transparency

In a Social Engineering Showdown: AI Takes Red Teams to the MatÂ
That AI has gotten much more proficient in social engineering is a revelation that's not surprising, but still sets alarm bells ringing ...
Security Boulevard

Beyond open vs. closed: Understanding the spectrum of AI transparency
Aaron Linskens | | Artificial Intelligence, generative AI, open source, open-source-software, transparency
Artificial intelligence (AI) is transforming industries, from software development to cybersecurity. But as AI adoption grows, so does the discussion around its accessibility and transparency. Unlike traditional software, where the concept of ...

Cybersecurity Insights with Contrast CISO David Lindner | 02/27/25
David Lindner, Director, Application Security | | Application Detection and Response (ADR), cybersecurity culture, cybersecurity incident reporting, Detection & Response, extended detection response, Ransomware, transparency
Insight #1 - Veracode report: Flaw fix times increase 47% since 2020 Veracode’s 2025 State of Software Security report exposes a troubling trend — flaw fix times have surged 47%, jumping from ...

Cybersecurity Insights with Contrast CISO David Lindner | 02/21/25
David Lindner, Director, Application Security | | Application Detection and Response (ADR), cybersecurity culture, cybersecurity incident reporting, Detection & Response, extended detection response, Ransomware, transparency
Want credibility? Don’t hide in a closet after a security incident Be transparent with stakeholders during a security incident by clearly communicating what is being done and when they can expect updates ...

FortiJump: Yet Another Critical Fortinet 0-Day RCE
Richi Jennings | | Carl Windsor, CVE-2024-47575, FG-IR-24-423, fgfmsd, Fortigate, FortiGate devices, FortiGate Flaw, FortiJump, Fortinet, Inc., responsible disclosure, responsible disclosure program, SB Blogwatch, transparency
FortiFAIL: Remote code execution vulnerability still not acknowledged by Fortinet after 10+  days’ exploitation ...
Security Boulevard

Cybersecurity Insights with Contrast CISO David Lindner | 5/31/24
David Lindner, Director, Application Security | | AI, Malware, runtime security, social engineering, transparency
Insight #1 Transparency isn't just about promising action, it's about proving it. It means sharing the data and results that show you're following through on your commitments ...

Cybersecurity Insights with Contrast CISO David Lindner | 1/5/24
Insight #1 In light of 23andMe blaming victims for their data getting breached, I have two things to ask: Users, please stop reusing passwords. Providers, please start requiring multifactor authentication (MFA) ...

Cybersecurity Insights with Contrast CISO David Lindner | 12/15/23
Insight #1 2023 saw the "transparency" movement continue for software organizations. In 2024, this will continue, and we as software organizations should fully embrace it and start following frameworks like the Minimum ...
Spying through Push Notifications
Bruce Schneier | | metadata, national security policy, Privacy, spyware, surveillance, transparency, Uncategorized
When you get a push notification on your Apple or Google phone, those notifications go through Apple and Google servers. Which means that those companies can spy on them—either for their own ...

How the global fraud-fighting community makes the internet safer for everyone
Coby Montoya | | community, control, Digital Trust & Safety, Digital Trust and Safety, fraud solutions, ML, real-time fraud solutions, Sifters, transparency
Discover why a platform approach, combined with global data and community, is the foundation of best-in-class Digital Trust & Safety. The post How the global fraud-fighting community makes the internet safer for ...