Enzoic, Tuesday, October 3,2023
Survey Results: The Proof Is In The Passwords
Authentication is a cornerstone of cybersecurity, but strategies to reduce the common pitfalls and resulting security risks haven't evolved.
more →
Back Issues This Week → Popular →
All issues › Archive
Security — Archive
2,400 articles · page 39 of 48
NIST, Monday, October 2,2023
Kicking off NIST's Cybersecurity Awareness Month Celebration
October is always an exciting time for us as we celebrate Cybersecurity Awareness Month and some of NIST's greatest accomplishments, resources, guidance, and latest news in the cybersecurity space.
more →
Decipher, Friday, September 29,2023
FBI: Ransomware Actors Launching 'Dual' Attacks
The FBI is warning of dual ransomware attacks, where victim organizations are hit with two different types of ransomware variants in quick succession - sometimes within 48 hours of each other.
more →
DARKReading, Friday, September 29,2023
People Still Matter In Cybersecurity Management
Cybersecurity's constant stream of shiny new things shouldn't distract managers from their focus on the people they're protecting.
more →
DARK Reading, Thursday, September 28,2023
Looking Beyond the Hype Cycle of AI/ML in Cybersecurity
Artificial intelligence and machine learning aren't yet delivering on their cybersecurity promises. How can we close the gaps?
more → HelpNet Security, Tuesday, September 26,2023
5 Free Vulnerability Scanners You Should Check Out
Vulnerability scanners delve into systems to uncover security gaps. The primary mission? To fortify organizations against breaches and shield sensitive data from exposure.
more →
Fortra, Tuesday, September 26,2023
Best 10 Cybersecurity Podcasts
The cybersecurity industry is one in which staying in the loop on recent developments is incredibly important. Because technologies, industry conditions, and the threat landscape all change so frequently, it can be difficult to remain up to date on news, standard practices, and significant threats.
more →
SecurityIntelligence, Tuesday, September 26,2023
The Growing Risks of Shadow IT and SaaS Sprawl
In today's fast-paced digital landscape, there is no shortage of apps and Software-as-a-Service (SaaS) solutions tailored to meet the diverse needs of businesses across different industries. This incredible array of options has revolutionized how we work, providing cost-effective and user-friendly tools that streamline tasks and boost productivity.
more →
Rezilion, Tuesday, September 26,2023
What Exactly Is Application Security Posture Management?
For security leaders looking for a more modern approach to improve their application security posture and better manage enterprise risk, enter application security posture management, or ASPM.
more →
CIO, Monday, September 25,2023
The Changing Face Of Cybersecurity Threats In 2023
Cybersecurity has always been a cat-and-mouse game, but the mice keep getting bigger and are becoming increasingly harder to hunt.
more →
Infoworld, Monday, September 25,2023
How Generative AI Changes Cybersecurity
The impacts of large language models and AI on cybersecurity range from the good to the bad to the ugly. Here's what to watch out for, and how to prepare.
more →
Security Boulevard, Wednesday, September 20,2023
XDR vs SIEM vs SOAR: Choosing The Best Security Solution
In today's ever-evolving cybersecurity landscape, choosing the right threat detection and incident response (TDIR) strategy is paramount. It's like selecting the perfect toolset for a critical job - you need it to be precise, reliable, and efficient.
more →
Click Armor, Wednesday, September 20,2023
The 10 Most Common Cyber Security Myths
Is it a cyber security truth or a cyber security myth? Cyber crime is on the rise, and a large part of combating it starts with understanding the threats that exist. Unfortunately, numerous myths about cyber security persist which can lead to complacency or an incorrect risk management approach.
more →
Security Boulevard, Tuesday, September 19,2023
What Is Continuous Threat Exposure Management (CTEM)?
