2,380 articles · page 37 of 48
ComputerWeekly, Thursday, November 30,2023
What goes into a good incident response plan, and what steps should security professionals take to ensure they are appropriately prepared for the almost inevitable attack, and secure buy-in from organisational leadership?
more →
FutureCIO, Wednesday, November 29,2023
Clifford Stoll, author of The Cuckoo's Egg, an investigation into the hacking of the Lawrence Berkeley National Laboratory that led to the capture of hacker Marcus Hess, famously said: 'Treat your password like your toothbrush. Don't let anyone else use it and get a new one every six months.'
more →
Cofense, Tuesday, November 28,2023
In our latest webinar on QR Code Phishing Threats we dove into this new, emerging threat and what it means for organizations around the world.
more →
DARKReading, Tuesday, November 28,2023
Stay away from using these tactics when trying to educate employees about risk.
more →
WeSecureApp, Tuesday, November 28,2023
Security misconfiguration is a critical vulnerability that can lead to unauthorized access, data breaches, service disruptions, and reputation damage. In today's digital landscape, where cyber threats are constantly evolving, it is essential to address security misconfiguration proactively.
more →
InfoQ, Tuesday, November 28,2023
Auth0 recently published an in-depth explanation of Verifiable Credentials (VCs). The article emphasizes the potential of VCs to transform how identities are managed online. It highlights the limitations of current identity systems and how VCs can address these gaps, particularly in allowing identity claims to be disclosed without issuers knowing, thereby enhancing privacy and control for users.
more →
Fortra, Tuesday, November 28,2023
While the EU AI Act is poised to introduce binding legal requirements, there's another noteworthy player making waves-the National Institute of Standards and Technology's (NIST) AI Risk Management Framework (AI RMF), published in January 2023.
more →
SearchSecurity, Monday, November 27,2023
Privileged identity management (PIM) is the monitoring and protection of superuser accounts that hold expanded access to an organization's IT environments.
more →
Escape - The API Security Blog, Friday, November 24,2023
Penetration testing, commonly known as pentesting, involves simulating a real attack on a server to assess its vulnerabilities against potential real-world attacks. While the primary goal is to emulate concrete threats, pentesting can extend beyond, offering insights into the potential consequences if confidential data were to fall into malicious hackers' hands.
more →
Opensource For U, Thursday, November 23,2023
Applying security principles to address cloud cost challenges is the need of the hour. This first part in the series on security and cost optimisation in the enterprise cloud explains that these are not isolated concerns but are truly interconnected in a well-managed cloud environment.
more →
Check out the Q2 2024 Vulnerability Watch report
This report objectively captures the most-significant CVEs and vulnerabilities identified in the third quarter of 2024. This isn't just a top ten list, but takes the extra steps to outline exposure risk specifications and to provide practical mitigation actions.
more →
ISACA, Wednesday, November 22,2023
Accounts payable (AP) fraud is one of those threats that most people inside the four walls of your organization aren't aware of. However, that doesn't dampen its severity.
more →
Security Boulevard, Tuesday, November 21,2023
Today, malware-infected bots are used for everything from stealing passwords to launching some of the most disruptive network-based attacks in history. Case in point are the direct-path attacks from DDoS-capable botnets such as Mirai, which are frequently leveraged by groups like Killnet. 
more →
TechCrunch, Tuesday, November 21,2023
Indeed reports that almost one in five jobs are highly exposed to generative AI. The technology has proved advantageous for cybersecurity careers, automating threat data analysis and allowing cybersecurity professionals to focus more on mitigating the risks.
more →
DataCenter Knowledge, Monday, November 20,2023
With human error still accounting for the majority of cyber-attacks, can a zero-trust approach remove this lingering vulnerability in an organization's security framework?
more →
Security Boulevard, Monday, November 20,2023
Extended detection and response, or XDR, is a security approach that integrates multiple protection tools into a single, unified and integrated solution. It provides organizations with broad visibility across their networks, endpoints, cloud workloads, and users, allowing for faster threat detection and response.
