Security Boulevard

According to an updated advisory from the United States (US) Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation (FBI), the BlackSuit ransomware strain is known to have had demands totaling up to $500 million in payments. In this article, we’ll dive into the details of the ransomware attacks, determine who the key […]

The post BlackSuit Ransomware Threat Actors Demand Up To $500 Million appeared first on TuxCare.

The post BlackSuit Ransomware Threat Actors Demand Up To $500 Million appeared first on Security Boulevard.

There are significant gaps in cyber resilience, despite growing confidence in organizational strategies, according to a Cohesity survey of 3,100 IT and security decision-makers across eight countries.

The post Cyber Resilience Lacking, Organizations Overconfident appeared first on Security Boulevard.

It’s easy to find vulnerabilities. It’s harder to prioritize and fix them. 

So far in 2024, there has been an average of over 110 CVEs disclosed per day. Compounded with all the vulnerabilities disclosed in the last two decades, security teams are faced with triaging thousands and thousands of vulnerabilities and deciding which ones need to be fixed first. 

Vulnerability prioritization remains a critical challenge for security teams—but machine learning offers solutions to lessen the burden of analysis.

The right vulnerability prioritization strategy to employ depends on the nature of your business, your tech architecture, and more. Given all the different prioritization criteria we hear from customers, we set out to build Dazz Priority Scores, which we announced earlier this year. 

Dazz Priority Scores uses context such as issue exploitability, exposure, severity, business impact, and root causes to help customers quickly identify the most critical issues to fix out of potentially thousands discovered by their detection tools. By using Dazz Priority Scores, customers reduce the backlog of vulnerabilities that need to be further analyzed by an order of magnitude.

The magic behind Dazz Priority Scores

The Dazz Unified Remediation Platform uses machine learning to continually assess a customer’s risk landscape. To calculate a Priority Score, the Dazz platform considers the following factors:

• Business context: taking into account which applications, data, and infrastructure resources are impacted by specific vulnerabilities
• Risk context: assessing the vulnerability severity, exploitability, and threat intelligence available for any vulnerability
• Environment context: understanding where the vulnerability originates, what’s impacted downstream, and what remediation and mitigation steps are available

Given these factors, Dazz calculators “sub scores” which can be bucketed into:

• Risk scores
• Asset scores
• Remediation scores

Let’s take a look at each. 

Risk scores

Risk scores assess all factors of a given vulnerability. To start, Dazz considers the severity from the source detection tool of a vulnerability. If a vulnerability has been seen by multiple sources, customers can apply their own logic to normalize a severity rating.

On top of severity, Dazz considers exploitability data from CISA KEV, EPSS, and other threat intelligence sources. Finally, Dazz takes into account customer-defined SLAs. If a vulnerability has breached its SLA date set by the customer, the risk weighting will be greater.

Asset scores

Asset scores take into account the business context of applications, data, and infrastructure resources associated with any vulnerability. By ingesting data from CMDBs, directories, and other platforms, Dazz automatically correlates vulnerabilities with business context. Dazz Business Units allows customers to enrich the correlation of vulnerabilities and auto-assign certain owners depending on the resources impacted by any vulnerability.

Dazz can also glean other characteristics about vulnerabilities to weight them as a greater risk, like whether they impact internet-facing resources or applications through reachable code.

Remediation score → effort to fix

The final element of Dazz Priority Scores considers remediation actions. This is often one of the most sought after elements that customers haven’t been able to attain before using Dazz. By determining the root cause of vulnerabilities, Dazz understands the relative effort required to fix it. Dazz can also outline the best remediation and mitigation options available, highlighting which will be most effective given the environmental context of the vulnerability.

Furthermore, Dazz can understand when multiple vulnerabilities stem from the same root cause. The concept here is that vulnerabilities that share a root cause may be weighted higher since the risk reduced upon remediation is far greater than a single vulnerability in isolation.

Putting it all together

Dazz Priority Scores = weighted asset risk score + weighted risk score + weighted remediation score. 

Scores are calculated on a scale of 0-100 for each finding, with 100 being the highest score. Customers can understand which factors contributed to any score, and customize weights according to what makes the most sense to their business.

Since machine learning underpins the model, Dazz Priority scores get better and better as it’s applied to billions of vulnerabilities across our customer base.

If you’d like to learn more about Dazz Priority Scores and try it for yourself, contact us today.

The post How we improved vulnerability prioritization with machine learning appeared first on Security Boulevard.

In the escalating battle against malicious headless bots, basic detection methods are no longer sufficient. As cybercriminals refine their techniques and leverage headless browsers to automate attacks with increasing sophistication, the need for advanced detection strategies has never been more critical. This blog post dives into the world of headless browsers, exploring how they are […]

The post The Growing Challenge of Headless Browser Attacks: How to Defend Your Digital Assets appeared first on Security Boulevard.

The post How Swimlane Can Help SOC Management appeared first on AI-enhanced Security Automation.

The post How Swimlane Can Help SOC Management appeared first on Security Boulevard.

Cary, NC, Aug. 22, 2024, CyberNewsWire — INE Security, a global cybersecurity training and certification provider, recently launched initiatives with several higher education institutions in an ongoing campaign to invest in the education of aspiring cybersecurity professionals.

