2,400 articles · page 41 of 48
Menlo Security, Tuesday, July 11,2023
Whether it's the push for fully remote work, in-office work, or a hybrid workstyle, the conversation around how and where employees will work continues. But guess what? To cybercriminals, this conversation doesn't really matter.
more →
TrustCloud, Friday, July 7,2023
SOC 2 (Service Organization Control 2) provides a framework for assessing and reporting on the security, availability, processing integrity, confidentiality, and privacy of systems and data of service organizations. It was developed by the American Institute of Certified Public Accountants (AICPA) to address the need for consistent and comprehensive security and privacy controls in service organizations.
more →
Solutions Review, Friday, July 7,2023
Myths around SIEM (Security Information and Event Management) can hinder a successful deployment. By debunking these myths, organizations gain a realistic understanding of what SIEM solutions can and cannot accomplish.
more →
Truefort, Thursday, July 6,2023
Why every organization should be concerned about insider risk cybersecurity and what we can do about it
more →
ManagedMethods, Thursday, July 6,2023
Cybersecurity threats are a constant problem in today's digital world. But, for the U.S. school system, it's an especially serious concern.
more →
HelpNet Security, Thursday, July 6,2023
Computer scientists at the University of Waterloo have discovered a method of attack that can successfully bypass voice authentication security systems with up to a 99% success rate after only six tries.
more →
CIODIVE, Wednesday, July 5,2023
Generative AI can be an ally for new security professionals. For more seasoned security analysts, it can offer time to refine their skills through automation of repetitive tasks.
more →
FORTRA, Wednesday, July 5,2023
The Payment Card Industry Data Security Standard (PCI DSS) has always been a massive security undertaking for any organization that has worked to fully implement its recommendations.
more →
DARKReading, Wednesday, July 5th, 2023
When it comes to enterprise risk, third-party cybersecurity risks have increased substantially in recent years. By implementing an effective third-party risk management program, organizations can mitigate much of their risk and better protect themselves from attacks that emanate from third parties. The key word here is "effective."
more →
Architecture & Governance Magazine, Monday, July 3,2023
The concept of Zero Trust is 'never trust, always verify' so that in a Zero Trust Architecture (ZTA) every access request is regarded as potentially hostile and so needs to be authenticated, authorised and continually validated.
more →
TechCrunch, Thursday, June 29,2023
Hackers have compromised the personal data of more than 15.5 million individuals by exploiting a security vulnerability in the MOVEit file transfer tool, and the number of victim organizations continues to grow.
more →
Security Boulevard, Wednesday, June 28,2023
In the ever-evolving landscape of cybersecurity, organizations face a constant battle against hackers and data breaches. The role of the Chief Information Security Officer (CISO) is crucial in safeguarding digital assets and mitigating risks.
more →
Solutions Review, Wednesday, June 28,2023
Debunking storage security myths helps organizations align their security practices with the current threat landscape. The cybersecurity landscape is constantly evolving, with new vulnerabilities, attack vectors, and techniques emerging regularly.
more → TechRepublic, Tuesday, June 27,2023
DLP helps organizations protect their sensitive data. Learn about the best practices and tools available to prepare for and prevent data loss.
more →
iapp, Tuesday, June 27,2023
The IAPP released the Privacy Risk Study 2023, which examines the significant privacy challenges faced by organizations in relation to risk assessment and management.
more →
Scytale, Tuesday, June 27,2023
The Essential 8 Maturity Model is quickly rising in rank and is known for helping businesses establish the baseline of cyber threat protection. But how exactly should organizations achieve Essential 8 compliance, and is it worth the fuss?
more →
IT Security Guru, Monday, June 26,2023
As technology continues to play an integral role in our daily lives, the growing importance of cybersecurity cannot be overstated. From personal data breaches to sophisticated cyberattacks on critical infrastructure, the consequences of inadequate cybersecurity measures can be far-reaching and devastating.
more →
Security Boulevard, Monday, June 26,2023
Today's interconnected digital landscape has enabled organizations to unlock new levels of efficiency via automation, cloud storage, modernization of legacy applications, and much more.
more → Hypr, Monday, June 26,2023
Almost every website, app, and user platform now requires usernames and passwords. And for user data to remain secure, passwords must be strong-most platforms require a mix of upper and lower case letters, numbers, and special characters.
more →
DARKReading, Monday, June 26,2023
In this day of "not if, but when" for breaches, transparency and full disclosure are important to salvage a company's reputation and keep public trust.
more → Security Boulevard, Friday, June 23, 2023
The growing severity and frequency of data breaches and cyberattacks expose the reality that current security strategies are ineffective in combatting modern cyber threats.
more → Enterprise Storage Forum, Friday, June 23, 2023
Data loss prevention tools help businesses protect one of their most valuable assets: information. Data is not only vulnerable to cybersecurity threats, but to inaccuracies, duplicates, and other problems that affect its validity. Data loss prevention software identifies weaknesses within enterprise data management and alerts businesses of those issues before they cause problems.
more →
SearchSecurity, Friday, June 23, 2023
Automated threat modeling tools make identifying threats simpler, but the tools themselves can be fairly complex. Understanding where risks exist is only one part of the process.
more →
Cyber Defense Magazine, Thursday, June 22, 2023
Cybersecurity is a top priority for many businesses today because of the significant threats they face from hackers and cybercriminals. Companies now deal with a lot of consumer data and they are obliged to protect them from being leaked and accessed by malicious actors.
more →
Imperva, Wednesday, June 21, 2023
Over the last several weeks, attackers have taken advantage of vulnerabilities in MOVEit, a popular file transfer application developed by Progress.