more → ITProPortal, Monday, November 20,2023
Failing to use basic password hygiene could lead to disaster for organizations
more →
WeSecureApp, Friday, November 17,2023
In an era dominated by digital connectivity, enterprises face unprecedented challenges in safeguarding their sensitive data and digital assets from an ever-evolving landscape of cyber threats. As the frequency and sophistication of cyber attacks continue to rise, it becomes imperative for organizations to adopt comprehensive and proactive cybersecurity measures.
more → Professional Security Magazine Online, Friday, November 17,2023
Delayed investment in holistic security systems leaves companies vulnerable to attack, so what is the solution? asks Steve Doust, pictured, Group Sales Director at Kyocera.
more →
HackerNet, Thursday, November 16,2023
In the ever-evolving landscape of cloud computing, ensuring robust security measures has never been more important. In the new ISO 27001:2022 standard, there is a new requirement for organisations to establish control of their Cloud services, which includes every flavor of cloud from Software as a Service (SaaS) to Platform as a Service (PaaS).
more → Analytics Insight, Wednesday, November 15,2023
In the past, when an organization had a security tool like a firewall or antivirus software, they were sure of protecting their web footprint. However, security attacks are becoming more complex and complicated for these standalone security tools to handle all by themselves.
more →
Foundry, Monday, November 13,2023
Despite the evolving landscape of cybersecurity, the top priorities for chief information security officers (CISOs) have remained consistent over the years.
more →
Fortra, Monday, November 13th, 2023
The threat landscape is the ever-evolving landscape of cybersecurity threats, vulnerabilities, and attackers. It is constantly changing as new threats are discovered, new vulnerabilities are exploited, and new attackers emerge. The threat landscape can be a complex and daunting topic, but businesses and individuals need to be aware of the risks to take steps to protect themselves.
more →
DARKReading, Monday, November 13,2023
Process failures are the root cause of most serious cybersecurity incidents. We need to treat security as a process issue, not try to solve it with a collection of tools.
more → Analytics Insight, Sunday, November 12,2023
As technology continues to evolve, so do the threats and challenges in the cybersecurity landscape. With the rapid advancement of digitalization, artificial intelligence (AI), and the Internet of Things (IoT), the need for innovative cybersecurity measures has never been greater.
more → ITPro, Friday, November 10,2023
Printer cyber attacks are still a pervasive risk for SMBs, with many overlooking potential vulnerabilities
more → Smallbiz EPP, Wednesday, November 8,2023
'We brought a shovel to fight an avalanche.'
more →
DTEX, Friday, November 10,2023
With insider risk rising and becoming increasingly expensive, it's becoming more incumbent on companies to figure out how they want to tackle it. Historically, one approach has been to use Data Loss Prevention (DLP) technologies.
more →
HelpNet Security, Thursday, November 9,2023
Quantum computing is poised to be one of the most important technologies of the 21st century. With global governments having collectively pledged more than $38 billion in public funds for quantum technologies and $2.1 billion of new private capital flowing to quantum companies in 2022, quantum technologies, particularly quantum computers, are rapidly moving from the lab to the commercial marketplace.
more → Smallbiz EPP, Wednesday, November 8,2023
In today's digital landscape, the threat of cyberattacks looms larger than ever. But not all cyber threats are created equal. Advanced Persistent Threats (APTs) are a unique breed of cyberattacks that are stealthy, sophisticated, and potentially devastating. Recognizing the signs of an APT attack is not just important-it's imperative. In this guide, we'll uncover the signs of an Advanced Persistent Threat Attack that you simply can't afford to ignore.
more →
Smallbiz EPP, Wednesday, November 8,2023
In the digital age, robust network security stands paramount against the common and devastating data breaches and cyber attacks. At the forefront of defense mechanisms are firewalls, the stalwart guardians of the digital perimeter. But what makes firewalls so fundamental to network security? And what is firewall protection? Let's delve into their critical role in safeguarding our digital assets.
