NIST

Cisco Co-Authors Update to the NIST Adversarial Machine Learning Taxonomy

Posted on by Admin
Cisco Co-Authors Update to the NIST Adversarial Machine Learning Taxonomy

The rapid evolution and enterprise adoption of AI has motivated bad actors to target these systems with greater frequency and sophistication. Many security leaders recognize the importance and urgency of AI security, but don’t yet have processes in place to effectively manage and mitigate emerging AI risks with comprehensive coverage of the entire adversarial AI threat landscape. Robust Intelligence (now a part of Cisco) and the UK AI Security Institute partnered with the National Institute…

Read More

Google Announces Quantum-Safe Digital Signatures in Cloud KMS

Posted on by Admin
Google Announces Quantum-Safe Digital Signatures in Cloud KMS

Google announced on Thursday the development of quantum-safe digital signatures (FIPS 204/FIPS 205) in Google Cloud Key Management Service (Cloud KMS) for software-based keys. This is available in preview. The search giant also provided a high-level view into its post-quantum strategy for Google Cloud encryption products, including Cloud KMS and the Cloud Hardware Security Module (Cloud HSM). More Google news & tips Mounting concern over public-key cryptography systems This is significant, the company said, because…

Read More

NIST's New Post-Quantum Cryptography Standards Announced

Posted on by Admin
NIST's New Post-Quantum Cryptography Standards Announced

The U.S. National Institute of Standards and Technology this week unveiled three encryption algorithms designed to resist cyberattacks, which industry observers said are a positive step toward preventing cyberattacks that break current encryption methods. The Federal Information Processing Standard (FIPS) 203, 204, and 205 provide standards for general encryption and protecting digital signatures. They were derived from multiple submissions in NIST’s post-quantum cryptography standardization project. Quantum computers are rapidly increasing the ability for high-performance computing,…

Read More

How the NIST Cybersecurity Framework 2.0 helps protect businesses

Posted on by Admin
How the NIST Cybersecurity Framework 2.0 helps protect businesses

Earlier this year, the U.S. National Institute of Standards and Technology (NIST) released version 2.0 of its Cybersecurity Framework or “CSF.” The NIST CSF has been pivotal in helping medium-sized organizations navigate the increasingly complex cybersecurity landscape. For those enterprises that are too large to be called “small” yet often struggle to find the budget and internal IT security resources available to large enterprises, the CSF offers a robust cyber defense mechanism for safeguarding any…

Read More

Microsoft Patched 6 Actively Exploited Zero-Day Flaws

Posted on by Admin
Microsoft Patched 6 Actively Exploited Zero-Day Flaws

Patch Tuesday, Microsoft’s monthly report of security updates, brought 90 CVEs, including some vulnerabilities that were being actively exploited. Some vulnerabilities originated in Chromium, meaning both Microsoft Edge and Google Chrome may have been affected. Here are the most critical flaws and patches disclosed by Microsoft on Aug. 13. Six zero-day flaws had been exploited Threat actors had already taken advantage of six zero-day exploits in particular: CVE-2024-38106: an elevation of privilege vulnerability in the…

Read More

Understanding the impact of the NIST NVD backlog on MSPs

Posted on by Admin
Understanding the impact of the NIST NVD backlog on MSPs

Since February 2024, the National Institute of Standards and Technology’s (NIST) National Vulnerability Database (NVD) has encountered delays in processing vulnerabilities. This backlog, caused by factors such as software proliferation, budget cuts and changes in support, has significant implications for managed service providers (MSPs). Budget cuts and increased vulnerabilities NIST, an agency within the United States Commerce Department, saw its budget cut by nearly 12% this year. For over 20 years, the NVD has been…

Read More

Get on Cybersecurity Certification Track With These Courses

Posted on by Admin
Get on Cybersecurity Certification Track With These Courses

TL;DR: Dive into the world of cybersecurity with The Complete 2024 Cyber Security Expert Certification Training Bundle, now just $49.99 (reg. $195). As the world gets more and more online, cybersecurity threats become more and more complex and challenging to navigate. There’s a massive demand for cybersecurity experts, and if you’re interested in pursuing a lucrative new career or bringing a necessary business cost in-house, The Complete 2024 Cyber Security Expert Certification Training Bundle can…

Read More

BeyondTrust Report: Microsoft Security Vulnerabilities Decreased by 5% in 2023

Posted on by Admin
BeyondTrust Report: Microsoft Security Vulnerabilities Decreased by 5% in 2023

The number of Microsoft vulnerabilities has mostly flattened in 2023, with elevation of privilege and identity attacks being particularly common, according to BeyondTrust’s annual Microsoft Vulnerabilities report. Identity and access management solutions company BeyondTrust studied the most significant CVEs of 2023 and Microsoft vulnerability data from Microsoft’s monthly Patch Tuesday bulletins. The report includes vulnerability trends and tips about how to reduce identity attacks. Microsoft reported 1,228 vulnerabilities in 2023 The total number of Microsoft…

Read More

NIST Cybersecurity Framework: A Cheat Sheet for Professionals

Posted on by Admin
NIST Cybersecurity Framework: A Cheat Sheet for Professionals

The National Institute of Standards and Technology has updated its Cybersecurity Framework for 2024. Version 2.0 of the NIST CSF, the first major update since the framework was released a decade ago, was created with the goal of expanding the primary audience from critical infrastructure to all organizations. In general, the NIST CSF aims to standardize practices to ensure uniform protection of all U.S. cyber assets. TechRepublic’s cheat sheet about the NIST CSF is an…

Read More

Develop Advanced Cybersecurity Skills for Just $80

Posted on by Admin
Develop Advanced Cybersecurity Skills for Just

TL;DR: Develop the skills you need to advance in the lucrative cybersecurity field with The 2023 Ultimate Advanced CyberSecurity Professional Certification Bundle — it’s currently on sale for just $80. You now have the opportunity to develop advanced cybersecurity skills at your own pace with The 2023 Ultimate Advanced CyberSecurity Professional Certification Bundle. Best of all, it’s on sale right now for only $79.99 at TechRepublic Academy. Cyber attacks are on the rise, according to…

Read More
1 2