Earlier this month, Rambler Gallo pled not guilty to charges that he attempted to sabotage the water treatment facility in Discovery Bay, California. The facility provides treatment for the water and wastewater systems for the town’s 15,000 residents. An unsealed federal court indictment showed Gallo logged into the Supervisory Control and Data Acquisition (SCADA) network..

The post Insider Indicted for Attempting to Sabotage California Water Plant appeared first on Security Boulevard.

On June 23, 2023, SolarWinds revealed via an SEC Form 8-K filing that the U.S. Securities and Exchange Commission (SEC) notified the company that “certain current and former executive officers and employees of the company, including the company’s chief financial officer and chief information security officer,” had received Wells Notices. What is a Wells Notice,..

The post SEC Sends Wells Notice to SolarWinds Executives appeared first on Security Boulevard.

An interesting case of insider risk wrapped up recently in the Federal District Court in Massachusetts when U.S. Senior District Court Judge William G. Young handed down a lenient sentence to Haoyang Yu. Yu, a former employee of semiconductor company Analog Devices Inc (ADI), was convicted of stealing ADI’s designs and then forming his own..

The post Insider Risk: Theft of Trade Secrets Nets Thief Six Months appeared first on Security Boulevard.

The second anniversary of the Colonial Pipeline ransomware attack has come and gone, and while many lessons have been learned and assimilated, there’s still more we can do. Security Boulevard reached out to some experts in the industry to see how far we’ve come and where work still needs to be done. For those in..

The post Two Years After Colonial Pipeline, What Have We Learned? appeared first on Security Boulevard.

The United States and South Korea have crafted a “Strategic Cybersecurity Cooperation Framework.” The framework is part of recent bilateral accords intended to signal mutual adversaries and reaffirm the “ironclad commitment to what has become a global alliance focused on deepening defense and security ties.” North Korea’s cyberthreat shenanigans are one area of concern, as..

The post U.S.-South Korea Forge Strategic Cybersecurity Framework appeared first on Security Boulevard.

Insecure applications come with a cost that can be measured in billions of dollars of losses. I recently spoke with Brook Schoenfield, a distinguished engineer who quietly describes himself as an “Elder AppSec Diplomat,” on the eve of the RSA Conference. Schoenfield is the quintessential walking, talking go-to resource on anything involved with application security..

The post AppSec: How Do You Know Your app is 100% Secure? You Don’t appeared first on Security Boulevard.

A cashier at a Colorado casino is accused of stealing half a million dollars in cash after allegedly being duped by phone calls and text messages from imposters posing as her bosses. She sits in a Colorado jail while the money is long gone. It appears to be a case of creative social engineering by..

The post Socially Engineered Into Stealing $500,000 From a Casino appeared first on Security Boulevard.

The Federal Trade Commission (FTC) chair, Lina M. Khan, recently announced the commission’s intent to adjust a rule that would prohibit non-compete agreements by workers or independent contractors. Their rationale? Unfair competition—which, therefore, falls under the purview of the FTC. This could have a huge impact on the cybersecurity and IT industries, and open up..

The post FTC Proposes Eliminating Non-Compete Clauses appeared first on Security Boulevard.

It made the headlines in early January; Russia is targeting U.S. nuclear scientists and research facilities. While certainly not a news flash—given that Russia’s (and the USSR’s) history of targeting U.S. nuclear technologies dates back more than 75 years. But the tools used in the latest foray remind us of the need to pay more..

The post Russia-Linked Attackers Target US Nuclear Research Facilities appeared first on Security Boulevard.

Two recent class action settlements highlighted just how seriously companies should take their duty to protect users’ information. The cost of not doing so is astronomical. These settlements also speak to the rare calculus of the value of a user’s private information. Meta, the parent of Facebook just agreed to a $725 million settlement while..

The post Privacy Settlements Reveal the Value of User Data appeared first on Security Boulevard.