfusedPilot: UT Austin & Symmetry Systems Uncover Novel Attack on RAG-based AI Systems appeared first on Symmetry Systems.

The post ConfusedPilot: UT Austin & Symmetry Systems Uncover Novel Attack on RAG-based AI Systems appeared first on Security Boulevard.

Authors/Presenters:Vaibhav Singh, Tusher Chakraborty, Suraj Jog, Om Chabra, Deepak Vasisht, Ranveer Chandra

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – Spectrumize: Spectrum-Efficient Satellite Networks for the Internet of Things appeared first on Security Boulevard.

One of the biggest dilemmas for security teams is when to patch vulnerabilities. This is a classic “Patch-22” situation—patching immediately can be time-consuming and disruptive, but waiting leaves your organization exposed to cyber threats. It’s a tough balancing act between fixing vulnerabilities and maintaining business continuity.  With cyberattacks evolving and becoming more frequent, waiting to […]

The post Patch-22: The Catch of Waiting to Fix Cybersecurity Vulnerabilities  appeared first on VERITI.

The post Patch-22: The Catch of Waiting to Fix Cybersecurity Vulnerabilities  appeared first on Security Boulevard.

Bad actors often take advantage of natural disasters, and especially hurricanes, in times of crisis. Hurricanes Helene and Milton pose significant new online threats, including misinformation and fraud.

The post Misinformation, Online Scams Surging Following Historic Hurricanes appeared first on Security Boulevard.

Authors/Presenters:Bill Tao, Om Chabra, Ishani Janveja, Indranil Gupta, Deepak Vasisht

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – Known Knowns and Unknowns: Near-Realtime Earth Observation Via Query Bifurcation In Serval appeared first on Security Boulevard.

In today’s complex cyber landscape, managing risks effectively isn’t just about identifying threats—it’s about understanding their impact and knowing how to prioritize vulnerabilities. With constant changes in the vulnerability landscape, security teams need tools that not only quantify risks but also enable them to act swiftly. This is where KnightVision, a core feature within CyberSaint’s CyberStrong platform, plays a pivotal role. By focusing on cyber risk quantification and vulnerability prioritization, KnightVision helps security leaders make data-driven decisions that strengthen their cybersecurity posture.

The post Transforming Cyber Risk Quantification and Vulnerability Prioritization with KnightVision appeared first on Security Boulevard.

Online brand impersonation is an insidious threat compared to more straightforward attacks. Ransomware, for example, is simply extortion. A cybercriminal encrypts your data, holds it hostage, and demands payment in exchange for encryption keys. The consequences of the attack are either the loss of data or the cost of the ransom (and associated downtime). Online […]

The post Cost of Online Brand Impersonation: Customer Acquisition and Loyalty first appeared on alluresecurity.

The post Cost of Online Brand Impersonation: Customer Acquisition and Loyalty appeared first on Security Boulevard.

This year’s Cyber Security Awareness Month theme is “Generation Cyber Safe: Because online security knows no age”, but what does that mean? The annual theme of

The post Generational security: The meaning behind this year’s Cyber Security Awareness Month theme appeared first on Security Boulevard.

The InCyber Forum Canada 2024 conference is an outstanding event, packed with multiple stages, many thought-leadership panels, and an expansive array of vendors showcasing their latest innovation.

Come join me in Montreal Canada, Oct 29th-30th, and check out our panel Protect your Data, Thrive in Business: Strike a Balance on the Trust & Safety stage (Oct 30th, from 2:40pm to 3:40pm).

Registration is open now and here is a bonus: an exclusive 50% discount code on registration, so you can enjoy all the sessions!

Registration link: https://2024.northamerica.forum-incyber.com/en/pe1/pe1-home.htm

Discount code is: ININ59XU2CF3

Panel Abstract: Protecting data while thriving in business is a delicate but much needed balance in today’s digital landscape. Companies are faced with the need to ensure the privacy and security of their customers’ data while continuing to innovate and grow. What are the best practices for striking the right balance?

