2,486 articles · page 42 of 50
HelpNet Security, Friday, August 11,2023
Today, individual people - not businesses or government entities as a whole - are the primary targets, or entry points, for all major cyberattacks, according to Agency.
more →
Security Boulevard, Friday, August 11,2023
It's time for SecOps to adapt. According to Gartner, 'even with previous advancements made in data science and analytical interventions, 'the breadth of security operations' tools and services have led to an inundation of data, disparity in tooling, and ultimately end users managing the complexities of triage and analysis across a multitude of platforms.'
more →
TrueFort, Thursday, August 10,2023
A decuplet of best practices to help organizations improve security posture
more →
NIST, Tuesday, August 8,2023
This article links to public draft of the NIST Cybersecurity Framework (CSF or Framework) 2.0.
more →
HelpNet Security, Tuesday, August 8,2023
Though typically seen as a final measure, 90% of participants from a BigID survey revealed that their company would contemplate paying a ransom if it meant they could recover data and business processes, or recover them faster.
more → Search Security, Tuesday, August 8,2023
Organizations must decide whether to report ransomware incidents to the authorities and disclose them to the public. Experts weigh in on the options and best practices.
more →
DARKReading, Monday, August 7,2023
Akamai Technologies released a new State of the Internet report that spotlights the evolving ransomware landscape.
more →
HelpNet Security, Friday, August 4,2023
Cybersecurity agencies from member countries of the Five Eyes intelligence alliance have released a list of the top 12 vulnerabilities routinely exploited in 2022, plus 30 additional ones also 'popular' with attackers.
more → DataCenterKnowledge, Friday, August 4,2023
During the first half of 2023, Data Center Knowledge readers sought information on trending risks, securing the cloud, and the role of AI in data center security.
more →
Security Boulevard, Friday, August 4,2023
To combat sophisticated and relentless threats effectively, organizations must adopt a collaborative approach that goes beyond their individual security measures. Threat intelligence sharing has emerged as a powerful strategy to enhance cybersecurity defenses by leveraging the collective knowledge and insights of the cybersecurity community.
more → DARKReadimg, Friday, August 4,2023
Tailor your business project proposal to suit the language your company's CISO speaks, be it business, technical, or compliance. Do your research first and gather support from around the company.
more → Security Boulevard, Thursday, August 3,2023
In today's fast-paced world, businesses are always looking for ways to become more efficient, productive and profitable across every department - including security. The security operations center (SOC) must constantly keep pace with an ever-growing list of threats and alerts to triage.
more → DARKReadimg, Thursday, August 3,2023
Rare government, industry alignment on AI threats means we have an opportunity to make rapid strides to improve cybersecurity and slip the hold cybercriminals have on us.
more → Security Boulevard, Monday, July 31,2023
There was once a day and age when castles and moats were considered cutting-edge defense strategies. Now, in our digital and cloud-first world, it's safe to say that times have changed.
more → Business 2 Community, Monday, July 31,2023
Firstly, what exactly is phishing?
more →
HelpNet Security, Friday, July 28,2023
The majority of organizations are on the road to implementing a zero trust framework to increase their overall security risk posture, according to PlainID. However, only 50% said that authorization makes up their zero trust program - potentially exposing their infrastructure to threat actors.
more → appviewx, Thursday, July 27,2023
Identity and Access Management (IAM) enhances security by ensuring that only authorized humans and machines have access to sensitive information and resources.
more →
Gestalt IT, Wednesday, July 26,2023
Cybersecurity remains a critical concern, dominating headlines with its persistent threats and sophisticated attacks. Recent incidents, such as the stolen Microsoft keys and the ongoing MOVEit file transfer hack, exemplify the complexity and severity of security breaches.
more →
DARKReading, Wednesday, July 26,2023
Enterprises must now describe their management's expertise in cybersecurity. But what exactly does that entail?
more → VentureBeat, Monday, July 24,2023
CISOs face a tough balancing act. They must protect new digital transformation strategies that deliver revenue, and keep fragmented legacy systems secure. At the same time they have to battle the siege on identities, and get more work done with a smaller cybersecurity staff.
more →
LeadsID, Friday, July 21,2023
In the fast-paced digital world we live in, cybersecurity is a major concern for businesses everywhere. While we often hear about external cyber threats, it's essential not to overlook the risks posed by those within the organization.
