2,400 articles · page 27 of 48
Security Boulevard, Thursday, October 10th, 2024
GigaOm analysts highlight proactive SaaS security features and the platform's ability to manage complex environments with a robust SaaS Security Posture Management (SSPM) solution.
more →
Security Boulevard, Thursday, October 10th, 2024
In the fast-paced world of SaaS, productivity gains can come at a cost. With enterprises using over 100 different SaaS applications on average, many organizations find themselves in an unmanaged landscape, leaving critical data-and customer PII-vulnerable.
more → SearchSecurity, Wednesday, October 9th, 2024
OPSEC (operations security) is an analytical process that military, law enforcement, government and private organizations use to prevent sensitive or proprietary information from being accessed inappropriately.
more →
SecurityIntelligence, Wednesday, October 9th, 2024
When it comes to cybersecurity, the question is when, not if, an organization will suffer a cyber incident. Even the most sophisticated security tools can't withstand the biggest threat: human behavior.
more →
Security Boulevard, Wednesday, October 9th, 2024
You need an API security solution. That much is a given (although some may argue it isn't!). While essential for business growth and innovation, APIs, or Application Programming Interfaces, expose the organizations that use them to cyber threats.
more → DARKReading, Tuesday, October 8th, 2024
The massive outage involving a faulty Falcon update is an excellent illustration of what happens when organizations neglect security fundamentals.
more →
Security Boulevard, Monday, October 7th, 2024
Organizations face an ever-expanding attack surface and a host of cyberthreats. Yet, most organizations have limited resources and lack effective solutions to fully understand and address their network security risks.
more → Security Boulevard, Monday, October 7th, 2024
Security leaders face the challenge of managing a vast, interconnected attack surface, where traditional approaches to managing cyber risk are no longer sufficient. Modern threats exploit vulnerabilities across domains, requiring a more holistic approach to avoid operational disruption, safety risks and financial losses.
more → Security Boulevard, Monday, October 7th, 2024
The digital world has revolutionized the way we live and work, but it has also opened up a new realm for cybercriminals. The rise of the dark web has provided a breeding ground for hackers and other malicious actors to trade stolen data and launch attacks against companies worldwide.
more → Security Boulevard, Monday, October 7th, 2024
Cybercrime remains one of the primary risks facing companies across the United States. The following statistics highlight the most pressing cybersecurity risks organizations face today and underscore the importance of proactive security measures.
more → Security Boulevard, Monday, October 7th, 2024
Cyber risk mitigation is an ongoing process that aims to reduce the impact of cyber threats on your organization. It encompasses various strategies and tools designed to safeguard your systems and data from potential attacks.
more → InformationWeek, Friday, October 4th, 2024
Here's a deep dive into the latest innovation and how it is transforming the technology landscape.
more →
SC Media, Friday, October 4th, 2024
Is your company still using the same identity management system it had in 1998? Does a mere username and password log you into the local network and let you access almost any resource?
more →
DARKReading, Friday, October 4th, 2024
Thoughtfully applied, humor breaks through security fatigue, increases engagement, and fosters a culture of security awareness.
more → TechZone360, Friday, October 4th, 2024
Imagine standing guard over a treasure trove of valuable assets while threats lurk in every shadow. As digital threats evolve, so must our defenses.
more →
Security Boulevard, Thursday, October 3rd, 2024
In the API-driven world of modern enterprises, security vulnerabilities such as Broken Object Level Authorization (BOLA) represent one of the more insidious threats.
more → Security Boulevard, Thursday, October 3rd, 2024
Organizations worldwide used an average of 130 software-as-a-service (SaaS) applications in 2022 alone, according to Statista. That number continues to grow steadily, all thanks to 2020's pandemic-induced acceleration of digital transformation.
more → ZDNet, Thursday, October 3rd, 2024
More than half of security practitioners believe vendors are flooding them with ineffective alerts to avoid accountability should a breach hit.
more →
Security Boulevard, Thursday, October 3rd, 2024
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding two critical vulnerabilities identified in Optigo Networks ONS-S8 Aggregation Switch products.
more → Security Boulevard, Wednesday, October 2nd, 2024
Exponential growth in code in the age of AI, an unmanageable attack surface as a result of Cloud + DevOps, accelerated development cycles, and tool sprawl have overwhelmed both development and security teams, making it impossible to effectively pinpoint and fix the most critical issues that have the highest impact with the limited amount of time and resources organizations have.
more → Security Boulevard, Wednesday, October 2nd, 2024
Automated certificate lifecycle management (CLM) helps organizations manage digital certificates efficiently, overcoming common challenges like manual processes, increased complexity, and frequent expirations.
more → Security Boulevard, Wednesday, October 2nd, 2024
In December 2020, Red Hat announced a significant shift in its focus from CentOS Linux to CentOS Stream, along with the discontinuation of traditional CentOS Linux. Support for CentOS Linux 8 concluded in December 2021, and support for CentOS Linux 7 ended on June 30, 2024.
more → Techstrong.ai, Tuesday, October 1st, 2024
In a world where cyber threats multiply faster than rabbits on caffeine, the rise of AI in cybersecurity isn't just a trend-it's a necessity.
more →
Security Boulevard, Tuesday, October 1st, 2024
Developing SOAR (Security Orchestration, Automation, and Response) playbooks can be daunting, especially if it's your first time using a SOAR platform.
more → TechCrunch, Tuesday, October 1st, 2024
Jesse Kipf was a prolific hacker who sold access to systems he hacked, had contacts with a notorious cybercrime gang, and tried to use his hacking skills to get off the grid for good.