This integrates threat intelligence situational awareness and automated response capabilities, enabling organizations to respond to new or evolving cyber threats more effectively and proactively.
more → Cyral, Tuesday, September 19,2023
How Security Leaders Think About Data Security Governance
At Cyral, we pride ourselves on working closely with security leaders to see the world as they see it. We conducted multiple interviews and surveys to understand their needs as it pertains to data security governance - what it encompasses, what it excludes, how much of it is driven by risk, how much by business needs, where they feel good, and where they need to invest. the list goes on.
more →
Click Armor, Monday, September 18,2023
Role-Based Security Awareness Training: Planning & Delivering To Manage Risks
Role-based security awareness training is a customized approach to training that tailors the content and delivery of security awareness programs to the specific roles and responsibilities of individuals within an organization.
more → Security Intelligence, Monday, September 18,2023
How NIST Cybersecurity Framework 2.0 Tackles Risk Managemen
The NIST Cybersecurity Framework 2.0 (CSF) is moving into its final stages before its 2024 implementation. After the public discussion period to inform decisions for the framework closed in May, it's time to learn more about what to expect from the changes to the guidelines.
more → Noetic , Friday, September 15,2023
The CISO's Three-Point Checklist For Maximizing Cybersecurity ROI
In this blog, we present the CISO's Checklist for Maximizing Cybersecurity ROI, providing essential criteria to navigate this complex terrain effectively. Explore how aligning security strategies with business objectives, adopting continuous threat exposure management, and harnessing the power of automation can fortify cybersecurity in an ever-evolving threat landscape.
more →
Security Boulevard, Friday, September 15,2023
Cybersecurity Goals Conflict With Business Aims
Cybersecurity is often out of sync with business goals, according to a study conducted by Forrester Consulting, which found 97% of organizations face challenges in trying to align cybersecurity priorities with business outcomes.
more → DARKReading, Friday, September 15,2023
Ciso Global Deepens Capabilities With Integrated Threat Intelligence Feed
CISO Global (NASDAQ: CISO), an industry leader as a managed cybersecurity and compliance provider, is expanding its capabilities by deepening its threat intelligence feed and incorporating it into existing services
more → The Register, Thursday, September 14,2023
Here's Why Cloud Credentials Are The Hottest Item On Criminal Marketplaces
Stolen cloud credentials cost about the same as a dozen donuts, according to IBM X-Force, whose threat intel team says logins make up almost 90 percent of goods and services for sale on dark web marketplaces.
more →
Reversing Labs, Wednesday, September 13,2023
SANS DevSecOps report: 5 key takeaways
SANS has released the results of its annual DevSecOps survey, which reveals important shifts in how organizations are approaching application security testing.
more →
HelpNet Security, Wednesday, September 13,2023
Latest Fraud Schemes Targeting The Payments Ecosystem
These include the use of malvertising and search engine optimization (SEO) techniques to cultivate compelling and effective phishing and social engineering campaigns, the utilization of emerging advanced language model (ALM) technologies, and the increased targeting of authentication processes.
more → Fortra, Wednesday, September 13,2023
5 Reasons Why You Should Conduct Regular Cybersecurity Audits
Cyber threats are growing more sophisticated, covert, and frequent every day. This year alone has seen the likes of T-Mobile and PharMerica suffering serious security breaches. These incidents disrupted operations and threatened their bottom lines, not to mention the lingering aftereffects and negative brand perception in the eyes of their customers.
more → InformationWeek, Tuesday, September 12,2023
What Cybersecurity Gets Wrong
Cybercrime cost Americans $10.3 billion in 2022, according to the FBI's IC3 report. The average cost of a breach globally was $4.45 million in 2023, per IBM's Cost of a Data Breach report. And the total cost may be as much as $8 trillion around the world this year.
more →
Security Boulevard, Tuesday, September 12,2023
The Top 7 Insider Threats Every Company Should Be Aware Of
In today's volatile and interconnected world, safeguarding a company's assets is not just about fending off external cyber-attacks and physical breaches. However, an often overlooked risk comes from within - the insiders.
