Security researchers question why it took so long for news of the hack on the federal court’s document management system, which dated back to early 2020, to come out.

Snyk Cloud integrates Snyk’s infrastructure-as-code and containers with Fugue’s cloud security posture management solution.

In the Security News FreeBSD and the software supply chain, open-source implies that its open, hardcoded passwords are always bad, on-again, off-again, on-again, privilege escelation defined, preparing for quantum, so many vulnerabilities, CosmicStrand another UEFI firmware rootkit, & reviving ancient computers!

Now that strict data-management regulations like the GDPR and CCPA are in place, identity audits are a near-necessity for online organizations. Here’s how identity auditing works, how to carry out an identity audit and how customer identity and access management (CIAM) solutions may help automate the audit process.

On the heels of an earlier Verizon report showing the ongoing rise in healthcare web app attacks, the Department of Health and Human Services Cybersecurity Coordination Center issued guidance on threat actor tactics and possible remediation strategies.

Most current security risk assessments are not effective. Doug Landoll joins BSW to explain how we can fIx this. Doug will share 5 Essential Elements of an Effective Security Risk Assessment, including: Scoping, Scheduling, and Champions Team Structure Data and Measurements Calculations and Analysis Reporting, Presentation, and Tracking

Acrisure, a provider of cyber insurance and managed detection and response (MDR), acquired the Catalyst Technology Group and ITS Inc. for an undisclosed amount, MSSP Alert reported.

NIST is seeking industry feedback on its updated healthcare cybersecurity insights, which have a renewed focus on HIPAA implementations. Meanwhile, the Cloud Security Alliance unveiled a third-party risk guide for healthcare.