CyberSecurity Breakthrough recognizes HCLSoftware for the second consecutive year with top honorLOS ANGELES and NOIDA, India, Oct. 10, 2024 (GLOBE NEWSWIRE) -- CyberSecurity Breakthrough, a leading independent market intelligence organization that recognizes the top companies, technologies ...

HCL BigFix Wins “Endpoint Security Innovation Of The Year” in 2024 CyberSecurity Breakthrough Awards

At Yahoo Finance, you get free stock quotes, up-to-date news, portfolio management resources, international market data, social interaction and mortgage rates that help you manage your financial life.

HCL BigFix Wins “Endpoint Security Innovation Of The Year” in 2024 
CyberSecurity Breakthrough Awards

KSNT News. We tell local Topeka and Northeast Kansas News & Weather stories. Local News That Matters.

WMC Global Recognized for Outstanding Mobile Security Innovation in 2024 
Cybersecurity Breakthrough Awards Program

Security Innovation

securityinnovation

Two good things just happened in Washington — these days that should be enough of a headline. First, someone ideal was just appointed to be Deputy Assistant Secretary of Defense. Second, funding to teach our Hacking for Defense class across the country just was added to the National Defense Authorization Act . Interestingly enough, both events are about how the best and brightest can serve their country — and are testament to the work of two dedicated men. **Soldier, Scholar, Entrepreneur**Joe Felter was just appointed Deputy Assistant Secretary of Defense for South and Southeast Asia. As a result, our country just became a bit safer and smarter. That’s because Joe brings a wealth of real-world experience and leadership to the role. I got lucky to know and teach with Joe at Stanford. When we met, my first impression was that of a very smart and pragmatic academic. And I also noticed that there was always a cloud of talented grad students who wanted to follow him. (I learned later I was watching one of the qualities of a great leader.) Joe had appointments at Stanford’s (CISAC), where he was the co-director of the Empirical Studies of Conflict Project and at the where he was a research fellow. I learned he’d gone to Harvard to get his MPA at the Kennedy School of in conflict resolution. But the thing that really caught my attention: his Stanford Ph.D thesis in Political Science had the world’s best title: “ .” I wondered how this academic knew anything about counterinsurgency. Center for International Security and Cooperation Hoover Institute Government Taking Guns to a Knife Fight: A Case for Empirical Study of Counterinsurgency This was another reminder that when you reach a certain age, people you encounter may have lived multiple lives, had multiple careers, and had multiple acts. It took me a while to realize that Joe had one heck of a first act before coming to Stanford in 2011. As I later discovered, Joe’s first act was 24 years in the Army Special Operations Forces (SOF), retiring as a Colonel. His Special Forces time was with the as a team leader and later as a company commander. He did a tour with the as a platoon leader. In 2005, he returned to West Point (where he earned his undergrad degree) and ran the . Putting theory into practice, he went to Iraq in 2008 as part of the 75th Ranger Regiment, in support of a . In 2010 Joe was in Afghanistan as the Commander of the . At various points his Special Forces career took him to countries in Southeast Asia where counterinsurgency was not just academics. 1st Special Forces Group 75th Ranger Regiment Combating Terrorism Center Joint Special Operations Task Force Counterinsurgency Advisory and Assistance Team Ironically, I was first introduced to Joe not at Stanford but through one of his other lives — that of an entrepreneur and businessman — at the company he founded, Partners. It was there that Joe and I along with another retired Army Colonel, , came up with the idea of creating the Hacking for Defense class. We combined the Lean methodology — used by the to commercialize science — with the rapid problem sourcing and solution methodology Pete developed on the battlefields in Afghanistan and Iraq when he ran the US Army’s . BMNT Pete Newell Startup National Science Foundation Rapid Equipping Force My interest was to get Stanford students engaged in national service and exposed to parts of the U.S. government where their traditional academic path and business career would never take them. (I have a strong belief that we’ve run a 44-year experiment with what happens when you disconnect the majority of Americans from any form of national service. And the result hasn’t been good for our country. Today if college students want to give back to their country, they think of , the , or or perhaps the or the . Few consider opportunities to make the world safer with the Department of Defense, State Department, Intelligence Community or other government agencies.) Teach for America Peace Corps Americorps US Digital Service GSA’s 18F Joe, Pete and I would end up building a curriculum that would turn into a series of classes — first, , then (with the State Department and ), , , etc. Hacking for Defense Hacking for Diplomacy Professor Jeremy Weinstein Hacking for Energy Hacking for Impact **Hacking For Defense**Our first class in 2016 blew past our expectations — and we had set a pretty high bar. (See the final class presentations and ). Hacking for Defense here here Our primary goal was to teach students entrepreneurship while they engaged in national public service. Our second goal was to introduce our sponsors — the innovators inside the Department of Defense and Intelligence Community — to a methodology that can help them understand and better respond to rapidly evolving asymmetric threats. We believed if we could get teams to rapidly discover the real problems in the field using Lean methods, and only then articulate the requirements to solve them, then defense acquisition programs could operate at speed and urgency and deliver timely and needed solutions. Finally, we also wanted to show our sponsors in the Department of Defense that students can make meaningful contributions to understanding problems and rapid prototyping of solutions to real-world national security problems. **The Innovation Insurgency Spreads**Fast forward a year. is now offered at eight universities in addition to Stanford — , , , James Madison University, , and later this year University of Southern California and Columbia University. We established , a non-profit to train educators and provide a single point of contact for connecting the DOD/IC sponsor problems to these universities. Hacking for Defense Georgetown University of Pittsburgh Boise State UC San Diego, University of Southern Mississippi Hacking for Defense.org By the middle of this year Hacking For Defense started to feel like it had the same momentum as when my Lean LaunchPad class at Stanford got adopted by the National Science Foundation and became (I-Corps). I-Corps uses Lean Startup methods to teach scientists how to turn their discoveries into entrepreneurial, job-producing businesses. Over 1,000 teams of our nation’s best scientists have been through the program. It has changed how federally funded research is commercialized. the Innovation Corps Recognizing that it’s a model for a government program that’s gotten the balance between public/private partnerships just right, last fall Congress passed the , making the National Science Foundation Innovation Corps a permanent part of the nation’s science ecosystem. American Innovation and Competitiveness Act It dawned on Pete, Joe and me that perhaps we could get Congress to fund the national expansion of Hacking for Defense the same way. But serendipitously, the best person we were going to ask for help had already been thinking about this. The Congressman From Science and Innovation Before everyone else thought that teaching scientists how to build companies using Lean Methods might be a good for the country, there was one congressman who got it first. In 2012, (D-Il), ranking member on the House Research and Technology Subcommittee, got on an airplane and flew to Stanford to see first-hand the class that would become I-Corps. For the first few years Lipinski was a lonely voice in Congress saying that we’ve found a better way to train our scientists to create companies and jobs. But over time, his colleagues became convinced that it was a non-partisan good idea. Rep. Lipinski was responsible for helping I-Corps proliferate through the federal government. Rep. Dan Lipinski While Joe Felter and Pete Newell were thinking about approaching Congressman Lipinski about funding for Hacking for Defense Lipinski had already been planning to do so. As he recalled, “I was listening to your podcast as I was working in my backyard cutting, digging, chopping, etc. (yes, I do really work in my backyard,) when it dawned on me that funding Hacking for Defense as a national program — just like I did for the Innovation Corps — would be great for our nation’s defense when we are facing new unique threats. I tasked my staff to draft an amendment to the and I sponsored the amendment.” National Defense Authorization Act (The successful outcome of I-Corps has given the Congressman credibility on entrepreneurship education among his peers. And it doesn’t hurt that he has a Ph.D and was a university professor before he ended up in Congress.) Joe Felter and Pete Newell mobilized a network of Hacking for Defense supporters. Joe and Pete’s reputations preceded them on Capitol Hill, but in part a testament to the strength of Hacking for Defense, there’s now a large network of people who have experienced and believe in the program, and were willing to help out by writing letters of support, reaching out to other members of Congress to ask for support, and providing Congressman Lipinski’s office with information and background. Congressman Lipinski led the amendment. He brought on co-sponsors from both sides of the aisle: Representatives (R-CA 25), (D-CA 17), (D-CA 18), (D-MA 6) and (D-NH 1). Steve Knight Ro Khanna Anna Eshoo Seth Moulton Carol Shea-Porter On the floor of the House, Lipinski said, “Rapid, low-cost technological innovation is what makes Silicon Valley revolutionary, but the DOD hasn’t historically had the mechanisms in place to harness this American advantage. Hacking for Defense creates ways for talented scientists and engineers to work alongside veterans, military leaders, and business mentors to innovate solutions that make America safer.” Last Friday the House unanimously approved an amendment to the authorizing the Hacking for Defense (H4D) program and enabling the Secretary of Defense to expend up to $15 million to support development of curriculum, best practices, and recruitment materials for the program. National Defense Authorization Act This week the H4D amendment moves on to the Senate and Joe Felter moves on to the Pentagon. Both of those events have the potential to make our world a much safer place — today and tomorrow. Read more Steve Blank posts at www.steveblank.com .

