Page 3 - Jay Gazlay News Today : Breaking News, Live Updates & Top Stories | Vimarsana

The Biden administration warns executives from big US industries to address 'one of the most serious' flaws...

Hundreds of millions of devices around the world could be exposed to a newly revealed software vulnerability, as a senior Biden administration cyber official warned executives from major US industries

By Ralph Pisani May 27, 2021 Recently, Cybersecurity and Infrastructure Security Agency information security specialist Jay Gazlay said the SolarWinds breach made it clear that “identity is everything now.”  Tighter identity controls, including behavior analysis techniques, can flag impossible logins, Gazlay told the National Institute of Standards and Technology’s Information Security and Privacy Advisory Board. “If we don’t get set up to do that, we’re not going to notice these user impersonation attacks that become de rigueur for our adversaries.”  In 2004, the U.S. invest...

The Challenge of Securing Non-People Identities Non-people identities, which can act intelligently and make decisions on behalf of a person's identity, are a growing cybersecurity risk. Eric Kedrosky April 29, 2021 PDF From SolarWinds to Ubiquiti, data breaches have stormed recent headlines, and they all have one risk in common: non-people identities. As affected enterprises recover, there's debate over why these breaches happen and how cloud security can improve. But one thing everyone can agree on is that traditional security is dead, and cloud is the killer. The paradigm has changed, and t...

(Source: Mike via Flickr) The SolarWinds supply chain attack should prompt federal agencies and others to rethink how they approach security issues - especially identity and access management, according to a breakdown of the attack presented this week by the National Institute of Standards and Technology and the U.S. Cybersecurity and Infrastructure Security Agency. At NIST's Information Security and Privacy Advisory Board meeting, Jay Gazlay, a technical strategist with CISA who has been examining the attack since it was first disclosed in December 2020, presented an analysis of what the ag...