Esteemed Panel:

• Luc Gagnon — Chief Technology Officer of the Canada Treasury Board
• Sandra Estok — Founder & CEO of Way2Protect
• Brandon Pugh — Director of Cybersecurity and Emerging Threats Policy at R Street Institute
• Tania Tanic — Founder & CEO of Brainstorm CyberRisque
• Matthew Rosenquist — CISO and Cybersecurity Strategist at Mercury Risk
• Nataliya Khylenko (moderator) — President & Founder of KhylenCo Consulting and AdaptAble Academy

The post InCyber Forum Canada 2024 appeared first on Security Boulevard.

In July, I wrote about my new book project on AI and democracy, to be published by MIT Press in fall 2025. My co-author and collaborator Nathan Sanders and I are hard at work writing.

At this point, we would like feedback on titles. Here are four possibilities:

1. Rewiring the Republic: How AI Will Transform our Politics, Government, and Citizenship
2. The Thinking State: How AI Can Improve Democracy
3. Better Run: How AI Can Make our Politics, Government, Citizenship More Efficient, Effective and Fair
4. AI and the New Future of Democracy: Changes in Politics, Government, and Citizenship...

The post More on My AI and Democracy Book appeared first on Security Boulevard.

Authors/Presenters:Lixin Liu, Yuanjie Li, Hewu Li, Jiabo Yang, Wei Liu, Jingyi Lan, Yufeng Wang, Jiarui Li, Jianping Wu, Qian Wu, Jun Liu, Zeqi Lai

Recipient: Outstanding Paper Award

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – Democratizing Direct-to-Cell Low Earth Orbit Satellite Networks appeared first on Security Boulevard.

Gary Perkins, Chief Information Security Officer, CISO Global While the scale of this data breach is alarming – with 277 gigabytes of data reportedly stolen – it’s important not to panic. Instead, focus on taking concrete steps to protect yourself. Stay informed, be proactive in safeguarding your personal information, and remainvigilant for any signs of […]

The post Identity Under Siege: Responding to the National Public Data Breach appeared first on CISO Global.

The post Identity Under Siege: Responding to the National Public Data Breach appeared first on Security Boulevard.

via the comic humor & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Solar Protons’ appeared first on Security Boulevard.

The software development lifecycle (SDLC) looks different for every team, but standard methodologies have emerged and evolved to help teams plan, test, and maintain projects with consistency and accuracy. These methodologies offer a clear approach to software development, ensuring each phase of development—from initial design to post-deployment maintenance—executes effectively.

The post SDLC Methodologies: The 7 Most Common appeared first on Security Boulevard.

The goal of any software development lifecycle (SDLC) is to create a great product. And that requires flexibility, customer-centricity, and a philosophy of constant improvement—all attributes of the Agile SDLC. 

The post What Is the Agile SDLC? Benefits, Stages And Implementation appeared first on Security Boulevard.

Earlier this week, on October 9, during the second day of the fall CA/Browser Forum Face-to-Face meeting, Apple revealed that it had published a draft ballot for commentary to GitHub. This proposal, which is sponsored by Sectigo, offers to incrementally phase maximum term for public SSL/TLS certificates down to 45 days between now and 2027. The draft also phases down the DCV reuse period over time, until it reaches 10 days in 2027.

The post Apple Releases Draft Ballot to Shorten Certificate Lifespan to 45 Days appeared first on Security Boulevard.

The Contrast Security Runtime Security Platform — the engine driving Contrast’s Application Detection and Response (ADR) technology — blocked approximately 55.8K cybersecurity attacks during the month of September 2024. 

The post Prevent Path Traversal Attacks with ADR | Contrast Security appeared first on Security Boulevard.

FMR FAIL: Huge investment firm won’t say how it was hacked.

The post (In)Fidelity Admits Data Breach 8 Weeks Ago — 77K PII Lost appeared first on Security Boulevard.