National Security Innovation just got a major boost in Washington

Move over EigenLayer. RWAs, hop in the back seat. AI is proving it will be the top narrative in crypto for a while. Artificial Intelligence is transforming the world at an unprecedented pace, revolutionizing industries from healthcare to finance. While its potential seems limitless, one crucial element will determine whether AI fulfills its promise or becomes a source of distrust and controversy. Transparency. Here’s why transparency will determine the future of AI and how its full potential can be achieved. To help break down some of the complexities, Kartin Wong, Co-Founder of ORA, a trustless AI protocol on Ethereum, laid it all out. The Current Landscape AI has already made incredible strides in various sectors. AI's impact is far-reaching, from chatbots handling customer service inquiries to predictive analytics aiding medical diagnoses. However, as AI becomes more integrated into daily life, transparency becomes a bigger deal. The complexity of AI algorithms often makes them a "black box," where even developers may struggle to understand how an AI model arrives at a particular decision. This opacity can lead to ethical concerns, security risks, and a lack of trust among users. Therefore, achieving transparency in AI is not just a technical challenge but a societal imperative. Transparency in AI Transparency in AI means making the inner workings of AI systems understandable to humans. Wong said, “For industries in which actions have strong, far-reaching consequences, like healthcare, government, and security, transparency will be necessary for AI integration. Decision-makers need to understand how an AI model produces an insight, make it so only humans can be held accountable, and find a way for consequences of AI-derived manipulation to be huge.” These points involve explaining how algorithms function, disclosing how data is used, and ensuring accountability. To break it down a bit more: Building Trust: For AI to be widely adopted, stakeholders must trust that these systems are fair and unbiased.
Ensuring Accountability: Transparency allows for human oversight, ensuring that AI operators can be accountable for their actions.
Enhancing Security: Open AI systems are easier to scrutinize, making identifying and fixing vulnerabilities simpler.
Facilitating Compliance: Transparent AI systems are more likely to comply with regulations, reducing the risk of legal issues. Transparency in Data Usage Data is often referred to as the Digital Oil of our era, driving AI capabilities. However, collecting, storing, and using data raises significant ethical and practical questions. Benefits: Transparent data usage can enhance the quality of AI models by ensuring they are trained on accurate and unbiased data.


Drawbacks: Companies might be hesitant to share data due to privacy concerns and the potential loss of competitive advantage.


Business Decisions: Transparent data practices can improve business decisions by providing clearer insights and fostering greater stakeholder trust. How is ORA specifically tackling some of these issues? “We exclusively use open-source models and support open AI innovation. This helps our clients know exactly how AI is operating for use in their application or business. There are no hidden parameters or fine-tuning,” said a spokesperson for the team. “Our company does not influence the inference insights that our clients get. Our verification technology and frameworks, opML and opp/ai, provide transparency in AI and inference results that developers and end users receive.” More Than One Type of Tech Is in Play Achieving transparency in AI requires a multi-faceted approach, leveraging various technologies and best practices. Open-Source Models: Using open-source AI models allows anyone to examine the code.
Blockchain Technology: Blockchain is an immutable ledger that records every action an AI model takes.
Verification Frameworks: Implementing specific frameworks helps verify the authenticity and transparency of AI systems. Human Factor Accountability While technology can enhance transparency, human oversight remains a necessary component. Accountability: Humans must be accountable for AI system actions and decisions, meeting ethical considerations.
Ethical Considerations: Transparency can help mitigate the risk of AI-derived manipulation and align AI systems with societal values.
Consequences: Lack of transparency undoubtedly leads to loss of trust and potential misuse of AI technologies. Transparent AI Tech Is the Future of Business Prioritizing transparency is not merely advantageous—it is essential in a world that’s continuously relying on this technology. As we navigate the complexities of integration across various industries, the need for clear understanding and accountability looms larger. By embracing transparent practices in data usage, decision-making, and algorithm processes, we can build trust among stakeholders, mitigate ethical risks, and ensure compliance with regulations. The collaborative efforts of organizations like ORA underscore the potential for open-source models, blockchain technology, and robust verification frameworks to create a future where AI operates not as a "black box" but as an empowering tool for society. AI transparency is the force that will pave the way for ethical innovation and unlock AI’s full potential as a force for good in our collective future. Move over EigenLayer. RWAs, hop in the back seat. AI is proving it will be the top narrative in crypto for a while. Artificial Intelligence is transforming the world at an unprecedented pace, revolutionizing industries from healthcare to finance. While its potential seems limitless, one crucial element will determine whether AI fulfills its promise or becomes a source of distrust and controversy. Transparency. Transparency. Here’s why transparency will determine the future of AI and how its full potential can be achieved. To help break down some of the complexities, Kartin Wong, Co-Founder of ORA , a trustless AI protocol on Ethereum, laid it all out. ORA ORA The Current Landscape The Current Landscape AI has already made incredible strides in various sectors. AI's impact is far-reaching, from chatbots handling customer service inquiries to predictive analytics aiding medical diagnoses. However, as AI becomes more integrated into daily life, transparency becomes a bigger deal. The complexity of AI algorithms often makes them a "black box," where even developers may struggle to understand how an AI model arrives at a particular decision. This opacity can lead to ethical concerns, security risks, and a lack of trust among users. Therefore, achieving transparency in AI is not just a technical challenge but a societal imperative. Transparency in AI Transparency in AI Transparency in AI means making the inner workings of AI systems understandable to humans. Wong said, “For industries in which actions have strong, far-reaching consequences, like healthcare, government, and security, transparency will be necessary for AI integration. Decision-makers need to understand how an AI model produces an insight, make it so only humans can be held accountable, and find a way for consequences of AI-derived manipulation to be huge.” Wong said, “For industries in which actions have strong, far-reaching consequences, like healthcare, government, and security, transparency will be necessary for AI integration. Decision-makers need to understand how an AI model produces an insight, make it so only humans can be held accountable, and find a way for consequences of AI-derived manipulation to be huge.” These points involve explaining how algorithms function, disclosing how data is used, and ensuring accountability. To break it down a bit more: Building Trust: For AI to be widely adopted, stakeholders must trust that these systems are fair and unbiased. Ensuring Accountability: Transparency allows for human oversight, ensuring that AI operators can be accountable for their actions. Enhancing Security: Open AI systems are easier to scrutinize, making identifying and fixing vulnerabilities simpler. Facilitating Compliance: Transparent AI systems are more likely to comply with regulations, reducing the risk of legal issues. Building Trust: For AI to be widely adopted, stakeholders must trust that these systems are fair and unbiased. Ensuring Accountability: Transparency allows for human oversight, ensuring that AI operators can be accountable for their actions. Enhancing Security: Open AI systems are easier to scrutinize, making identifying and fixing vulnerabilities simpler. Facilitating Compliance: Transparent AI systems are more likely to comply with regulations, reducing the risk of legal issues. Transparency in Data Usage Transparency in Data Usage Data is often referred to as the Digital Oil of our era, driving AI capabilities. However, collecting, storing, and using data raises significant ethical and practical questions. Digital Oil Digital Oil ethical ethical Benefits: Transparent data usage can enhance the quality of AI models by ensuring they are trained on accurate and unbiased data. Drawbacks: Companies might be hesitant to share data due to privacy concerns and the potential loss of competitive advantage. Business Decisions: Transparent data practices can improve business decisions by providing clearer insights and fostering greater stakeholder trust. Benefits: Transparent data usage can enhance the quality of AI models by ensuring they are trained on accurate and unbiased data. Benefits: Transparent data usage can enhance the quality of AI models by ensuring they are trained on accurate and unbiased data. Benefits: Drawbacks: Companies might be hesitant to share data due to privacy concerns and the potential loss of competitive advantage. Drawbacks: Companies might be hesitant to share data due to privacy concerns and the potential loss of competitive advantage. Drawbacks: Business Decisions: Transparent data practices can improve business decisions by providing clearer insights and fostering greater stakeholder trust. Business Decisions: Transparent data practices can improve business decisions by providing clearer insights and fostering greater stakeholder trust. Business Decisions: How is ORA specifically tackling some of these issues? “We exclusively use open-source models and support open AI innovation. This helps our clients know exactly how AI is operating for use in their application or business. There are no hidden parameters or fine-tuning,” said a spokesperson for the team. “Our company does not influence the inference insights that our clients get. Our verification technology and frameworks, opML and opp/ai, provide transparency in AI and inference results that developers and end users receive.” “We exclusively use open-source models and support open AI innovation. This helps our clients know exactly how AI is operating for use in their application or business. There are no hidden parameters or fine-tuning,” said a spokesperson for the team. “Our company does not influence the inference insights that our clients get. Our verification technology and frameworks, opML and opp/ai, provide transparency in AI and inference results that developers and end users receive.” More Than One Type of Tech Is in Play More Than One Type of Tech Is in Play Achieving transparency in AI requires a multi-faceted approach, leveraging various technologies and best practices. Open-Source Models: Using open-source AI models allows anyone to examine the code. Blockchain Technology: Blockchain is an immutable ledger that records every action an AI model takes. Verification Frameworks: Implementing specific frameworks helps verify the authenticity and transparency of AI systems. Open-Source Models: Using open-source AI models allows anyone to examine the code. Open-Source Models: Blockchain Technology: Blockchain is an immutable ledger that records every action an AI model takes . Blockchain Technology: AI model takes AI model takes Verification Frameworks: Implementing specific frameworks helps verify the authenticity and transparency of AI systems. Verification Frameworks: Human Factor Accountability Human Factor Accountability While technology can enhance transparency, human oversight remains a necessary component. Accountability: Humans must be accountable for AI system actions and decisions, meeting ethical considerations. Ethical Considerations: Transparency can help mitigate the risk of AI-derived manipulation and align AI systems with societal values. Consequences: Lack of transparency undoubtedly leads to loss of trust and potential misuse of AI technologies. Accountability: Humans must be accountable for AI system actions and decisions, meeting ethical considerations. Accountability: Humans must be accountable Humans must be accountable Ethical Considerations: Transparency can help mitigate the risk of AI-derived manipulation and align AI systems with societal values. Ethical Considerations: Consequences: Lack of transparency undoubtedly leads to loss of trust and potential misuse of AI technologies. Consequences: Transparent AI Tech Is the Future of Business Transparent AI Tech Is the Future of Business Prioritizing transparency is not merely advantageous—it is essential in a world that’s continuously relying on this technology. As we navigate the complexities of integration across various industries, the need for clear understanding and accountability looms larger. By embracing transparent practices in data usage, decision-making, and algorithm processes, we can build trust among stakeholders, mitigate ethical risks, and ensure compliance with regulations. The collaborative efforts of organizations like ORA underscore the potential for open-source models, blockchain technology, and robust verification frameworks to create a future where AI operates not as a "black box" but as an empowering tool for society. AI transparency is the force that will pave the way for ethical innovation and unlock AI’s full potential as a force for good in our collective future.