more → IT Security Guru, Tuesday, September 12,2023
Don't Leave Cybersecurity To Chance
In today's digital age, where organisations heavily rely on technology and data, ensuring strong Cyber Security practices is paramount, and one often overlooked aspect, is the departure of staff members.
more →
ForgeRock, Tuesday, September 12,2023
6 Ways Passwords Can Be Stolen - And How Passwordless Can Stop Them All
Passwords have gotten a lot of attention lately. Why? Because they pose a double threat with hackers and users. According to the Verizon 2023 DBIR, 86% of breaches involve stolen, weak, or default passwords. Of those breaches, 74% involve the human element, which includes social engineering attacks, errors, or misuse.
more →
ZDNet, Tuesday, September 12,2023
6 Simple Cybersecurity Rules To Live By
How do you train others to avoid being victims of online crime? It's all about human behavior.
more →
CXOtoday.com, Monday, September 11,2023
Security Challenges With 5G Networks
India's telecom regulators aren't allocating spectrum directly to enterprises for building private 5G networks, but they can lease it from private operators. Once the process starts-off, CTOs may have to be ready to face some challenges when they shift over from legacy systems to private 5G networks.
more →
Fortra, Monday, September 11,2023
10 Mistakes In Cybersecurity And How To Avoid Them
It's easy to rest on our laurels. Prevent a few breaches - or go long enough without one - and you start to feel invincible. While our efforts are certainly laudable, we can't get too comfortable.
more → Blackfog, Saturday, September 9,2023
What Types Of Data Breaches Do You Need To Know About In 2023?
What Types of Data Breaches do you Need to Know About in 2023? By now, all firms should be aware that cybersecurity threats are among the leading risks any business faces. Within this, those that directly compromise sensitive data have the potential to be especially damaging.
more →
Security Boulevard, Friday, September 8,2023
Zero-Trust: 5 Steps To Transition From Hype To Reality
The paradigm shift toward zero-trust has been years in the making for some organizations, while others still regard it as an aspiration. Although many organizations have touted their success in implementing the key principles, the journey toward full implementation is expected to be gradual.
more → SiliconANGLE , Friday, September 8,2023
Lessons From A Ransomware Attack: How One Healthcare CIO Helped Her Company Recover
In the early-morning hours of Feb. 25, 2021, Terri Ripley got the call every chief information officer dreads: Her company, OrthoVirginia Inc., had been hit by a massive attack of the Ryuk ransomware that had shut down its entire computing fabric.
more →
FutureCISO, Thursday, September 7,2023
PodChats for FutureCISO: Incorporating enterprise-wide GenAI strategies
Gartner says the mass availability of generative AI has become a top concern for enterprise risk executives in the second quarter of 2023. It was mentioned by 66% of 249 senior risk executives, just one point behind third-party viability and ahead of financial planning uncertainty.
more →
ComputerWeekly, Thursday, September 7,2023
AI-Powered Cloud Siem: Real-Time Threat Intel Boosts Defences
Thanks to their advanced data analysis and predictive capabilities, AI and ML will be valuable protective tools going forward. Learn about the potential of AI-backed cloud SIEM technology
more →
Search Security, Wednesday, September 6,2023
How To Prevent Ransomware In 6 Steps
Ransomware can cost companies billions in damage. Incorporate these ransomware prevention best practices, from defense in depth to patch management, to keep attackers out.
more →
Search Security, Wednesday, September 6,2023
Cut Through Cybersecurity Vendor Hype With These 6 Tips
Cybersecurity vendor hype can make purchasing decisions difficult. When considering a new product or service, think critically about whether it would truly add business value.
more →
Solutions Review, Wednesday, September 6,2023
17 Customer Identity And Access Management (CIAM) Best Practices Enterprises Should Consider
Customer Identity and Access Management (CIAM) is a comprehensive framework and set of technologies designed to manage and secure the digital identities of an organization's customers.
