CyberCureME - Cyber Security Marketplace’s Post

My latest article just posted at CIO magazine! 10 things to watch out for with open source genAI Open source genAI can be downloaded free, used at scale without racking up costs, and run securely behind corporate firewalls. But don’t let your guard down. https://lnkd.in/eErcDexr

It is EU Cyber Resilience Act crunch day today, and therefore a good time to ponder how the #CRA could massively help open source or turn it into a compliance drama: https://lnkd.in/ezgvEg77

Netskope Is First Vendor To Deliver Security Service Edge Globally With A Seamless, Localized Experience Read the full article here: https://lnkd.in/dg_SzPpX #technews #cios #ctos #voiceofcio #cionews #security #securityserviceedge #securityservice #cyber #cybersecurity CIONews Desk | CIO News

“OpenSSF supports the Biden-Harris Administration’s Executive Order (EO) on Artificial Intelligence. The EO provides a framework that fosters innovation in AI, like the DARPA AI Cyber Challenge, while ensuring secure, and equitable outcomes for everyone.” Read more below https://lnkd.in/eigGtHVx #cybersecurity

The ink of the EU Cyber Resilience Act has dried. Several open source organizations worked hard with the EU and member states to get to a better text, and I think that this worked pretty well. Sadly, some articles are still being written based on earlier drafts. Please find below an up to date summary of what the #CRA actually says about open source: https://lnkd.in/ewfHSNqP

Looking for a way to protect your website from cyber attacks? Consider using crowdsec! Crowdsec is an open source solution that helps detect and block DDoS and brute-force attacks. It works by sharing threat intelligence between websites using crowdsec, allowing everyone to protect each other. The advantages of crowdsec: - Completely free and open source - Large community support and constant updates on new threats - Automatically blocks malicious IP addresses without manual intervention - Fast detection and response to attacks #crowdsec https://lnkd.in/g-aSvKEg

The definition of “open source” in the most recent version (article 2(48)) of the Cyber Resilience Act (CRA) goes beyond the Open Source Definition (OSD) managed by OSI.

Happy New EU legislation! Seriously, I'm actually quite excited that the horizontal cybersecurity requirements for products with digital elements, or CRA as it is affectionately called, has now taken its final form. There have been much said about how it might negatively affect open source projects, but the final version squarely places that responsibility on those using open source for commercial purposes. Which is great! Below is a link to a good read on CRA and open source, including a link to the final CRA text. Happy New Cybersecurity Year! https://lnkd.in/dmrgZEV7

Since launching last November, our Secure Future Initiative (SFI) continues to advance secure-by-design principles and identity protection to outpace evolving cyberthreats. Amid a massive digital transformation, with cloud compute, agile development and AI, and increasing complexity in the security landscape, I’m excited to share an update on our progress. In this blog, you’ll learn more about the progress we’re making on SFI.   Notably, we are continuing our commitment to the Alpha-Omega project, a partnership with the Open Source Security Foundation to catalyze security improvements to the most widely deployed open source software projects and ecosystems. Our investment this year will more than double the number of projects analyzed, including 100 of the most commonly used open source AI libraries. In collaboration with co-leaders Google and Amazon, we are helping foster a sustainable and modern culture of security within open source communities.    At the same time as threats are increasing in speed, scale and sophistication, it's critical that we continue to evolve our security posture and provide transparency in our communications. SFI is deepening the way we design, build, test, and operate our environment, and I look forward to sharing more updates over the coming months: https://msft.it/6006cbk4i

Great opportunity for banks and financial institutions to enhance their cyberwar position by challenging and changing outdated risk perceptions and security mindsets. Leverage Microsoft’s secure-by-design principles and identity protection features to empower regulated industries, including banks and other financial institutions. These technologies elevate business operations while safeguarding against both insider threats and external attacks. Move beyond antiquated guidelines and embrace Next GenAI-driven detection and response mechanisms. Adopt a modern approach rooted in Zero Trust and privileged access management, ultimately delivering world-class service to banking consumers. Let’s foster transparency and fairness in trade across citizens, businesses, and financial institutions. Bret Arsenault #cyberdefence #riskmanagement #zerotrustarchitecture