Why Transparency Is Key to the Future of AI and All It Can Be

**ZUG, Switzerland, August 8th, 2024, Chainwire/-**Haven1, the REKT-Resistant EVM L1 blockchain, and Amazon Web Services (AWS) today announced a strategic partnership, with AWS working with a verified, infrastructure partner to become one of the seven initial validators of the Haven1 Proof-of-Authority blockchain. It’s a move that underscores alignment to security, innovation and the broader adoption of Web3. Haven1’s Proof-of-Authority blockchain validator network will consist of only the best, most reputable global partners as validators, playing a crucial role in maintaining the network’s integrity. This partnership with AWS, the world’s most comprehensive and broadly adopted cloud solution, marks a significant milestone underscoring AWS’s alignment with Haven1. As Haven1 deploys security and auto-scaling strategies, the network aims to utilize best-in-class AWS cloud services, including AWS Graviton2 processors that are custom-built to deliver the best price performance for cloud workloads, AWS Secrets Manager, Amazon Config, Amazon GuardDuty and AWS Key Management Service (KMS), to build an EVM Layer-1 blockchain ‘safe haven’ ecosystem that is architected to satisfy stringent security requirements, enabling Haven1 to focus on innovation. “Haven1 blockchain needed a scalable and durable infrastructure to power innovation within the Web3 ecosystem,” said Gianluca Ortolani, CTO of Haven1. “We’ve engineered a ‘safe haven’ network with the least number of attack vectors in Web3. This is enhanced by AI-optimized anomaly detection, a set of network guardians, and other proprietary tech built onto the network to fortify the chain, such as transaction level two-factor authentication, and a one-of-a-kind reserve fund, secured through Bitcoin restakers. By building on AWS, we are reinforcing our mission to provide secure on-chain solutions for businesses and individuals, creating the foundation for a more trustworthy Web3 future.” Haven1’s unwavering focus on security, liquidity, and decentralized governance (where H1 token holders play a significant role) positions Haven1 as a leader in providing robust and innovative Web3 solutions, fostering a reliable environment for on-chain activities. The network utilizes a careful selection of reputable, publicly-known validators, to ensure a high level of trust within the system. About Haven1 Haven1 is the REKT-resistant EVM Layer 1 blockchain, engineered to address the critical challenges of security and liquidity in Web3. Through innovative solutions like the Haven1 Passport (POI), 2FA Wallet-Shield, AI-powered network monitoring, and a robust liquidity aggregation system, Haven1 is building a ‘SafeHaven’ ecosystem for everything onchain in Web3. Users can connect, follow and engage with Haven1 on: X (formerly Twitter) | Telegram | Discord | Reddit | LinkedIn | Facebook | Instagram | YouTube For more information, users can visit www.haven1.org Contact Haven1 Haven1 marketing@haven1.org This story was distributed as a release by Chainwire under HackerNoon’s Business Blogging Program. Learn more about the program here. **ZUG, Switzerland, August 8th, 2024, Chainwire/-**Haven1, t he REKT-Resistant EVM L1 blockchain, and Amazon Web Services (AWS) today announced a strategic partnership, with AWS working with a verified, infrastructure partner to become one of the seven initial validators of the Haven1 Proof-of-Authority blockchain. It’s a move that underscores alignment to security, innovation and the broader adoption of Web3. t Haven1’s Proof-of-Authority blockchain validator network will consist of only the best, most reputable global partners as validators, playing a crucial role in maintaining the network’s integrity. This partnership with AWS, the world’s most comprehensive and broadly adopted cloud solution, marks a significant milestone underscoring AWS’s alignment with Haven1. As Haven1 deploys security and auto-scaling strategies, the network aims to utilize best-in-class AWS cloud services, including AWS Graviton2 processors that are custom-built to deliver the best price performance for cloud workloads, AWS Secrets Manager, Amazon Config, Amazon GuardDuty and AWS Key Management Service (KMS), to build an EVM Layer-1 blockchain ‘safe haven’ ecosystem that is architected to satisfy stringent security requirements, enabling Haven1 to focus on innovation. “Haven1 blockchain needed a scalable and durable infrastructure to power innovation within the Web3 ecosystem,” said Gianluca Ortolani, CTO of Haven1. “Haven1 blockchain needed a scalable and durable infrastructure to power innovation within the Web3 ecosystem,” said Gianluca Ortolani, CTO of Haven1. “We’ve engineered a ‘safe haven’ network with the least number of attack vectors in Web3. This is enhanced by AI-optimized anomaly detection, a set of network guardians, and other proprietary tech built onto the network to fortify the chain, such as transaction level two-factor authentication, and a one-of-a-kind reserve fund, secured through Bitcoin restakers. By building on AWS, we are reinforcing our mission to provide secure on-chain solutions for businesses and individuals, creating the foundation for a more trustworthy Web3 future.” “We’ve engineered a ‘safe haven’ network with the least number of attack vectors in Web3. This is enhanced by AI-optimized anomaly detection, a set of network guardians, and other proprietary tech built onto the network to fortify the chain, such as transaction level two-factor authentication, and a one-of-a-kind reserve fund, secured through Bitcoin restakers. By building on AWS, we are reinforcing our mission to provide secure on-chain solutions for businesses and individuals, creating the foundation for a more trustworthy Web3 future.” Haven1’s unwavering focus on security, liquidity, and decentralized governance (where H1 token holders play a significant role) positions Haven1 as a leader in providing robust and innovative Web3 solutions, fostering a reliable environment for on-chain activities. The network utilizes a careful selection of reputable, publicly-known validators, to ensure a high level of trust within the system. About Haven1 Haven1 is the REKT-resistant EVM Layer 1 blockchain, engineered to address the critical challenges of security and liquidity in Web3. Through innovative solutions like the Haven1 Passport (POI), 2FA Wallet-Shield, AI-powered network monitoring, and a robust liquidity aggregation system, Haven1 is building a ‘SafeHaven’ ecosystem for everything onchain in Web3. Users can connect, follow and engage with Haven1 on: Haven1 Haven1 X (formerly Twitter) | Telegram | Discord | Reddit | LinkedIn | Facebook | Instagram | YouTube X (formerly Twitter) X (formerly Twitter) Telegram Telegram Discord Discord Reddit Reddit LinkedIn LinkedIn Facebook Facebook Instagram Instagram YouTube YouTube For more information, users can visit www.haven1.org www.haven1.org www.haven1.org Contact Haven1 Haven1 marketing@haven1.org This story was distributed as a release by Chainwire under HackerNoon’s Business Blogging Program. Learn more about the program here. This story was distributed as a release by Chainwire under HackerNoon’s Business Blogging Program. Learn more about the program here . here here

Haven1 And Amazon Web Services (AWS) Announce Partnership For Node Validator

Haven1 এবং Amazon Web Services (AWS) নোড ভ্যালিডেটরের জন্য অংশীদারিত্ব ঘোষণা করেছে

Haven1 und Amazon Web Services (AWS) geben Partnerschaft für Node Validator bekannt

Haven1 y Amazon Web Services (AWS) anuncian una asociación para el validador de nodos

Haven1 et Amazon Web Services (AWS) annoncent un partenariat pour Node Validator

हेवन1 और अमेज़न वेब सर्विसेज (AWS) ने नोड वैलिडेटर के लिए साझेदारी की घोषणा की

Haven1 と Amazon Web Services (AWS) がノード検証のための提携を発表

Haven1과 Amazon Web Services(AWS)가 노드 검증기를 위한 파트너십 발표

Haven1 e Amazon Web Services (AWS) anunciam parceria para Node Validator

Haven1 и Amazon Web Services (AWS) объявляют о партнерстве в области валидатора узлов

Haven1 ve Amazon Web Services (AWS), Node Validator İçin Ortaklık Duyurdu

Haven1 và Amazon Web Services (AWS) công bố quan hệ đối tác cho trình xác thực nút

