2,604 articles · page 34 of 53
Security Boulevard, Wednesday, July 31st, 2024
As tens of thousands of cybersecurity professionals, executives and policymakers converge on the Las Vegas strip for 'Hacker Summer Camp'- the annual Black Hat, DEF CON and B-Sides conferences - the stakes couldn't be higher.
more →
Security Boulevard, Wednesday, July 31st, 2024
An analysis published today by Cribl, a data management platform provider, suggests that the amount of data being processed and analyzed by cybersecurity teams is increasing exponentially.
more → HelpNet Security, Tuesday, July 30th, 2024
In this Help Net Security interview, Grant Geyer, Chief Strategy Officer at Claroty, discusses the prevalent vulnerabilities in Windows-based engineering workstations (EWS) and human-machine interfaces (HMI) within OT environments. Geyer also addresses the challenges and solutions for securing remote access to critical OT assets.
more →
ITPro, Tuesday, July 30th, 2024
CISOs still cite remote work as one of their major security sticking points four years on from the widespread shift at the beginning of COVID
more →
Security Boulevard, Friday, July 26th, 2024
Distributed Denial of Service (DDoS) attacks have become increasingly sophisticated, posing significant threats to businesses worldwide. Protecting assets and ensuring continuous availability of services is crucial for any organization. This blog walks into the wide road of why DDoS stress testing is essential for effective DDoS protection.
more → readwrite, Friday, July 26th, 2024
Not having a password manager and reusing passwords is like using the same key for your front door, back door, windows, cars, shed, safe, and anything and everything else that requires a key to use or access
more →
Security Boulevard, Friday, July 26th, 2024
A surge in deepfake attacks and identity fraud has led organizations to develop more effective response strategies, with 60% of IT and security professionals implementing defenses against AI-generated deepfakes.
more → theCUBEresearch, Friday, July 26th, 2024
In this episode of the SecurityANGLE, our conversation centers on the cybersecurity risks posed by enterprise collaboration tools and how to combat them. I'm joined by frequent cohost, fellow analyst, engineer, and member of theCUBE Collective community of independent analysts, Jo Peterson.
more →
Security Boulevard, Thursday, July 25th, 2024
'Shadow IT' is more than a buzzword and isn't just about employees going rogue; shadow IT also points to unmet employee tech needs and perceived bottlenecks in corporate protocols.
more → HelpNet Security, Thursday, July 25th, 2024
Somewhere, right now, a CISO is in a boardroom making their best case for stronger identity threat detection and response (ITDR) initiatives to lower the risk of intrusion.
more → Security Boulevard, Thursday, July 25th, 2024
The accountability for security failures or breaches typically falls on security teams or specific IT leaders rather than higher-level executives or the board.
more → techradar.pro, Thursday, July 25th, 2024
Despite being the first line of defense against cyber-attacks, many employees claim they have never received any form of cybersecurity training from their employers.
more →
DARKReading, Wednesday, July 24th, 2024
With every new third-party provider and partner, an organization's attack surface grows. How, then, do enterprises use threat intelligence to enhance their third-party risk management efforts?
more →
Security Boulevard, Wednesday, July 24th, 2024
The shift to the cloud and the accelerated adoption of critical software as a service (SaaS) data applications has proven to be a security challenge for many chief information officers (CIOs) and chief information security officers (CISOs).
more → Security Boulevard, Tuesday, July 23rd, 2024
Security experts and government bodies have strongly advocated for companies adopting multifactor authentication (MFA) in recent years. But despite the increased adoption of MFA, security defenses don't seem to be bolstered against rampant ransomware actors. In fact, recent findings suggest an increase in ransomware losses.
more → Search Security, Monday, July 22nd, 2024
Exposure management is a cybersecurity approach to protecting exploitable IT assets. It involves identifying, monitoring, preventing and remediating risks and vulnerabilities on exposed assets, such as endpoints, servers, applications and cloud-based resources.
