transparency

FortiJump: Yet Another Critical Fortinet 0-Day RCE
Richi Jennings | | Carl Windsor, CVE-2024-47575, FG-IR-24-423, fgfmsd, Fortigate, FortiGate devices, FortiGate Flaw, FortiJump, Fortinet, Inc., responsible disclosure, responsible disclosure program, SB Blogwatch, transparency
FortiFAIL: Remote code execution vulnerability still not acknowledged by Fortinet after 10+ days’ exploitation ...
Security Boulevard

Cybersecurity Insights with Contrast CISO David Lindner | 5/31/24
David Lindner, Director, Application Security | | AI, Malware, runtime security, social engineering, transparency
Insight #1 Transparency isn't just about promising action, it's about proving it. It means sharing the data and results that show you're following through on your commitments ...

Cybersecurity Insights with Contrast CISO David Lindner | 1/5/24
Insight #1 In light of 23andMe blaming victims for their data getting breached, I have two things to ask: Users, please stop reusing passwords. Providers, please start requiring multifactor authentication (MFA) ...

Cybersecurity Insights with Contrast CISO David Lindner | 12/15/23
Insight #1 2023 saw the "transparency" movement continue for software organizations. In 2024, this will continue, and we as software organizations should fully embrace it and start following frameworks like the Minimum ...
Spying through Push Notifications
Bruce Schneier | | metadata, national security policy, Privacy, spyware, surveillance, transparency, Uncategorized
When you get a push notification on your Apple or Google phone, those notifications go through Apple and Google servers. Which means that those companies can spy on them—either for their own ...

How the global fraud-fighting community makes the internet safer for everyone
Coby Montoya | | community, control, Digital Trust & Safety, Digital Trust and Safety, fraud solutions, ML, real-time fraud solutions, Sifters, transparency
Discover why a platform approach, combined with global data and community, is the foundation of best-in-class Digital Trust & Safety. The post How the global fraud-fighting community makes the internet safer for ...

Lost transparency, blackbox ML, and other hidden risks of outsourced fraud solutions
Coby Montoya | | decision explainability, Digital Trust & Safety, Digital Trust and Safety, fraud solutions, ML, outsourced fraud solutions, payment fraud, Product, sift fraud solution, transparency
Machine learning-based fraud decision engines are sometimes viewed as mysterious black boxes that only provide minimal insight into why a decision was made on a login or a transaction. It’s a valid ...

Charting the Future of SBOM: Insights From CISA’s New Guide: Shifting the Balance of Cybersecurity…
Charting the Future of SBOM: Insights From CISA’s New Guide: Shifting the Balance of Cybersecurity RiskOn April 2023 CISA released a new joint guide for software security called Shifting the Balance of ...

Large Language Models and Elections
Earlier this week, the Republican National Committee released a video that it claims was “built entirely with AI imagery.” The content of the ad isn’t especially novel—a dystopian vision of America under ...

How Governments Request Your Data From Service Providers
A recently-released Surfshark report looked into global inquiries into the activities of specific accounts made by governments to service providers. The report found the United States “requests the most user data from ...
Security Boulevard