2,380 articles · page 39 of 48
The Register, Thursday, September 14,2023
Stolen cloud credentials cost about the same as a dozen donuts, according to IBM X-Force, whose threat intel team says logins make up almost 90 percent of goods and services for sale on dark web marketplaces.
more →
Reversing Labs, Wednesday, September 13,2023
SANS has released the results of its annual DevSecOps survey, which reveals important shifts in how organizations are approaching application security testing.
more →
HelpNet Security, Wednesday, September 13,2023
These include the use of malvertising and search engine optimization (SEO) techniques to cultivate compelling and effective phishing and social engineering campaigns, the utilization of emerging advanced language model (ALM) technologies, and the increased targeting of authentication processes.
more →
Fortra, Wednesday, September 13,2023
Cyber threats are growing more sophisticated, covert, and frequent every day. This year alone has seen the likes of T-Mobile and PharMerica suffering serious security breaches. These incidents disrupted operations and threatened their bottom lines, not to mention the lingering aftereffects and negative brand perception in the eyes of their customers.
more →
InformationWeek, Tuesday, September 12,2023
Cybercrime cost Americans $10.3 billion in 2022, according to the FBI's IC3 report. The average cost of a breach globally was $4.45 million in 2023, per IBM's Cost of a Data Breach report. And the total cost may be as much as $8 trillion around the world this year.
more →
Security Boulevard, Tuesday, September 12,2023
In today's volatile and interconnected world, safeguarding a company's assets is not just about fending off external cyber-attacks and physical breaches. However, an often overlooked risk comes from within - the insiders.
more →
IT Security Guru, Tuesday, September 12,2023
In today's digital age, where organisations heavily rely on technology and data, ensuring strong Cyber Security practices is paramount, and one often overlooked aspect, is the departure of staff members.
more →
ForgeRock, Tuesday, September 12,2023
Passwords have gotten a lot of attention lately. Why? Because they pose a double threat with hackers and users. According to the Verizon 2023 DBIR, 86% of breaches involve stolen, weak, or default passwords. Of those breaches, 74% involve the human element, which includes social engineering attacks, errors, or misuse.
more →
ZDNet, Tuesday, September 12,2023
How do you train others to avoid being victims of online crime? It's all about human behavior.
more →
CXOtoday.com, Monday, September 11,2023
India's telecom regulators aren't allocating spectrum directly to enterprises for building private 5G networks, but they can lease it from private operators. Once the process starts-off, CTOs may have to be ready to face some challenges when they shift over from legacy systems to private 5G networks.
more →
Fortra, Monday, September 11,2023
It's easy to rest on our laurels. Prevent a few breaches - or go long enough without one - and you start to feel invincible. While our efforts are certainly laudable, we can't get too comfortable.
more → Blackfog, Saturday, September 9,2023
What Types of Data Breaches do you Need to Know About in 2023? By now, all firms should be aware that cybersecurity threats are among the leading risks any business faces. Within this, those that directly compromise sensitive data have the potential to be especially damaging.
more →
Security Boulevard, Friday, September 8,2023
The paradigm shift toward zero-trust has been years in the making for some organizations, while others still regard it as an aspiration. Although many organizations have touted their success in implementing the key principles, the journey toward full implementation is expected to be gradual.
more → SiliconANGLE , Friday, September 8,2023
In the early-morning hours of Feb. 25, 2021, Terri Ripley got the call every chief information officer dreads: Her company, OrthoVirginia Inc., had been hit by a massive attack of the Ryuk ransomware that had shut down its entire computing fabric.
more →
FutureCISO, Thursday, September 7,2023
Gartner says the mass availability of generative AI has become a top concern for enterprise risk executives in the second quarter of 2023. It was mentioned by 66% of 249 senior risk executives, just one point behind third-party viability and ahead of financial planning uncertainty.