more →
SiliconANGLE , Monday, July 22nd, 2024
The world is still taking stock after a faulty software update from CrowdStrike Holdings Inc. caused one of the largest-ever information technology outages
more →
Whatis, Monday, July 22nd, 2024
A CrowdStrike update caused a massive IT outage, crashing millions of Windows systems. Critical services and business operations were disrupted, revealing tech reliance risks.
more → Search Security, Monday, July 22nd, 2024
Cloud detection and response is the latest detection and response tool. Explore how it differs from endpoint, network and extended detection and response tools.
more → Security Boulevard, Monday, July 22nd, 2024
Your organization might have many cybersecurity defenses in place, but defenses alone are not enough to protect you from today's multi-faceted cyberattacks.
more → Security Boulevard, Friday, July 19th, 2024
This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Threat Horizons Report that we just released.
more → Security Boulevard, Friday, July 19th, 2024
A vulnerability assessment involves identifying, classifying, and prioritizing security vulnerabilities within an IT infrastructure. This comprehensive evaluation determines if an IT system is susceptible to known vulnerabilities. It also assigns severity levels to these vulnerabilities and recommends mitigation steps as necessary.
more → CybetSaint, Friday, July 19th, 2024
Cyber risk management has taken center stage for managing and assessing cybersecurity. Security professionals who have taken a risk-first approach to replacing legacy GRC tools have done so for several reasons.
more →
Security Boulevard, Friday, July 19th, 2024
Cybersecurity stands as a pivotal element within any organization's infrastructure. Given the rising frequency of cyber threats, a strong framework is indispensable for defending against these risks. One notable solution is the NIST Cybersecurity Framework. But what is it, and how can it benefit your organization?
more → Security Boulevard, Thursday, July 18th, 2024
Integrating hybrid cloud has become a cornerstone for the DevOps team in today's rapidly evolving digital landscape. With the combination of public, on-premises and private cloud environments, DevOps teams have maximum flexibility, allowing them to deploy applications and microservices across all clouds.
more → Security Boulevard, Thursday, July 18th, 2024
In the cyber security arena, the decision to mitigate or remediate a vulnerability can be pivotal. Choosing the right action-whether to reduce the risk with temporary measures or eliminate the threat altogether-depends on a deep understanding of your current security controls, their effectiveness, and availability.
more → DARK Reading, Wednesday, July 17th, 2024
The tactic is not new, but there has been a steady increase in its use as of this spring.
more → Security Boulevard, Wednesday, July 17th, 2024
Prevent Cyber Breaches with Cyber Threat Intelligence!
more →
Security Boulevard, Tuesday, July 16th, 2024
As we move into new business strategies or transition to new enterprise deployment models CISOs must constantly look to update the risk register and security program controls.
more → Search Security, Tuesday, July 16th, 2024
An intrusion detection system monitors (IDS) network traffic for suspicious activity and sends alerts when such activity is discovered.
more → Cloud Native Now, Tuesday, July 16th, 2024
When we think of digital identity, it is usually in terms of human beings - personal logins, usernames, passwords, and the like that enable us to access apps and services. However, a major part of digital identity is being ignored within organizations - machine identities.
more →
HelpNet Security, Tuesday, July 16th, 2024
This article provides an overview of the major data breaches we covered in 2024 so far, highlighting incidents involving Trello, AnyDesk, France Travail, Nissan, MITRE, Dropbox, BBC Pension Scheme, TeamViewer, Advance Auto Parts, and AT&T.
more → Security Boulevard, Tuesday, July 16th, 2024
63% of organizations suffered cyberattacks due to unpatched vulnerabilities, highlighting a critical issue. However, top-tier companies consistently maintain superior security. How do they do it? Their advantage lies in a robust vulnerability management strategy, anchored by a well-defined vulnerability management lifecycle (VML).
more → CSO Online, Monday, July 15th, 2024
Meltdown and Spectre raised the alarm over vulnerabilities that attackers can exploit in popular hardware. This list, though not comprehensive, presents the most significant CPU and DRAM threats.