more →
Security Boulevard, Tuesday, September 5,2023
The Future Of Work Is Remote: How To Prepare For The Security Challenges
The fourth industrial revolution is here and is changing the way people work in ways that are still hard to believe. On the one hand, organizations are shifting to permanent or hybrid remote work setups since they provide opportunities to trim operating costs and weather an uncertain economic future.
more → Data Center Knowledge, Friday, September 1,2023
The Data Center Ransomware Attack That Costs You Everything
What happens when a data center ransomware attack costs you everything? Lesson from the CloudNordic and Azero ransomware attacks.
more →
VentureBeat, Thursday, August 31,2023
5 Ways CISOs Can Prepare For Generative AI's Security Challenges And Opportunities
With generative AI tools like ChatGPT proliferating across enterprises, CISOs have to strike a very difficult balance: Performance gains versus unknown risks. Gen AI is delivering greater precision to cybersecurity but also being weaponized into new attack tools such as FraudGPT that advertise their ease of use for the next generation of attackers.
more →
Medium, Thursday, August 31,2023
Threat-Informed Defense Is Hard, So We Are Still Not Doing It!
If you wake up an average security professional at 3AM and ask them 'hey, what is security about?', a large majority would say 'it is about the threats.' Ultimately, security (whether 'cyber' or 'information') is unthinkable without the threats. Security professionals are meant to defend against threats from criminals, insiders, and nation-states.
more →
Security Boulevard, Tuesday, August 29,2023
Empowering Cybersecurity Resilience: Exploring The Nist Cybersecurity Framework 2.0
There are many cybersecurity regulations and frameworks that security leaders use to establish a baseline for security posture inside their organization. Some are driven by sector-specific requirements, such as the Health Insurance Portability & Accountability Act (HIPAA) or the Payment Card Industry Data Security Standard (PCI DSS).
more → DARKReading, Tuesday, August 29,2023
Addressing Cybersecurity's Talent Shortage & Its Impact On Cisos
CISOs need to educate all arms of the business on security best practices so it becomes part of the business culture, thus expanding who's keeping watch. Automating routine tasks will help scale security.
more → BlackFog, Monday, August 28,2023
Beyond Cybersecurity Compliance: Adhering To Regulation Is Not Enough
Security leaders can't guarantee positive outcomes by simply checking compliance boxes
more → Keseya, Thursday, August 24,2023
Why Network Penetration Testing Is An Essential Cybersecurity Practice
Will your cybersecurity setup prove resilient even in the face of a damaging cyberattack like ransomware? Network penetration testing can give you the answer. It's a stress test of sorts in which cybersecurity experts simulate cyberattacks in a controlled environment to see if your infrastructure will respond and perform as expected.
more →
Enterprise Storage Forum, Thursday, August 24,2023
5 Best Practices For Implementing Risk-First Cybersecurity
Embracing a risk-first mindset empowers organizations to make informed decisions, strengthen security, safeguard valuable assets, and reduce financial impact. Organizations face an uphill battle to safeguard hybrid cloud assets and sensitive data from evolving cyber threats in an increasingly interconnected and digitized world. While the security-first approach is essential, it has limitations in addressing the dynamic nature of these threats.
more → CyberSaint, Tuesday, August 22,2023
Cybersecurity v. Cyber Risk Management
For years, the discourse in IT has been centered around cybersecurity. Yet, with the volume of cyber attacks increasing, professionals have developed a more holistic approach to cybersecurity. This development has led to the creation of cyber risk management. You may be wondering whether the distinction between cyber risk management and cybersecurity is necessary, and the answer is yes.
more →
Ordr, Tuesday, August 22,2023
What Is Cyber Asset And Attack Surface Management?
Gartner analysts have been busy publishing several Hype Cycles recently. If you're not familiar with the Gartner Hype Cycle, it is a graphic representation of the maturity lifecycle of new technologies, and there are several key reports to help security leaders with their strategy and investments.
more →