more →
Professional Security Magazine, Monday, September 30th, 2024
Willem Westerhof, Senior Security Specialist at Secura, part of the laboratory testing, inspection and certification services company Bureau Veritas, writes of security debt and what companies can do to tackle this to maintain public confidence.
more →
Analytics Insight, Friday, September 27th, 2024
7 Essential Practices for a Zero Trust Security Model
more →
HelpNet Security, Friday, September 27th, 2024
In this Help Net Security interview, Nadir Izrael, CTO at Armis, discusses how AI has transformed cyberwarfare by amplifying attacks' scale and sophistication. Izrael emphasizes the need for AI-powered defenses and proactive cybersecurity strategies to combat these evolving threats.
more →
SearchSecurity, Thursday, September 26th, 2024
As recent events have shown, our technology systems are so connected that any interruption can cause global chaos. Organizations need robust defenses to protect their data and operations, and it starts with identity.
more → SearchSecurity, Thursday, September 26th, 2024
To help keep your systems and applications secure, a system security plan is essential. Learn how to create a plan and keep it up to date.
more → TrueFort, Thursday, September 26th, 2024
The National Institute of Standards and Technology (NIST) continues to identify critical cybersecurity vulnerabilities that require immediate action via reports from its National Vulnerability Database (NVD). These reports clarify the ongoing risks organizations face if vulnerabilities are not promptly addressed, including data breaches and system compromises.
more →
HelpNet Security, Tuesday, September 24th, 2024
In this Help Net Security interview, Jon France, CISO at ISC2, discusses cybersecurity workforce growth. He outlines organizations' challenges, such as budget constraints and limited entry-level opportunities. France also points to the urgent need to upskill current employees and adopt inclusive hiring practices to tackle the growing skills gap in the industry.
more → HelpNet Security, Tuesday, September 24th, 2024
Over the past decade, ransomware has been cemented as one of the top cybersecurity threats. In 2023 alone, the FBI received 2,385 ransomware complaints, resulting in over $34 million in losses.
more → Security Intelligence, Tuesday, September 24th, 2024
The SANS Institute - a leading authority in cybersecurity research, education and certification - released its annual Top Attacks and Threats Report.
more → Security Boulevard, Monday, September 23rd, 2024
As organizations grapple with increasingly sophisticated cyber threats, many are rethinking their approach to managing security.
more → InformationWeek, Monday, September 23rd, 2024
What makes a good hacker, and how can the ethical ones strengthen enterprise cybersecurity?
more → Security Boulevard, Monday, September 23rd, 2024
Kubernetes today is the de facto standard for container orchestration, deployment automation, scaling, and management of containerized apps. The robustness and scalability of this open-source platform make it a valuable tool for businesses leveraging cloud-native technologies and DevOps practices.
more → Security Boulevard, Monday, September 23rd, 2024
Insider attacks are growing, whereby 60% of organizations in the past year alone have suffered employee-related data breaches. Surprised?
more → Security Boulevard, Monday, September 23rd, 2024
In today's digital landscape, social media platforms stand at the heart of a brand's identity, reputation, and customer engagement. Despite this, many organizations overlook the security of their social media accounts when considering SaaS apps.
more → Security Boulevard, Monday, September 23rd, 2024
We recently hosted a live webinar that discussed what you need to know about the FCC Schools and Libraries Cybersecurity Pilot Program. This webinar outlines an overview of the new pilot program, demonstrates how ManagedMethods products align with funding criteria, and concludes with how our products enhance K-12 districts' Google Workspace, Microsoft 365, and online browsing security posture.
more → Security Boulevard, Monday, September 23rd, 2024
Last week, the CMMC Final Rule (known as CFR 32) was released from OIRA, meaning no more changes can be made.
more → Security Boulevard, Monday, September 23rd, 2024
Organizations are generating vast volumes of data at lightning speed and need to store that data in user-accessible ways to optimize business results.
more → SC Media, Monday, September 23rd, 2024
Threat intelligence is a vital part of cybersecurity. It gives defenders the information they need to prepare for and guard against potential attackers, mitigating the risks of intrusions and data loss. Real-time feeds of threat data can even help organizations thwart zero-day threats that would otherwise slip past network and endpoint protections.
more → Security Boulevard, Friday, September 20th, 2024
If you've spent any length of time reading about the internationally accepted security framework laid out in ISO 27001, you've likely come across the term ISMS or Information Security Management System. You may wonder, though; what is the ISMS specifically, how do you set one up, and what does it do for your business? Let's talk about it.
more → SecurityIntelligence, Friday, September 20th, 2024
In 2023, the Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team operation against an FCEB (Federal Civilian Executive Branch) organization. In July 2024, CISA released a new CSA that detailed the findings of this assessment along with key findings relevant to the security of the organization's network.
more → Security Boulevard, Thursday, September 19th, 2024
The firehose of security incidents - data breaches, ransomware, and supply chain attacks - often obscures the methods that attackers use to create these incidents. One of the most common is credential stuffing, which is a type of authentication-related attack that leads to account takeovers (ATO) and ultimately theft or fraud.
more → SearchSecurity, Thursday, September 19th, 2024
DNS is a key component in any enterprise network. Auditing DNS servers and encrypting DNS traffic are just two of the steps to take to protect your organization's DNS deployment.
more → Security Boulevard, Thursday, September 19th, 2024
Over the past century, international printing machinery manufacturers like Komori have had to innovate because of the internet. As a manufacturer, they rely on the distribution chain for the overall success of their companies.
more → DARKReading, Thursday, September 19th, 2024
By enhancing threat detection, enabling real-time risk assessment, and providing predictive insights, AI is empowering organizations to build more robust defenses against cyber threats.
more → Analytics Insight, Wednesday, September 18th, 2024
SecOps vs. DevOps: Understanding the key differences in modern IT security practices
more →