Haven1 与亚马逊网络服务 (AWS) 宣布建立节点验证器合作伙伴关系

In an exhilarating development for the decentralized finance (DeFi) community, LendFi announces the launch of its innovative app, now available for download on both the iOS Store and Google PlayStore. This groundbreaking app introduces a suite of utility features designed to enhance user experience and financial empowerment. Among these are staking, peer-to-peer (P2P) lending, swaps, integration with GameFi and non-fungible tokens (NFTs), and the pioneering use of artificial intelligence (AI). cryptocurrency A New Era of Financial Tools LendFi's app brings to the forefront a collection of services that redefine the way users interact with digital assets. The staking feature allows LendFi token holders to earn rewards by participating in network security, while the P2P lending platform offers a streamlined, intermediary-free borrowing and lending experience. The swap functionality facilitates easy and efficient token exchanges, and the GameFi integration opens up new avenues for earning through play. Additionally, the NFT marketplace leverages AI to tailor loan offers and valuations, ensuring a personalized and risk-adjusted experience for all participants. Exciting Opportunities: Private Sale and IDO In tandem with the app launch, LendFi is excited to announce its Initial DEX Offering (IDO). The private sale round one generated buzz within the DeFi community, raising $600,000 within a few hours of launch. LendFi is set to launch the round 2 of the private sale on March 30th and it's attractively priced at $0.2. Thereby offering investors the opportunity to purchase the token at a very affordable price. This will be followed by the IDO, where tokens will be available at $0.4, providing an excellent opportunity for early adopters to participate in the project's growth. In anticipation of these events, LendFi also hints at an upcoming listing on Centralized Exchanges (CEX), promising broader access and liquidity for its users. Strategic Partnerships and Future Plans LendFi's commitment to security, innovation, and growth is underscored by its strategic partnerships with industry leaders such as Certik, Hela_Labs, and Socrates. These collaborations not only enhance the platform's security posture but also bring a wealth of knowledge and resources to support LendFi's ambitious roadmap. Additionally, the recent listing on Coingecko marks a significant milestone, increasing the project's visibility and credibility within the cryptocurrency ecosystem. Over the next 12 months, LendFi is poised for aggressive expansion. With secured investments and a clear strategy, the platform aims to dominate the DeFi protocols space. Key to this strategy is the planned listing on all top-tier exchanges, further enhancing LendFi's accessibility and appeal to a global audience. In summary, LendFi's app launch marks a significant leap forward in the DeFi space, bringing an array of innovative financial tools to the fingertips of users worldwide. With its private and IDO sales underway and plans for substantial growth, LendFi is a beacon for those looking to navigate the promising yet complex waters of decentralized finance. To Learn More About LendFi | | Website Twitter Whitepaper This story was distributed as a release by BTCWire under HackerNoon’s Business Blogging Program. Learn more about the program here: https://business.hackernoon.com/

LendFi Revolutionizes DeFi Landscape with Comprehensive App Launch

LendFi ব্যাপক অ্যাপ লঞ্চের মাধ্যমে DeFi ল্যান্ডস্কেপকে বিপ্লব করে

LendFi revolutioniert die DeFi-Landschaft mit umfassender App-Einführung

LendFi revoluciona el panorama DeFi con el lanzamiento integral de una aplicación

LendFi révolutionne le paysage DeFi avec le lancement complet d'une application

व्यापक ऐप लॉन्च के साथ लेंडफाई ने डेफी लैंडस्केप में क्रांति ला दी

LendFi、包括的なアプリのリリースで DeFi 環境に革命を起こす

LendFi는 포괄적인 앱 출시로 DeFi 환경을 혁신합니다.

LendFi revoluciona o cenário DeFi com lançamento abrangente de aplicativos

LendFi революционизирует ландшафт DeFi с помощью комплексного запуска приложений

LendFi, Kapsamlı Uygulama Lansmanı ile DeFi Ortamında Devrim Yaratıyor

LendFi cách mạng hóa bối cảnh DeFi với việc ra mắt ứng dụng toàn diện

LendFi 通过全面的应用程序发布彻底改变 DeFi 格局

The has given a big boom in the era of the advent of the Internet. With the advent of , people massively using email began to think about greater security on the network and look for alternative solutions. development of email services Web3 Today, in our interview, I will tell you about the team that launched the Web3 DeMail Service from the initial idea to the full implementation of a working solution that will help solve current problems in existing email services and answer why people are moving to Web3. We will talk with the Team Lead and Project Owner, Nikita Tkach, and the main team members. The following interview has been edited for brevity and clarity. Editor’s Note: Let's start with the first question. Can you tell our readers about Qamon and how it differs from traditional email services? Oh, there are a lot of differences. It starts with the fundamental work principle. Qamon is basically a backed-less service. That means that we don’t have any kind of intermediary servers. We use blockchain itself, where one user sends a transaction to another user, where the payload of this transaction is email content itself (or the file).  So, the blockchain serves as the difference: No intermediary servers = 0 risk for privacy. Who knows what happens on the back-end side when the mail travels from one user to another? I think it's self-explanatory here. We use a distributed file system (IPFS) to store files (attachments). It’s censorship-resistant and redundant to attacks. Decentralized Availability: With IPFS, your content will be available through a network of nodes that store copies of that content. If one site becomes unavailable, users can still access content through other sites. This improves the overall availability of content even under failure conditions. No central point of failure: Since IPFS does not depend on a centralized infrastructure, the risk of losing access to your content due to service outages or shutdowns is greatly reduced. Your content will remain available even if specific nodes or a dead service are down. Well, first of all, Qamon doesn’t have any intermediary servers, which classy mails have. Why do we need to migrate from traditional emails? Moving from traditional email to services like Qamon removes the limitations of traditional email systems. Traditional emails are subject to privacy breaches, hacks, and centralized points of failure. Using blockchain technology and a decentralized infrastructure, Qamon brings privacy and security risks to 0, ensures uninterrupted communication with less risk of data leaks associated with centralized servers, and provides a more reliable email ecosystem. Moving from traditional email to services like Qamon removes the limitations of traditional email systems. Traditional emails are subject to privacy breaches, hacks, and centralized points of failure. Using blockchain technology and a decentralized infrastructure, Qamon brings privacy and security risks to 0, ensures uninterrupted communication with less risk of data leaks associated with centralized servers, and provides a more reliable email ecosystem. Could you tell us about your previous experience? What has your team achieved so far? Nice to hear! Having your application on multiple platforms along with a functional web service provides users with many options to access and use your decentralized email service. Offering an application that is compatible with macOS, iOS, iPadOS, and Android and also has a separate fully functional web service, users can interact with your platform on different devices and operating systems. What inspired the team to create a decentralized mail service based on the Everscale blockchain? The motivation for creating Qamon is related to the desire to eliminate the shortcomings of traditional mail services. The use of blockchain and a serverless approach can provide increased privacy, security, and availability for email communication. Decentralization is in line with the broader trend towards that emphasize user empowerment, privacy, and data ownership with the same set of features and conveniences that are available to businesses and customers. Web3 technologies How does Qamon use Everscale's decentralized infrastructure to enhance email security and privacy? The details will depend on the specific implementation of Qamon, but in general, the decentralized nature of the Everscale blockchain can contribute to email security and privacy by: Reduced dependency on centralized servers vulnerable to attack Enable end-to-end encrypted communication between users Zeroing the risk of exposing sensitive data during transmission Using blockchain immutability to maintain a tamper-proof record of transactions. How do you prevent censorship or surveillance in Qamon? Decentralization and detection technology to detect censorship and surveillance in Qamon. The transmission of emails over a distributed network in encrypted form makes it impossible for a single entity to control or censor communication. Encryption and the distributed nature of the system are raised to maximize user privacy, making surveillance difficult. How does Qamon deal with scalability and potential network congestion issues in a decentralized environment? We just use the most scalable blockchains as transport for our emails =). Those are Venom and Everscale. I’m 100% sure that this kind of retail service (which fully relies on the blockchain as a backend). How Qamon protect users from spam, phishing, and other email attacks? In the Qamon ecosystem, there is no shared address database susceptible to spam. Instead, the blockchain acts as a decentralized and immutable ledger that records email transactions. Each email transmission involves a cost, adding a layer of financial disincentive for sending unsolicited or malicious messages. This cost requirement significantly hinders spammers' ability to flood the network with unwanted content. Are there any special encryption or authentication protocols used by Qamon to improve security? Could you tell us more about it? Qamon's sophisticated security framework employs a combination of asymmetric and symmetric encryption (utilizing the chacha20Poly1305 algorithm), blockchain-based storage, recipient key exchange, and cryptographic signatures, establishing a comprehensive email security system that guarantees confidentiality, authenticity, integrity, and non-repudiation, all underpinned by meticulous implementation, vigilant key management, and ongoing threat surveillance. Do you have some integrations with other Web3 Apps/dApps? Of course, in addition to the security measures mentioned earlier, Qamon offers support for the ylide protocol. This protocol currently allows users to receive and decrypt messages if they previously used it as part of our service. Looking ahead, we have ambitious plans for full protocol integration, which will cover both sending messages and expanding support for EVM (Ethereum Virtual Machine) and TVM networks, reflecting our desire to improve the security and ease of communication in decentralized ecosystems. Can you discuss the user interface and accessibility aspects of Qamon? Is it compatible with existing centralized email clients? The user interface and accessibility of Qamon are driven by our design philosophy, prioritizing user-friendly familiarity akin to traditional email clients while seamlessly incorporating blockchain functionalities. In the upcoming quarter, we're set to embark on a journey to bridge the gap between . This will empower users to have human-readable addresses, much like popular email services, enabling them to send messages from centralized platforms and receive them within Qamon, thereby enhancing interoperability and convenience. Web2 and Web3 Are there any plans to expand Qamon's features or integrate with other decentralized platforms in the future? Qamon's future trajectory hinges on our development roadmap and visionary goals. This encompasses potential integration with further decentralized platforms, the expansion of functionalities, and forging collaborations with additional services. Our current integration with the ylide protocol is just the tip of the iceberg; we have even more ambitious plans in this realm, driven by our commitment to pushing the boundaries of secure and decentralized communication. Let's discuss the future. What is your vision for further mail services? Will it also be in demand in the future? Email services, especially those that offer enhanced privacy, security, and data ownership through decentralization, are likely to remain relevant in the future. As users become more conscious of their digital footprint and data privacy, demand for secure and censorship-resistant communication platforms could continue to grow. Will the government also use services like Qamon? What do you think? Undoubtedly, government entities stand to derive substantial benefits from embracing services akin to Qamon. The potential utility of such platforms extends to enhancing the security, efficiency, and reliability of governmental communications. We are, in fact, already in the midst of a pioneering phase, actively subjecting Qamon to rigorous testing within the administrative frameworks of select nations. The outcomes of these ongoing trials stand to offer tangible insights into the viability and adaptability of Qamon within governmental contexts. What else could you tell our readers? I'd like to emphasize that Qamon's unique approach to email services highlights the ongoing innovation in the tech industry. The use of blockchain, decentralization, and cryptography opens up new possibilities for enhancing digital communication security and privacy. As you explore these advancements, remember that the success and adoption of platforms like Qamon depend on a balance between innovation and practicality, ensuring that technology truly meets users' needs while safeguarding their digital lives. About the Qamon Team is an experienced IT professional with seven years of experience in Web3 since 2021. Responsible for the development of the entire project, has four years of experience as a team leader, and since 2023 as a project manager. Nikita's expertise notes the choice of technologies, the structure of the platform, and the development of the main application modules. Nikita Tkach is an experienced IT specialist with ten years of development experience, has a master's degree, and also has experience in managing teams and business processes. Ruslan advised on the development of the Qamon backend (ipfs) and architectural solutions. Ruslan Galimov With six years of experience, is a skilled front-end developer. He's primarily known for his work on the web component of the Qamon application, making user interfaces smooth and intuitive. He's also been involved in integrating blockchain technology, adding advanced security features to Qamon's capabilities. Ivan Vasiliev is an experienced Flutter developer with over four years of experience specializing in blockchain integration. It excels in the development of decentralized applications, providing a user-friendly experience. In addition to Flutter, Vadim also acts as a universal server developer, demonstrating a holistic understanding of the project from idea to implementation. His dedication and diverse skill set make him a valuable asset to our team. Vadim Reznichenko About Qamon DeMail Service is an encrypted, decentralized email service built on the Everscale blockchain. It provides an interface and email experience that is familiar to most users. Qamon Qamon email messages are end-to-end encrypted. That means that no one but the recipient can read the content of sent messages. Each message is encrypted one-way for the end user, and no one else has the key to decrypt it except for the recipient. A cipher is created on the sender’s device, and all messages enter the network already encrypted. Only the receiver can decrypt them. That’s the beauty of cryptography: centralized servers and companies do not have access or any backdoors to content. Qamon’s main mission is to provide strong end-to-end encryption and confidential communication for everyone. It also has several advantages over the existing solutions on the market. Source: https://blog.everscale.network/products/qamon-private-email-service-powered-by-everscale I hope you liked this interview. Write comments, share, and like it! If you have any questions or if you need help — you can write me on or . Twitter Linkedin