more →
ComputerWeekly, Thursday, September 7,2023
Thanks to their advanced data analysis and predictive capabilities, AI and ML will be valuable protective tools going forward. Learn about the potential of AI-backed cloud SIEM technology
more →
Search Security, Wednesday, September 6,2023
Ransomware can cost companies billions in damage. Incorporate these ransomware prevention best practices, from defense in depth to patch management, to keep attackers out.
more →
Search Security, Wednesday, September 6,2023
Cybersecurity vendor hype can make purchasing decisions difficult. When considering a new product or service, think critically about whether it would truly add business value.
more →
Solutions Review, Wednesday, September 6,2023
Customer Identity and Access Management (CIAM) is a comprehensive framework and set of technologies designed to manage and secure the digital identities of an organization's customers.
more →
Security Boulevard, Tuesday, September 5,2023
The fourth industrial revolution is here and is changing the way people work in ways that are still hard to believe. On the one hand, organizations are shifting to permanent or hybrid remote work setups since they provide opportunities to trim operating costs and weather an uncertain economic future.
more → Data Center Knowledge, Friday, September 1,2023
What happens when a data center ransomware attack costs you everything? Lesson from the CloudNordic and Azero ransomware attacks.
more →
VentureBeat, Thursday, August 31,2023
With generative AI tools like ChatGPT proliferating across enterprises, CISOs have to strike a very difficult balance: Performance gains versus unknown risks. Gen AI is delivering greater precision to cybersecurity but also being weaponized into new attack tools such as FraudGPT that advertise their ease of use for the next generation of attackers.
more →
Medium, Thursday, August 31,2023
If you wake up an average security professional at 3AM and ask them 'hey, what is security about?', a large majority would say 'it is about the threats.' Ultimately, security (whether 'cyber' or 'information') is unthinkable without the threats. Security professionals are meant to defend against threats from criminals, insiders, and nation-states.
more →
Security Boulevard, Tuesday, August 29,2023
There are many cybersecurity regulations and frameworks that security leaders use to establish a baseline for security posture inside their organization. Some are driven by sector-specific requirements, such as the Health Insurance Portability & Accountability Act (HIPAA) or the Payment Card Industry Data Security Standard (PCI DSS).
more → DARKReading, Tuesday, August 29,2023
CISOs need to educate all arms of the business on security best practices so it becomes part of the business culture, thus expanding who's keeping watch. Automating routine tasks will help scale security.
more →
BlackFog, Monday, August 28,2023
Security leaders can't guarantee positive outcomes by simply checking compliance boxes
more → Keseya, Thursday, August 24,2023
Will your cybersecurity setup prove resilient even in the face of a damaging cyberattack like ransomware? Network penetration testing can give you the answer. It's a stress test of sorts in which cybersecurity experts simulate cyberattacks in a controlled environment to see if your infrastructure will respond and perform as expected.
more →
Enterprise Storage Forum, Thursday, August 24,2023
Embracing a risk-first mindset empowers organizations to make informed decisions, strengthen security, safeguard valuable assets, and reduce financial impact. Organizations face an uphill battle to safeguard hybrid cloud assets and sensitive data from evolving cyber threats in an increasingly interconnected and digitized world. While the security-first approach is essential, it has limitations in addressing the dynamic nature of these threats.
more → CyberSaint, Tuesday, August 22,2023
For years, the discourse in IT has been centered around cybersecurity. Yet, with the volume of cyber attacks increasing, professionals have developed a more holistic approach to cybersecurity. This development has led to the creation of cyber risk management. You may be wondering whether the distinction between cyber risk management and cybersecurity is necessary, and the answer is yes.
more →
Ordr, Tuesday, August 22,2023
Gartner analysts have been busy publishing several Hype Cycles recently. If you're not familiar with the Gartner Hype Cycle, it is a graphic representation of the maturity lifecycle of new technologies, and there are several key reports to help security leaders with their strategy and investments.