“There is … (more…)

The post News alert: INE Security launches initiatives in support of aspiring cybersecurity professionals first appeared on The Last Watchdog.

The post News alert: INE Security launches initiatives in support of aspiring cybersecurity professionals appeared first on Security Boulevard.

Application Security Posture Management (ASPM) is a strategy designed to unify and improve the security of your applications. It pulls together various security practices, like static application security testing (SAST), software composition analysis (SCA), secrets detection, and infrastructure as code (IaC), into a single, cohesive platform.

The post What is Application Security Posture Management (ASPM) appeared first on OX Security.

The post What is Application Security Posture Management (ASPM) appeared first on Security Boulevard.

Authors/Presenters:Khaled Serag, Rohit Bhatia, Akram Faqih, and Muslum Ozgur Ozmen, Purdue University; Vireshwar Kumar, Indian Institute of Technology, Delhi; Z. Berkay Celik and Dongyan Xu, Purdue University

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.

Permalink

The post USENIX Security ’23 – ZBCAN: A Zero-Byte CAN Defense System appeared first on Security Boulevard.

A report published today by Critical Start, a provider of managed cybersecurity services, finds cyberattacks in the first half of 2024 continued to focus on vertical industries that are rich in critical data that can either be encrypted or stolen. For example, the manufacturing and industrial products sector remains the top targeted industry sector, with..

The post Report: Manufacturing Remains Atop Cyberattack Leader Board appeared first on Security Boulevard.

Click fraud artificially inflates the number of ad clicks, skewing your campaign data. Clean data is necessary to maximize your ad budget and optimize ROI by reaching real customers.

The post Unveiling the Power of Clean Data: Informed Decisions Drive Success appeared first on Security Boulevard.

The Network and Information Systems Directive 2 (NIS2) regulation goes into effect in October 2024, leaving European Union (EU) member states just a few fleeting months to adopt and publish its compliance recommendations.

The post The countdown to NIS2 is on: Understand its scope and requirements appeared first on Security Boulevard.

Cary, North Carolina, 22nd August 2024, CyberNewsWire

The post INE Security Launches Initiatives to Invest in the Education of Aspiring Cybersecurity Professionals appeared first on Security Boulevard.

via the comic & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Storage Tanks’ appeared first on Security Boulevard.

One of the major challenges organizations face in certificate lifecycle management is the timely renewal of certificates. Application owners often fail to renew certificates promptly despite receiving multiple advance expiry alerts. This oversight leads to application outages, business downtime, and security risks. The AppViewX AVX ONE Certificate Lifecycle Management (CLM) solution effectively addresses the issue […]

The post TLS Certificates Renewal with AppViewX AVX ONE CLM and Puppet appeared first on Security Boulevard.

Recently identified PyPI packages called "netfetcher" and "pyfetcher" impersonate open source libraries and target Windows users with malicious executables that have a zero detection rate among leading antivirus engines. Furthermore, some of these executables are called "node.exe" and even bear the NodeJS icon and metadata, making them evasive and easily mistaken for legitimate libraries.

The post ‘Netfetcher’ package drops illicit ‘node’ binary on Windows appeared first on Security Boulevard.

Financial services is among the most highly regulated of any industry – and justifiably so. As critical infrastructure, the sector provides services which, if interrupted or destabilized, could have a catastrophic impact on economic and national security. Increasingly, these regulations mandate not only cyber-resilience (eg the EU’s DORA) but also digital sovereignty – which includes the idea that wherever data is collected or stored, it should be subject to local laws.

The post How Financial Institutions Can Manage Mounting Digital Sovereignty Requirements appeared first on Security Boulevard.

Mastering API error codes is essential for building robust and user-friendly applications. This comprehensive guide explores best practices for handling and documenting errors, ensuring clear communication between your API and its users.

The post Comprehensive Guide to API Error Code Management appeared first on Security Boulevard.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning regarding a newly discovered vulnerability in SolarWinds’ Web Help Desk solution, which has already been exploited in active attacks.   Tell me more about the SolarWinds RCE Vulnerability  SolarWinds’ Web Help Desk software is widely used by large enterprises, government agencies, healthcare providers and educational institutions to manage ... Read More

The post CISA Warns of Critical SolarWinds RCE Vulnerability Exploited in Attacks appeared first on Nuspire.

The post CISA Warns of Critical SolarWinds RCE Vulnerability Exploited in Attacks appeared first on Security Boulevard.

Authors/Presenters:Khaled Serag, Rohit Bhatia, Akram Faqih, and Muslum Ozgur Ozmen, Purdue University; Vireshwar Kumar, Indian Institute of Technology, Delhi; Z. Berkay Celik and Dongyan Xu, Purdue University

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.

Permalink

The post USENIX Security ’23 – ZBCAN: A Zero-Byte CAN Defense System appeared first on Security Boulevard.

The backstories of AppSec and cloud security In an industry that moves so quickly and pivots so frequently, it’s easy to forget that the term and discipline of application security (AppSec) emerged in the late 1990s and early 2000s. Driven by what was considered rapid web application growth at the time, the Open Web Application […]

The post CNAPP and ASPM — Friends or Foes? appeared first on OX Security.

The post CNAPP and ASPM — Friends or Foes? appeared first on Security Boulevard.