Interview: How to Launch a DeMail Service and Ensure Secure Communication for the Future of Email

The old-school phone whistling is back! Well, almost, but this audio below isn’t that far off. https://securityinnovation.hubs.vidyard.com/watch/5b3Yk8ga9noiqKJ2rTNnSS?embedable=true On July 13th, we discovered an interesting vulnerability. A particular webpage was tracking digital radio chatter and it would display a running log of what its station was hearing. This is a handy tool if you’re into this sort of thing; after all, it’s great to know if your calls are being heard or if there are ongoing conversations that you might want to join. This tool captured whatever it was hearing and inserted it into the webpage. Send a message and a few seconds later it would show up there. If the message included HTML, well that would end up on the webpage too. Classic HTML Injection. To deliver an attack like this, you don’t really need the internet at all -you just need a long piece of wire. In our Attacks Over the Air series, in February 2023, we discussed the wireless issues presented by a basketball scoreboard with a controller that operates at 913 MHz. In this post, we’ll move way, way down in frequency, down into the shortwave radio band. This attack works at 7.078 and 14.078 MHz. So how does this work? published There are many interesting digital signals down here, and JS8 is one of them. JS8 is a popular keyboard-to-keyboard chatting tool for amateur radio. It absolutely excels at enabling direct conversations over long distances and through very poor link conditions. JS8 is itself based on FT8, an extremely popular tool for making simple contacts between stations that can hear each other. Night and day, FT8 and JS8 are continually in use. barely Several weird things happen to signals down in the shortwave band. It’s such a low frequency that at 100 miles above us, the E and F layers of Earth’s ionosphere begin to reflect the radio signal back down to the ground again. The signals bounce between the Earth and the ground several times, like skipping a stone off water. It allows us to hear commercial AM stations on the other side of the planet at night. During the day, this bounce works at higher frequencies too, enabling communication over vast distances. My backyard transmitter and the website’s station are 674 miles apart. One bounce covers that distance easily. JS8 messages are constructed in ASCII text, all uppercase characters. Most messages are sent to wide groups, such as Skywarn, JS8Chess, or, to reference everyone, simply ALLCALL. Following this, the message can be just about anything. First we build out HTML payload in the editor. We must legally provide our amateur radio callsign for identification (a step that will be ignored by a real attacker) and in the end our final message looks like this: So how do you attack a website with a shortwave signal? We are now ready to transmit. The JS8 software converts this text to binary, adds forward error correction, and modulates the result using Gaussian Frequency Shift Keying, (GFSK). The final product audibly sounds like strange whistling noises. If we open the sound using Audacity, and open a spectrogram, it looks like this: KJ7YLS: @TEST  <DIV STYLE="WIDTH: 500PX;HEIGHT:100PX;COLOR:RED;">HTML INJECTION!</DIV> Taking a closer look, you can see the GFSK modulation slowly transitioning from one frequency to another. It also holds at each frequency for a specific length of time. There are eight different frequencies in use here and thus each symbol has eight distinct states. As a result, each symbol can carry three bits at a time. This is illustrated with some labels: We can then send the whistling noise into the microphone of a radio transmitter. Like most amateur and military signals, the audio is delivered using upper-sideband modulation, which is a section of an AM broadcast type of signal. JS8 messages are standardized at several frequencies, and our target listens at 7.078 MHz and 14.078 MHz. We tune the radio to either frequency and send the audio using 20 watts of power into a 16-AWG wire about 30 feet in the air. The signal radiates out into the air, bounces off the ionosphere, and their antenna receives it. Their JS8 software reverses the process and pulls out the ASCII message. It’s at this point that we see the problem. The website (link withheld in this article out of respect to its author) logs JS8 traffic. Under the hood, it’s powered by , a useful Python tool that talks directly to the API of the JS8 software. In the repository, the script grabs the JS8 messages and places them on the website. At time of writing, it contains the following lines of code at line 859: JS8Net monitor.py # Text
j['text']=j['stuff']['params']['TEXT']
key=str(j['stuff']['time'])
j['id']=':'.join([fmcall,tocall,key,str(j['freq'])])
traffic[key]=json.dumps(j) is the ASCII JS8 message pulled from , which pulls from the API of the JS8 software. After this step, the text in is placed onto the page using Javascript. These steps are fine. The issue occurs in the change in context because there is an assumption that the JS8 traffic, already fully processed by the JS8 software, is ready to go and will not affect the context of the webpage. This is the behavior that we can then exploit. j['stuff']['params']['TEXT'] collector.py traffic[key] From start to finish, our attack looks like this: https://securityinnovation.hubs.vidyard.com/watch/dEaxwfcKAopxUVnVeMQtbf?embedable=true A few minutes later, our message is logged on the website... The end result is mostly cosmetic. This is a public page, so there’s no session cookies to steal or controls to spoof. Stored XSS is a real possibility too, but after a frustrating morning sending many, many time-consuming payloads (each JS8 message takes several minutes to send) we couldn’t get working Javascript that would execute on the page. I suspect that the JS8net software accidentally blocked many of the key characters and words and our workarounds didn’t seem to fire. Nevertheless, Burp Suite came in handy here. The ionosphere was cooperative that particular day and bouncing signals pretty well. I knew from other tools that stations in other countries were hearing JS8 traffic from the U.S.. So my next payload was This URL points to a DNS and HTTP listener run by Burp Suite’s Collaborator tool, which we often use during penetration tests for finding out-of-band information leaks. This was no different. Within a few minutes, DNS and HTTP traffic was recorded by the Collaborator Server from users visiting the page in Chile. I also viewed the page to inspect the injection and was logged as well. KJ7YLS: @ALLCALL <img src="http://727k2w1hfoamqewpm7rpiocu0l6cu2ir.oastify.com" alt="@HB DN13"> This was about as far as I wanted to ethically go with the injection. I reported the issue to the website’s owner, Jeff, with suggestions on remediation. He got back to me the next day, saying: While I waited for the patch to go live, I reflected on a few lines from the JS8Net README: I work in security myself (I do R&D for a network security company in the Bay Area), but I'll have to admit that submitting JS via radio to hack a web site was totally off my radar. It's important to note that this part of the software is still very much in the development stage, and may have critical vulnerabilities that make exposing the exposed services to the open Internet a Very Bad Idea. While it certainly will work, it's intended for protected, internal LAN use at this time. Honestly this is an excellent warning in general, especially for projects that are in progress and have not been thoroughly tested. Vulnerabilities at this point are an “unknown unknown” but the author was primarily thinking about the exposed listeners and APIs in his software. However, we exploited a slightly different type of problem. The README warns that the service should be run inside a LAN and this would indeed protect others from HTML injections and defilement of the webpage. However, a payload with Collaborator payloads would leak the public IP address of anyone viewing the page within their private LAN as well, so that’s a little harder to address. In short, this is a radio signal attacking a webpage on the Internet. An attacker doesn’t need to fool around with VPNs, Tor, or botnets to try to hide their identity on the Internet. JS8 is so effective at extracting messages -24dB below the noise floor (the whistling literally cannot be audibly heard at this level) that very little power is needed to reach distant stations. One watt of transmission power, on good ionospheric conditions, can go coast-to-coast across the U.S.. An attacker could be anywhere in the world. A burst message is all that is needed, so direction-finding would also be difficult. I think that’s about as close to untraceable as you can get with something like this. Timeline: July 13: discovered the issue, reported to Jeff, applied to MITRE for a CVE July 14: Jeff responds. July 22: Jeff applies a patch to JS8Net on Github. July 25: The patch goes live on the website. Aug 18: the blog post is published.

