Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Coffee Talk with SURGe: 2023-APR-04 3CX Supply Chain Compromise, Medical Device SBOMs, ChatGPT

Grab a cup of coffee and join Ryan Kovar, Mick Baccio, and Audra Streetman for another episode of Coffee Talk with SURGe. The team from Splunk will discuss the latest security news, including: Audra and Mick competed in a 60 second charity challenge on whether or not they see artificial intelligence reaching singularity, with proceeds benefiting DataEthics4All. The trio wrapped up with a deep dive into the RESTRICT ACT and proposed TikTok ban in the United States.

Pen Testing: Passion or Profit?

In this video, we sit down with Jonathan Care, a renowned cybersecurity expert, to explore the question of whether or not money should be the primary motivation for pursuing a career in pen testing. Jonathan shares his insights on the importance of passion and the potential drawbacks of focusing solely on financial gain. Join us for a thought-provoking discussion on the role of money in the world of pen testing, and whether it should be a driving factor in your career decisions.

SQL INJECTION ATTACK

An SQL Injection vulnerability may affect any website or web application that uses an SQL database such as MySQL, Oracle, SQL Server, or others. SQL may be used to gain unauthorized access to sensitive data: customer information, personal data, trade secrets, intellectual property, and more. SQL Injection is one of the oldest, most prevalent, and most dangerous web application vulnerability. The OWASP organization (Open Web Application Security Project) lists injections in their OWASP Top 10 document as the number one threat to web application security.

Find Out What Users Think About KnowBe4

TrustRadius collected live user reviews from Black Hat 2022 on their experience with the KnowBe4 security awareness training and simulated phishing platform. In this short video, users talk through how they use KnowBe4, what the best features are, the return on investment they've had and rate how likely they are to recommend KnowBe4. A de minimus incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement.

The 443 Episode 236 - Another Software Supply Chain Attack

This week on The 443, we discuss the latest software supply chain attack with a potential blast radius of thousands of organizations. Then we cover a new protocol vulnerability in the Wi-Fi wireless standard before ending with some research into insecure Microsoft Azure applications. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.

LastPass Import Using Single Sign On (SSO) or Federated Login

Migrating your users from LastPass to Keeper is simple and secure. All information stored in LastPass, including passwords, folders, subfolders, custom fields and notes can be moved to Keeper with just a few clicks. Lastpass users who are using Single Sign-On (SSO) or a Federated Authentication Platform such as Okta, Azure and Google, can import credentials, secrets and other data directly into Keeper using our Desktop Application. Our automated import tool now supports both Master Password and federated SSO login methods.