more →
MixMode, Wednesday, June 21, 2023
In its inaugural bi-annual strategic plan, CISA (Cybersecurity and Infrastructure Security Agency), the nation's primary cybersecurity oversight agency, highlights the importance of taking a proactive approach to mitigate threats that takes advantage of recent advancements in AI technology.
more →
DevOps.com, Wednesday, June 21, 2023
Over the last few years, the ability to secure our applications has grown, and deep integration into the DevOps toolchain has, too. There are more tools doing more security checks protecting more of the infrastructure and source than there have ever been. The key is putting them to use intelligently.
more →
Security Boulevard, Tuesday, June 20, 2023
A crucial component of protecting your organization, identity access and management (IAM) security has become a trusted cybersecurity best practice. It takes control of user access to systems, data, and resources within your company's networks and manages digital identities, improving the effectiveness and efficiency of your IT security process.
more → HelpNet Security, Tuesday, June 20, 2023
Verizon's recently released 2023 Data Breach Investigation Report (DBIR) provides organizations with a comprehensive analysis of the evolving threat landscape and valuable insights into incident types and vulnerabilities.
more → Solutions Review, Monday, June 19, 2023
Debunking cybersecurity myths is of utmost importance to enterprises for a number of reasons. Enterprises handle vast amounts of sensitive data, including customer information, financial records, and intellectual property.
more → The Register, Friday, June 16,2023
Millions of people's personal info swiped, Clop leaks begin with 'Shell's stolen data'
more →
DARKReading, Friday, June 16,2023
Organizations need to prepare for security threats as summer holidays approach.
more → Continuity Central, Continuity Central
Organizations that closely align their cyber security programs to business objectives are 26 percent more likely to lower the cost of cyber security breaches and incidents according to new research from Accenture.
more →
comforte, Thursday, June 15,2023
IT and security leaders increasingly see data-driven decision making as the key to strategic success. But that puts an increasing amount of pressure on to ensure the data itself is current, accurate, high quality and free of vendor bias.
more →
Dataversity, Thursday, June 15,2023
Companies today use a range of systems to transfer and store data, perform tasks, and, most importantly, manage their customers and staff members. With so many online and offline factors, good cybersecurity is a must.
more →
Fortra, Thursday, June 15,2023
Cybercrime has become a dominant concern for many businesses, as well as individuals. Cybercriminals will target any business, and any individual if they can realize a profit from their minimal efforts.
more →
CSO Online, Thursday, June 15,2023
The application programming interface (API) has become integral to setting up functionality and flexibility. But they're also potential attack vectors that need to be high on the security team's radar.
more →
Datamation, Wednesday, June 14,2023
Cyber threats pose significant risks to organizations of all sizes, making robust security measures imperative. An intrusion prevention system (IPS) is one critical component in an organization's cybersecurity arsenal, acting as a vigilant gatekeeper to actively monitor network traffic and prevent unauthorized access and malicious attacks.
more →
flare, Wednesday, June 14,2023
In today's interconnected world, cyber threats continue to rise, while traditional cybersecurity techniques are becoming less effective and costlier. Coupled with the challenges of hiring skilled cyber professionals, it is evident that cybersecurity needs to change.
more →
Preveil, Wednesday, June 14,2023
If you contract for the Department of Defense (DoD) you will soon need to achieve compliance with the Cybersecurity Maturity Model Certification (CMMC - the DoD's initiative to improve cybersecurity across the DIB.
more →
DARKReading, Monday, June 12,2023
Time and money are valuable and finite, but some actions are well worth spending those resources on.
more → Solutions Review, Friday, June 9,2023
Approaching zero trust - with all its supposed silver bullets, best practices, analyst perspectives, and vendor promises - can feel like walking into a hall of mirrors. What's real? What's not? Who's full of it? Who actually knows what they're talking about? Where are we on our zero-trust journey?
more → GitGuardian, Friday, June 9,2023
Verizon's 2023 DBIR shows trends for incidents and breaches from the last year. Read our recap to see how credential leakage is helping malicious actors gain entry.
more →
DARKReading, Friday, June 9,2023
A solid, dependable SOC strategy that is scalable in the face of various security threats is essential to reduce cybersecurity risks to your business.
more → Solutions Review, Thursday, June 8,2023
NDR, which stands for Network Detection and Response, is a comprehensive cybersecurity solution designed to monitor and analyze network traffic to detect and respond to potential threats.
more → Security Boulevard, Thursday, June 8,2023
In preparation for the June 11th deadline of President Biden's Executive Order (EO) on Improving the Nation's Cybersecurity, Deepfactor has focused on educating customers about the importance of accurately and systematically documenting software production, consumption, and operation using Software Bill of Materials (SBOMs). They represent a critical first step in discovering vulnerabilities and weaknesses within your products and the devices you procure from your software supply chain.
more → AWS News, Thursday, June 8,2023
With data from its SecurityCoach product, KnowBe4 has revealed the top 10 risky behaviours that employees have engaged in on their work devices.
more → wallarm, Wednesday, June 7,2023
As you know by now, the final version of the OWASP API Security Top-10 2023 has been released. At first blush, the final 2023 release seems to retain most of the changes in category naming, language and intent from the 2019 edition which we saw in the RC version.
more →
Red Hat News, Monday, June 5,2023
Analysts Discuss How CISOs Can Maximize Security Effectiveness at the Gartner Security & Risk Management Summit, June 5-7 in National Harbor, Maryland
more →
CSO Online, Monday, June 5,2023
How vendors, governments, industry bodies, and nonprofits are contributing to increasing the cyber resilience of critical national infrastructure this year.
more →