Attacks Over The Air — Phreaking HTML Injection

বাতাসে আক্রমণ - এইচটিএমএল ইনজেকশন

Angriffe über Funk – Phreaking-HTML-Injection

Ataques por aire: inyección de Phreaking HTML

Attaques en direct — Phreaking HTML Injection

हवा से हमले - भयभीत करने वाला HTML इंजेक्शन

無線攻撃 - 異常な HTML インジェクション

공중파 공격 - HTML 인젝션을 위협하다

Ataques Over The Air — Phreaking HTML Injection

Havadan Saldırılar — Phreaking HTML Enjeksiyonu

Tấn công qua mạng — Phreaking HTML injection

空中攻击 — Phreaking HTML 注入

Welcome to HackerNoon’s interview series. This section is curated by our Editorial team to spotlight bold and disruptive startups across the globe. If you’ve been nominated, and answer these questions Startups-Of-The-Year create a brand profile here. Hey, HackerNoon community! has been nominated in HackerNoon's annual Startup of the Year awards in Tel-Aviv, Israel. Please vote for us here: . Atmosec https://hackernoon.com/startups/asia/asia-tel-aviv-israel Read more about us below to understand why we deserve your vote. Meet Atmosec, We Secure Hyperconnected SAAS Ecosystems as They Evolve. Our platform focuses on the connectivity between SaaS apps, alerting based on the behavior between apps and stopping potential malicious bilateral movement, enabling CISOs and CIOs to manage and secure all 3rd parties leveraged within the organization. The platform helps organizations understand what are all the services they are using (including Shadow SaaS), what access each user has and to which service, what data might be stored, and shared from each service, and more. My Role I’m Misha, Co-founder and CTO. I’m dedicated to the company’s vision of helping businesses secure the adoption, usage, and management of any business application across their organization. as I took the virtual stage at David Spark's CISO Series show, where we discussed SaaS Security. Step into my cyber lair All Enterprises Have a Big SaaS Problem A novel category of security measures has emerged, known as SaaS security, as organizations increasingly adopt Software as a Service (SaaS) solutions to meet their business needs. SaaS Security represents a pivotal milestone in the industry, filling a critical gap in cybersecurity strategies and reflecting the ongoing evolution of technology and the ever-changing threat landscape. Our innovative approach offers a comprehensive and , providing a centralized view of all the different entities of a SaaS ecosystem: Users, Services, Connections, and Data, and our platform encompasses three key pillars: holistic look at an organization’s SaaS Ecosystem - Automatically discover all new connected services, who uses them, and the behavior between them, with a contextual analysis of actual and potential usage, frequency, and data access. Visibility and Discovery - Continuous machine learning with baseline analysis identifies anomalies based on behavior, not just configurations. Ecosystem Protection - Prevent attacks by automating SaaS security hygiene and other mundane tasks. Prevention and Automation Unleashing SaaS Security Innovation With Atmosec The thoroughly understands the behavior of each SaaS and its integrations and focuses not only on individual services or specific users. Atmosec team Atmosec expands the focus to also understand how different services communicate with each other, and how users interact as well as what data is flowing inside the ecosystem. We’re a mix of humble but innovative tinkerers, collaborating on tackling a problem that’s growing just as fast as companies do and spending our days developing complex technical solutions with the fun of Tel Aviv’s vibrant atmosphere at our doorstep. Vote for us today!: https://hackernoon.com/startups/asia/asia-tel-aviv-israel