more →
HelpNet Security, Monday, July 15th, 2024
AuditBoard launched out-of-the-box (OOTB) self-assessment tools that enable internal auditors to easily assess and streamline conformance with the new Institute of Internal Auditors (IIA) Global Internal Audit Standards ('Standards') that go into effect January 9th, 2025.
more → Security Boulevard, Monday, July 15th, 2024
Phishing attacks are becoming increasingly sophisticated, and the latest attack strategy targeting employees highlights this evolution.
more → SecurityIntelligence, Monday, July 15th, 2024
Cybersecurity experts tell organizations that the question is not if they will become the target of a cyberattack but when.
more →
Security Boulevard, Friday, July 12th, 2024
Data protection is a top concern for businesses both large and small, and that's where NIST comes in. NIST, or the National Institute of Standards and Technology, provides a framework to help organizations manage and reduce cyber risk.
more → Security Boulevard, Friday, July 12th, 2024
Certificate Lifecycle Management (CLM) involves discovering, issuing, renewing, and revoking digital certificates, crucial for enterprise cybersecurity. Key pillars: Discover, Deploy, Revoke and Replace, Renew, Integration.
more → ComputerWorld, Thursday, July 11th, 2024
UEM has emerged as the next step in the development of enterprise mobility software, offering better management of a wider range of devices. By extending EMM capabilities to laptops and desktops, UEM tools helped enterprises make the quick move to remote work.
more →
HelpNet Security, Thursday, July 11th, 2024
In this Help Net Security interview, Chaim Mazal, Chief Security Officer at Gigamon, discusses cybersecurity preparedness measures for businesses, the impact of international inconsistencies on global operations, and the board's role in cybersecurity.
more → Gestalt IT, Thursday, July 11th, 2024
The Cybersecurity and Infrastructure Security Agency (CISA) has released a comprehensive guide to bolster operational security (OPSEC) for election officials. This guide aims to enhance the security of election infrastructure by offering detailed strategies for identifying and mitigating potential risks within the election context. This and more on The Rundown.
more →
CSO Online, Thursday, July 11th, 2024
Spending sprees, acquisitions, siloed departments, and escalating security concerns have many CISOs drowning in security solutions. Here's how to rein in the tool sprawl and ensure enhanced security as you streamline your security stack.
more → SC Media, Wednesday, July 10th, 2024
There are many significant challenges in cybersecurity -- perhaps none bigger than improving software security through more secure design and development.
more →
DARKReading, Tuesday, July 9th, 2024
In an era where cybersecurity threats are becoming increasingly sophisticated, understanding the dynamics of Security Operations Centers (SOCs) is more critical than ever.
more → Security Boulevard, Monday, July 8th, 2024
The Cybersecurity Maturity Model Certification (CMMC) is a crucial program for defense contractors. CMMC Level 2, referred to as Advanced, applies to the 80,000 organizations that handle Controlled Unclassified Information (CUI).
more → Security Boulevard, Monday, July 8th, 2024
Software security is key to the online world's survival. Collaborative efforts of cybersecurity professionals and volunteers have come together to create the OWASP web security testing guide. Malicious actors constantly threaten web applications, the backbone of many businesses. OWASP penetration testing is crucial for identifying and addressing these security vulnerabilities.
more → Security Boulevard, Monday, July 8th, 2024
In episode 337, we cover 'broken' news about the new SSH vulnerability 'regreSSHion' highlighting the vulnerability discovered in the OpenSSH protocol by Qualys and its implications.
more → SC Media, Friday, July 5th, 2024
One-time passwords (OTPs) are everywhere - we have all experienced them in our daily lives.
more → WeSecureApp, Thursday, July 4th, 2024
It's 3 am. Your phone screams. Hackers are in your system. Panic sets in. But wait! Your Blue Team has been sharpening its skills, thanks to the relentless challenges posed by the Red Team. Red Team vs Blue Team isn't just an exercise; it's a strategic advantage.
more →