more → wallarm, Wednesday, November 8,2023
In the realm of security measures within the digital expanse, we recurrently stumble upon designations, namely, EDR (Endpoint Detection and Response), MDR (Managed Detection and Response), and XDR (Extended Detection and Response).
more →
FutureCIO, Tuesday, November 7,2023
Tata Consultancy Services revealed the top five cybersecurity trends that will shape the global enterprise in 2024: generative AI, board room discussion, sovereign cloud, vendor strategy, and insights on hiring.
more → CIO, Thursday, November 2,2023
The Principle of Least Privilege is a bedrock of information security. With mobile apps, IoT, the cloud, and AI, it is more important than ever.
more →
wallarm, Thursday, November 2,2023
Unraveling the Mysteries Behind the Zero Trust Network Access (ZTNA) Paradigm
more → SmalBiz, Thursday, November 2,2023
Unveil the Secrets: Advanced Persistent Threat and Social Engineering Explained
more → centraleyes, Thursday, November 2,2023
To build a robust information security strategy, one must understand and apply the core principles of information security. This blog post will delve into the fundamental principles underpinning effective information security principles and practices.
more →
DataCenter Knowledge, Thursday, November 2,2023
A zero trust architecture reduces a network's attack surface and lowers the risk of a data breach. Here are some tips when implementing such an architecture.
more → entro, Thursday, November 2,2023
When it comes to cybersecurity, trust is a commodity scarcely afforded, and for good reason. Introducing zero trust architecture (ZTA) - a concept that's as straightforward as it is stringent: 'trust no one, verify everything.'
more →
CIO, Thursday, November 2,2023
SASE recently fell into 'the Trough of Disillusionment.' But why are organizations so down on this groundbreaking technology?
more → Medium, Thursday, November 2,2023
This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our eighth Threat Horizons Report that we just released
more →
Security Intelligence, Wednesday, November 1,2023
Do you know where all your organization's data resides across your hybrid cloud environment? Is it appropriately protected? How sure are you? 30%? 50%? It may not be enough.
more →
Search Security, Wednesday, November 1,2023
Authentication is the process of determining whether someone or something is who or what they say they are.
more → wallarm, Wednesday, November 1,2023
In the ever-evolving sphere of digital tech, the persistent threat of cyber intrusions remains a formidable concern. A notable example is the polymorphic virus, an insidiously clever adversary in the landscape of cyber threats. Let's probe the intrinsic nature, attributes, and behaviors of this unique form of malware.
more → Security Boulevard, Wednesday, November 1,2023
Just like having a strong observability platform, in the world of DevOps, ensuring the security of systems and applications is of utmost importance. In recent years, the risk of potential security breaches has increased, according to a British government study published in 2022. The survey found that approximately 39% of UK businesses experienced a cyberattack.
more → TrueFort, Tuesday, October 31,2023
Cybersecurity breaches have become the horror stories of the digital age
more →
eclypsium, Tuesday, October 31,2023
The rapid rise of hardware- and firmware-related attacks and supply chain threats has been one of the most significant changes in cybersecurity in recent years.
more →
wallarm, Monday, October 30,2023
As we navigate the continually evolving cybersecurity landscape, Managed Detection and Response (MDR) surfaces as a game-changing strategy. But, what does MDR truly signify?
more → Blackcloak, Monday, October 30,2023
Identity theft isn't a new phenomenon, but its rise in the executive world can no longer be ignored. As a CISO, you understand the importance of safeguarding not only your organization's data but also the personal information of your top-level executives. Today, we want to highlight the stealthy danger of identity theft that is silently targeting executives, and what BlackCloak does to mitigate that risk.
more →
Security Intelligence, Friday, October 27,2023
Since 2004, the White House and Congress have designated October National Cybersecurity Awareness Month. This year marks the 20th anniversary of this effort to raise awareness about the importance of cybersecurity and online safety.
more →