Securing SaaS Ecosystems: Atmosec's Quest for HackerNoon's Crown

This template is inspired by a brand story . The (creepy! :D) featured image for this template is AI-generated. Please replace this image with your team’s group photo! You may skip any question and add more info if you like! Meet Lisk What Is CoinZoom? CoinZoom is a global, blockchain-enabled ‘self-banking’ platform that gives everyone access to a range of secure, low-cost financial products that offer rewards in crypto. Our platform is built on decades of trading experience with an abundance of operational integrity and is fully registered in the US. It is the easiest way to start your crypto journey for free by doing the things you do every day – spend, send, and invest money - only faster, cheaper, and without the normal hassle. Meet CoinZoom’s Team Todd Crosland – Founder & CEO Todd founded CoinZoom in 2018 and assembled a world-class team that brought decades of financial trading and regulatory experience to the growing digital currency marketplace. Before getting involved in crypto, Todd was the Founder and CEO of Interbank FX, a Futures Commission Merchant and Retail Foreign Exchange Dealer registered with the U.S. Commodities Futures Trading Commission. IBFX was a worldwide leader in retail forex trading services. IBFX saw global customers grow to over 250,000, in more than 140 countries, and annual trading volume reached $750 billion. At CoinZoom, Todd has brought all the security, innovation, and trading ingenuity to the blockchain-enabled digital asset environment. Ben Crosland – Co-founder & Director of Business Development Ben has been vital in the strategic growth of CoinZoom including onboarding several large institutional customers and strategic partnerships across finance, commerce, culture, and sports like the Utah Jazz NBA team. Prior to CoinZoom, Ben worked at Sultan Ventures, a boutique venture capital firm based in Honolulu Hawaii, focusing on early-stage startups and investments. Ben has also had international venture capital experience working for 21212 Digital Accelerator in Rio de Janeiro, Brazil. Paxton Powers – Chief Technology Officer Paxton leads CoinZoom’s global technology team, which builds, maintains, and innovates CoinZoom’s high transaction, low latency infrastructure. Paxton’s daily decisions, planning, and execution have enabled billions of dollars in transactions. [FN1] [AB2] He has a wealth of experience in fostering partnerships across development, collaboration, and integration initiatives – and has successfully launched products for trading, remittances, digital collectibles, and secure storage. Before CoinZoom, Paxton was a Senior Director of Cloud Operations at Accela, a government software provider, and was CIO at Interbank FX, where he worked with Todd. Jason Vance – Chief Information Security Officer Jason oversees all aspects of security and operations at CoinZoom. This includes creating and executing information security policies while remaining compliant with U.S. and International laws and regulations, planning risk assessments, and developing risk management strategies. His role is also pivotal to other parts of the business, as he formulates data recovery and business continuity plans while giving security to each other senior leaders in the company. He oversaw an impressive SOC accreditation in under three months. Before CoinZoom, Jason worked at a multitude of firms in senior leadership roles across a broad range of Information Systems and Security. Marcelo Martins – Director of Product Design As Director of Product Design, Marcelo is responsible for CoinZoom’s leading UX strategy, carving out its signature style within the crowded fintech and crypto world. Most recently, Marcelo led the research, design, and delivery of CoinZoom’s NFT marketplace, whilst aiding with back-end integration to ensure a seamless and attractive customer experience. Before CoinZoom, Marcelo was Product Design Director at Global Payments Inc and Head of User Experience at Merrick Bank. Fiona Naughton – Chief Marketing Officer Fiona leads CoinZoom’s marketing strategy and execution – working to grow the reach of CoinZoom’s emergent brand and products to B2B and B2C audiences worldwide. This involves not only educating consumers and partners about the benefit of blockchain-enabled technologies but also working on programs to showcase the pioneering areas of the cultural relevance of crypto and digital collectibles across gaming, entertainment, fashion, and leisure. Before CoinZoom, Fiona held a number of high-level marketing roles at global brands including Robinhood, Meta, PayPal, Venmo, and HTC. CoinZoom’s Vision & Goals We want to make crypto accessible to everyone. Blockchain technologies have the potential to revolutionize the financial industry, by enabling access to fairer markets, providing broader wealth creation, and helping achieve financial well-being for millions of people across the world. For many who have been on the sidelines of traditional financial services, cryptocurrencies represent a path not solely to get rich, but to tackle being poor – and many of the most troubled economies and regions in the world have been able to stabilize with sensible implementation of crypto-based services. The sooner we stop talking about crypto as just an investment asset via a Bitcoin market price to help you get rich and focus on the potential of blockchain technology - the quicker everyday people will relate to crypto's ability to tackle real-world problems like exorbitant fees, unnecessary delays, and conscious bias in access to financial services. CoinZoom’s Founding Story Traders at heart, and with a successful Forex Trading business under their belts, Todd, CoinZoom CEO and Founder, along with Co-Founder, Ben, had the foresight to see that the next frontier for Web3 would be blockchain technologies that enable the crypto market. Using the same principles and experience gained running their Forex business, IBFX, they “got the band back together” to bring CoinZoom to life. To earn the trust and confidence that every long-standing financial business needs, CoinZoom is built as a compliance and regulation-first company. The team ensured all the proper licenses were in place before launching in 2020 and have since been following all the relevant guidelines and regulations, ensuring the company is run in a compliant manner with customer security and trust at the forefront. The founding team collectively has decades of experience building trading platforms in both the commodities and FX space. Building the CoinZoom exchange wasn’t their first rodeo, and despite this being on new blockchain technologies, quickly an array of consumer-first products were in development for spending, sending, and investing money. CoinZoom’s Products/Services As part of our commitment to offering the complete crypto experience, CoinZoom has a multitude of products that make it easy for individuals and businesses alike to gain access to cryptocurrencies and self-banking tools to reap the reward of this exciting technology. CoinZoom App and Pro App Housed within the CoinZoom app, CoinZoom’s products are built to provide the underbanked broader access to financial tools by harnessing the power of blockchain technology. ZoomMe, CoinZoom’s free peer-to-peer remittance service, allows users to send money domestically or internationally for free, disrupting an industry that charges 6% fees on average globally, which is a total revenue of over $40bn at a market value of $672.46bn in 2021 (World Bank). Utilizing blockchain technology, the CoinZoom team built this product to move user funds instantly and for free, putting the money charged in fees back in the pockets of those who need it most. Users have access to earning 1-5% back in crypto back when they do their everyday spending with the CoinZoom Visa debit card, or by purchasing eGift Cards from a variety of brands through the CoinZoom app and earning 1% back in Bitcoin back, providing an easy way to start a crypto journey for free. CoinZoom is much more than just an exchange – users get a free bank account the moment they sign up, with access to a multitude of products that empower them to manage their finances the way that works best for them. This is an easy on-ramp for crypto by just doing all the things everyone does for crypto rewards – so you can learn about crypto in your own time, without ever having to commit any of your own funds to it. The CoinZoom app makes it simple for you to invest in crypto no matter where you are. Buy, sell, and trade on the go, or send money and crypto for free to your friends and family anywhere in the world with a touch of a button. For our more sophisticated investors and traders, the CoinZoomPro App gives you over 100 Technical Indicators, a detailed order book, a detailed depth chart view, multiple order types, and a one-click feature to earn interest on your crypto. Having a platform designed by traders for traders means that all the tools and intelligence are already built-in. CoinZoom Cash Deposit cash into your CoinZoom account at the register of your local retailers in under 10 Seconds. Customers go to the cashier and give them up to $500 – $999 (depending on the retailer) in cash, the cashier then scans the barcode on the app, and the customer’s money is instantly deposited without expensive network fees or a 10 – 50-minute delay that is typical with a Bitcoin ATM. They can use those deposits for free remittances, investing in over 40 cryptocurrencies, or to fund purchases on their CoinZoom Visa card. CoinZoom VISA Card We’ve made spending crypto easier than ever with our selection of cryptocurrency debit cards that allow you to spend over 40 of the top cryptocurrencies at over 53M merchants worldwide. Select USD, Bitcoin, or any other currency in your spend wallet on our app, swipe your card, and we instantly convert your crypto to USD at the point of sale. Every time you swipe your card, you’ll earn 1-5% back in ZOOM, our native token, based on what card you hold. Earning crypto rewards on your everyday spending has never been so easy. CoinZoom Commerce CoinZoom Commerce is our global pay-in, pay-out solution for multi-national companies, allowing you to instantly pay suppliers, customers, employees, and distributors with Fiat or Crypto for free. We make it easy for your business to accept USD, Bitcoin, and over 40 cryptocurrencies as payments, promoting the everyday use of cryptocurrencies further and pushing easier on-ramps for businesses. What’s Most Exciting About Your Traction to Date? At CoinZoom, we pride ourselves on the trust we foster from our community that the security of their funds and personal information is our top priority. This is evident through our SOC2 Type 2 accreditation, which came only 3 months after our type 1. The successful Type II audit confirms that our “best in class” security systems are operating effectively over time to protect our customers’ data. In November 2022, when FTX collapsed and multiple other high-profile crypto platforms were affected, and people were engaging in a “flight to safety” for their crypto funds, we experienced our best-performing month in terms of deposits that year. This vote of confidence from crypto aficionados has continued throughout the Bitcoin rally of recent weeks. CoinZoom is utilizing blockchain technology’s natural advantage for remittances. The International remittance industry charges 6% fees on average globally - which is a total revenue of over $40bn at a market value of $672.46bn in 2021 (World Bank). That revenue exceeds the total GDP of more than 90 countries across the globe. Blockchain can enable digital transfers to be instant, low cost, and direct – no cash pick-up, no 3-day to a week delay, and no eye-watering fees. ZoomMe has gathered pace and saw growth of 746% over the second half of 2022 as more and more people discovered the service. Please Share a Bit About Your Financials. Do You Have Any Investment or Revenue Data You’d Like to Publish? -740% growth in CoinZoom Visa Debit cards since last November. -506% growth in funds sent via ZoomMe over the past 6 months. -616% growth in funds withdrawn to CoinZoom Instant in the past 6 months. -93% of support chats responded to within 30 seconds over the last 6 months. -98% of Customer Support Tickets responded to within 15 minutes during the last 6 months. About CoinZoom’s Community Website: https://www.coinzoom.com LinkedIn: https://www.linkedin.com/company/coinzoomhq/ Twitter: https://twitter.com/GetCoinZoom YouTube: https://www.youtube.com/@coinzoomofficial Instagram: https://www.instagram.com/coinzoom/ Facebook: https://www.facebook.com/CoinZoom/ The Future of CoinZoom As CoinZoom continues to develop and grow, our goals remain unchanged. We will continue to provide users with a secure, trustworthy digital financial experience where they do not have to worry about the safety of their personal information or funds. We also remain committed to providing broader wealth creation and helping millions across the world achieve greater financial well-being by capitalizing on the benefits of blockchain technology and utilizing our self-banking services which offer rewards in crypto. This is the easiest, risk-free way to start a crypto journey and learn about crypto investment at your own pace, on your own terms. We are excited to work with partners who want to bring the benefits and opportunities of blockchain-enabled financial services to their customers across the world of traditional finance, health, and property tech, through employee and loyalty schemes and across the cultural centers of gaming, sports, entertainment, fashion, and leisure.