more →
Hypr, Tuesday, August 22,2023
Authentication security remains a significant vulnerability in most organizations' security posture. Even individuals without technical expertise can easily acquire and employ pre-made hacking tools. Microsoft, for instance, fends off an astonishing 1,000 authentication attacks a second.
more →
HelpNet Security, Tuesday, August 22,2023
Open-Source Intelligence (OSINT) refers to gathering, assessing, and interpreting public information to address specific intelligence queries. All the tools listed here are available for free.
more → HelpNet Security, Tuesday, August 22,2023
In this Help Net Security interview, Kennedy Torkura, CTO at Mitigant, discusses the complexity of maintaining clear visibility into cloud environments, why it poses such a challenge for CISOs, and how they can prepare to address potential issues.
more → CIODIVE, Monday, August 21,2023
Lax security controls cause heavy damages, and security experts warn unmet basic requirements lead, time and again, to data breaches.
more →
Hypr, Saturday, August 19,2023
The Payment Card Industry Security Standards Council recently updated their Data Security Standard (PCI DSS) for protecting payment card data. The latest version, PCI DSS 4.0, introduces more than 60 new or updated requirements, with new directives around passwords and multi-factor authentication (MFA) among the most consequential.
more → Solvo, Friday, August 18,2023
In today's rapidly evolving digital landscape, where businesses are increasingly migrating their operations to the cloud, the importance of robust security measures cannot be overstated.
more →
ITPro, Thursday, August 17,2023
Attackers can already use AI to easily trick the average user, raising fears over future campaigns
more →
CSO Online, Thursday, August 17,2023
When bad actors get control of business or corporate accounts, it can be more dangerous than comprised personal or consumer accounts. Here are some ways to stop them.
more →
CSO Online, Wednesday, August 16,2023
For those hoping to avoid the pay-or-not-to-pay ransomware dilemma, there are three things to focus on that can help CISOs: create incident response plans, improve cybersecurity posture, and invest in robust backups.
more → Search Security, Monday, August 14,2023
Protecting your organization against these three common ransomware attack entryways could mean the difference between staying safe or falling victim to a devastating breach.
more → Search Security, Monday, August 14,2023
A ransomware incident response plan may be the difference between surviving an attack and shuttering operations. Read key planning steps, and download a free template to get started.
more → DARKReading, Monday, August 14,2023
MDR empowers organizations with enhanced security. Look for these four capabilities when selecting an MDR product.
more → CSO Online, Monday, August 14,2023
Compromised user accounts are often the point of entry bad actors use to invade systems; this is why passwordless adoption is getting more attention. CSO lists 10 players to help CISOs make a decision on what works for their enterprise.
more → DARKReading, Friday, August 11,2023
Strategically investing in solutions that meet you where you are makes all the difference in staying secure from cyber threats.
more → HelpNet Security, Friday, August 11,2023
Today, individual people - not businesses or government entities as a whole - are the primary targets, or entry points, for all major cyberattacks, according to Agency.
more → Security Boulevard, Friday, August 11,2023
It's time for SecOps to adapt. According to Gartner, 'even with previous advancements made in data science and analytical interventions, 'the breadth of security operations' tools and services have led to an inundation of data, disparity in tooling, and ultimately end users managing the complexities of triage and analysis across a multitude of platforms.'
more → TrueFort, Thursday, August 10,2023
A decuplet of best practices to help organizations improve security posture
more →
NIST, Tuesday, August 8,2023
This article links to public draft of the NIST Cybersecurity Framework (CSF or Framework) 2.0.
more →
HelpNet Security, Tuesday, August 8,2023
Though typically seen as a final measure, 90% of participants from a BigID survey revealed that their company would contemplate paying a ransom if it meant they could recover data and business processes, or recover them faster.
more → Search Security, Tuesday, August 8,2023
Organizations must decide whether to report ransomware incidents to the authorities and disclose them to the public. Experts weigh in on the options and best practices.
more →