Meet CoinZoom

Conoce a CoinZoom

Découvrez CoinZoom

कॉइनज़ूम से मिलें

CoinZoomに会う

Conheça o CoinZoom

Gặp gỡ CoinZoom

认识 CoinZoom

Quick Summary: RASP is a security innovation that uses runtime instrumentation to identify and thwart threats utilizing data from inside the active software. Comparing it to perimeter-based security measures like firewalls is not appropriate. By keeping an eye on inputs and preventing those that may be used to commit attacks, RASP technology is supposed to increase software security. The definition of RASP, its operation, its significance, and recommended RASP practices will all be clarified in this blog. For attackers trying to enter the corporation, applications have become a significant target. Black hat attackers know this and use it to their advantage when they discover and use an app vulnerability. Their odds of successfully committing a data breach are more than one in three. According to , of apps are not checked for vulnerabilities throughout the development and quality assurance phases, and even more are left vulnerable during the production phase. Contrast Security 90% Network defenders must figure out how to defend against assaults on the numerous apps that are operating in the company. The applications can protect themselves by identifying and preventing real-time threats. Before further exploring the subject, let’s first clarify what RASP is. What is RASP? is a security system integrated into or linked to an application or runtime environment and can control application execution, identify, and solve real-time threats, according to the Glossary. Runtime Application Self-Protection Gartner RASP can shield an application from harmful input or behavior when it starts up by examining both the context of the activity and the behavior itself by regularly observing its behavior with the app. Every time RASP operates on a server, and security is applied to the active apps. All system calls made by the program are intercepted by RASP, which also verifies data requests made inside the application and ensures that they are safe. RASP can secure both web-based and offline apps. Because RASP’s detection and protection capabilities run on the server that the app is running on, technology has no impact on the way the application is designed. How does RASP works? Instead of being a generic network- or endpoint-level defensive solution, RASP encircles and safeguards a specific application. RASP can track the intakes, outcomes, and internal status of the application it is guarding, thanks to its more focused deployment location. Developers can find vulnerabilities in their apps by implementing RASP. RASP seizes control of the program whenever a security event happens in-app, finds the issue, and fixes it. RASP will automatically try to stop any activity if it discovers an unexpected security event, such as an attempt to call a database, execute shell commands, attempt SQL injection, open a password-protected file, or run SQL commands. You can defend your application with RASP against serious online threats, including privilege escalation, SQL injections, and cross-site scripting. As a result of its ability to immediately stop threats, RASP can be helpful for companies with limited security resources. RASP has two main capabilities: Correctly thwarting attempts to exploit application flaws while preserving the usage of lawful applications. Application Protection: provides security teams with visibility into the perpetrators of attacks, the methods they employ, and the apps they focus on, right down to the code level. Application Threat Intelligence: Why is RASP Security important? The security of applications during runtime is frequently provided by technologies like intrusion prevention systems (IPS) and web application firewalls (WAF). Still, these technologies operate in-line while they scan network traffic and content. They cannot see app traffic and data processing as they examine user sessions and traffic to and from applications. They can utilize a significant amount of bandwidth from the security team. They are usually only used for warnings and log gathering because their defensive measures frequently don’t have the precision required for session termination. What is required is a brand-new kind of runtime environment-based application protection technology called RASP. Security Challenges are involved in the protection of web applications and APIs. In developing online applications and APIs, there are several security problems. The difficulties are only the tip of the iceberg after security. To defend online applications and APIs, the following four critical security issues must be resolved: It is challenging to recognize genuine attacks. Every program has a set of weaknesses that can only be used with certain kinds of assaults. For one application, an HTTP request may be flawless, but it may have disastrous effects for another. Data may also appear differently than what is displayed in the program JSON, XML, serialization entities, and proprietary binary formats are just a few examples of modern programs’ complicated forms (and APIs in particular) use. WebSocket, produced via JavaScript in the browser, mobile applications, and many more sources are used by these requests in addition to HTTP Traditional technological protections are ineffective, plain, and simple. Till it gets to the application server, HTTP traffic is analyzed by WAFs to function independently of applications. And while a WAF is present in most big enterprises, many lack the personnel and knowledge to do the tweaking required to keep it working, leaving it merely in “log mode” There is a quick speed of software development. IaaS, PaaS, and cyberspace are growing like crazy in containers. They make a quick application and API deployment possible; however, new vulnerabilities are introduced into the code. The velocity of development, installation, and delivery has also been quickly boosted by DevOps, which has made it more difficult to guarantee the security of fast-changing software Key benefits of RASP The emphasis on a particular application that RASP has sets it apart from other cybersecurity solutions. It can offer various security advantages due to this focus. Here are some of the key benefits of utilizing RASP in creating mobile apps: Zero-Day Protection RASP, however, may employ signatures to recognize assaults. It extends beyond signature-based detection. by seeing unusual activity inside the protected application and acting when it occurs. With its assistance, RASP may be used to identify and thwart even zero-day assaults. Lower False Positive RASP has extensive knowledge of an application’s internal workings, which includes the capability to observe how a possible attack impacts the execution of the program. This vastly improves RASP’s capacity to distinguish between simple assaults and false positives. This decrease in false positives lessens the workload on security professionals and allows them to concentrate on real threats. Contextual Awareness The application’s present state, the impacted data, code, and other contextual information are all known when a RASP solution detects a possible danger. Since it identifies the vulnerability in the code and precisely how it might be exploited, this context can be extremely helpful for researching, prioritizing, and remediating any vulnerabilities. Access into the Application layer RASP has extensive insight into the application layer since it relates to the specific application. This understanding and expertise at the application layer can aid in detecting a larger variety of possible threats and weaknesses. Lower OpEx and CapEx The susceptibility of an application to attack and the frequency of false-positive warnings may be significantly changed by RASP, despite its simplicity in deployment. As opposed to manual patching and web application firewalls, this combination lowers both initial costs (CapEx) and the cost of properly securing the application (OpEx) (WAFs). Easy Maintenance In contrast to learning, blacklists, or traffic rules, RASP relies on knowledge for an application to function. The resource-saving aspect is valued by CISOs and SOC teams alike. Applications develop and maintain self-defense. Supports DevSecOps The DevOps concurrent integration & deployment (CI/CD) pipeline accommodates RASP solutions. As a result, DevSecOps procedures are supported, and RASP deployment is simple. Cloud Support The application that RASP is meant to safeguard can deploy and integrate with it. It may now be installed everywhere protected programs can operate, including the cloud. Flexible Deployment Even though RASP is commonly built on HTML standards, its API may be easily modified to operate with other norms and software architectures. By utilizing conventions like XML and RPC, it can now safeguard even non-web applications. RASP vs. WAF & are complementary approaches to application security. Although many known threats are filtered by WAF prior they reach the application, it only serves as the first line of security. On the other hand, RSAP takes advantage of the context that extensive visibility into these apps provides to find and deal with assaults that evade Web application firewalls. Web Application Firewall Runtime Application Self-Protection Although WAF aids in adding a layer of protection to your application, it does so by predetermined rules. In contrast, RASP aids in preventing harmful application activity from taking place inside the program itself. These technologies are distinct from one another despite being interchangeable in some situations. You can better explain both technologies with the aid of this section. There is no assurance that a WAF can thwart the most recent types of assaults that haven’t yet been seen. A WAF will need to learn to be effective. RASP’s, on the other hand, offer a far more flexible real-time defense against a range of application-layer threats. RASP can still keep an eye on and safeguard the program’s security even as it is being updated and developed since it leverages the application itself. Combining their strengths to offer thorough and reliable application security, WAF and RASP can complement one another. With WAF, you can determine the nature of the requests being made for your application. In contrast, RASP examines how the program handles the requests. Therefore, if someone is using Metasploit, the app owner can see that an exploit has caused a file to be written to a location where it shouldn’t be, an executable to be run on the system, unauthorized SQL access, or some unintended assets to be packed on a web page browser-side that could result in data exfiltration. RASP best practices As with all technology, there are recommended practices when using RASP. Best practices are also included for you to adhere to. To get as much out of RASP solutions, follow these three suggestions: Put RASP to use as a component of your complete application security strategy A company’s defense against current security risks shouldn’t be limited to RASP, even though RASP does a superb job of safeguarding the company from different intrusions. A comprehensive security strategy is provided while leveraging the DevOps methodology, which moves security to the left in the SDLC. With a higher possibility of attack avoidance, this helps. You might also decide to use a RASP solution with integrated WAF capabilities to leverage the benefits both tools offer, depending on the specific security requirements of your business. Analyze the RASP solutions’ ability to fit into your DevSecOps ecosystem Consider how a RASP product could integrate with other technologies you already use, especially DevSecOps systems, as you evaluate it. A sophisticated RASP solution may, for instance, interface with your current SIEM, Orchestration, or DAST. Through APIs, webhooks, and cutting-edge technologies, this integration enables your business to use numerous threat intelligence feeds so you can better monitor and stop attacks in real-time. Before putting RASP solutions into use, thoroughly test them RASP frequently results in performance difficulties with the apps it monitors because of its tight integration. Whether or not these problems are critical enough to affect users, they could be angry with the performance change. To ensure that the RASP solutions have no adverse effects on the ecosystem’s application performance, it is advisable to evaluate them thoroughly. RASP Tools RASP is similar to other technologies in that it has a wide range of tools accessible on the market. The tools for RASP that are most often used nowadays are listed below: Imperva Real-time Application Self Protection (RASP) Imperva’s RASP is integrated into an app runtime environment that can defend against OWASP’s Top 10 Vulnerabilities and Zero-Day Attacks. It is also very accurate and requires no tuning. Additionally, you gain protection from route traversals, malformed contents, unvalidated redirection, big requests, clickjacking, and HTTP response and method manipulation. With Imperva, you are protected from injections including cross-site scripting, command injection, SQL injection, and  CSS and HTML injection. Fortify Fortify Application Defender from Microfocus lets you keep an eye on your apps while defending them in real-time against flaws and frequent assaults. While safeguarding production apps against zero-day attacks, it distinguishes between appropriate requests and harmful threats in.NET and Java programs. Its end-to-end app security solutions cover all phases of your development lifecycle. In addition to providing line-of-code information, Fortify also provides logging visibility and exploits data for online apps. Additionally, it enables you to comply with security requirements, reports a vulnerability, and record triggers to log management or SIEM without modifying the source code. Sqreen To identify an attack that may take advantage of flaws in the manufacturing process, Sqreen’s RASP makes use of the whole request environment. Furthermore, it avoids false positives while mitigating serious assaults. It provides zero-day coverage and protects your application against the Top 10 OWASP Vulnerabilities, including XSS, SSRF, SQL injections, and others. It never makes use of signatures and patterns that are simple to break and can fast adapt to your application stack. Wrapping up! Application Security has long been a topic of discussion. It has been divided into development and operations, with testing being key and protection being crucial in the latter. It is simple to acquire insight into how attacks operate using sophisticated defense tools and techniques. With the aid of RASP, you can identify and fix the vulnerability without needing to make any modifications to the application. Since attackers are increasingly focusing on apps, businesses need to have sophisticated, multi-layered application security policies that protect consumer data. RASP allows businesses to integrate more thorough app security measures directly into running applications, precisely identifying and preventing dangerous threats in real-time. Because of this, RASP may be useful in an organization’s toolbox for application security. Also Published Here

What is Runtime Application Self-Protection

Polkadot Vs. COSMOS Vs. Octopus Network Vs. NEAR Protocol: Fat Hubs Are Better Than Hub Minimalism

Stories, News & Mentions about SECURITYINNOVATION

Securityinnovation’s Stories on HackerNoon

Securityinnovation's News & Mentions