more →
axiad, Friday, July 21,2023
A recent Axiad/ESG survey found that 82% of respondents indicate that moving to passwordless authentication is a top-5 priority. This shows organizations understand how critical passwordless authentication is today, but many are getting hung up on how to get there.
more →
HelpNet Security, Friday, July 21,2023
U.S. enterprises are responding to growing cybersecurity threats by working to make the best use of tools and services to ensure business resilience, according to ISG.
more → ITProToday, Wednesday, July 19,2023
In the first half of 2023, cybersecurity practices faced new challenges amid the meteoric rise of AI. Here's a midyear roundup of our most-read articles about cybersecurity.
more →
Enzoic, Wednesday, July 19,2023
As we become more connected in the digital age, data security becomes increasingly critical. For organizations around the world, the responsibility of protecting data has become a paramount concern, particularly when this data pertains to EU citizens.
more →
DARKReading, Wednesday, July 19,2023
As companies navigate how to protect themselves from the onslaught of increasingly sophisticated fraud threats, artificial intelligence will be a critical piece of next-gen authentication.
more → Scytale, Monday, July 17,2023
In today's digital landscape, admin accounts, service accounts, and break glass accounts have become synonymous with privileged access and elevated privileges in the IT environment.
more →
Click Armor, Monday, July 17,2023
With summer in full swing, it's a good time for your employees to review remote work cyber security rules and guidelines. During these months many employees are trying to get more work done at home (or at the cottage).
more →
PowerDMARC, Friday, July 14,2023
By March 2025, DMARC implementation will be mandatory in PCI Data Security Standards version 4.0. DMARC, recommended by the PCI SSC as a future-dated requirement, protects companies from email-based attacks like phishing. After the deadline, companies processing card data must implement DMARC for robust email authentication.
more →
Virtualization Review, Thursday, July 13,2023
A new survey-based report sheds light on how "hackers" use generative AI, though in this case those hackers are bug hunters wearing white, not black, hats.
more →
InformationWeek, Thursday, July 13,2023
Chief information security officers are relative newcomers to the C-suite. Many organizations employ CISOs, and it is well-known enough to have its own acronym. But it isn't a given in all C-suites: forty-five percent of 130 respondents to 2021 survey from software company Navisite reported that their companies did not have a CISO.
more →
AppOmni, Wednesday, July 12,2023
Previous security breaches at Heroku and GitHub serve as stark reminders that OAuth token theft and inactive, overly permissive SaaS-to-SaaS connections represent significant security risks to any organization.
more →
TrueFort, Wednesday, July 12,2023
Organizations need to manage technical debt, but why, and what is the best process for successful mitigation?
more → Cavelo, Wednesday, July 12,2023
Did you know that your company's employees are your biggest cybersecurity risk? In fact, 52 percent of businesses admit that employees are their biggest weakness in IT security.
more →
CIO, Wednesday, July 12,2023
Businesses will find that robust, built-in network support for Zero Trust and SASE frameworks can provide the protection required by today's digital transformation.
more →
DARKReading, Tuesday, July 11,2023
As organizations struggle to keep up with new regulations and hiring challenges, chief information security officers share common challenges and experiences.
more → Menlo Security, Tuesday, July 11,2023
Whether it's the push for fully remote work, in-office work, or a hybrid workstyle, the conversation around how and where employees will work continues. But guess what? To cybercriminals, this conversation doesn't really matter.
more →
TrustCloud, Friday, July 7,2023
SOC 2 (Service Organization Control 2) provides a framework for assessing and reporting on the security, availability, processing integrity, confidentiality, and privacy of systems and data of service organizations. It was developed by the American Institute of Certified Public Accountants (AICPA) to address the need for consistent and comprehensive security and privacy controls in service organizations.
more →
Solutions Review, Friday, July 7,2023
Myths around SIEM (Security Information and Event Management) can hinder a successful deployment. By debunking these myths, organizations gain a realistic understanding of what SIEM solutions can and cannot accomplish.
more →
Truefort, Thursday, July 6,2023
Why every organization should be concerned about insider risk cybersecurity and what we can do about it
more → ManagedMethods, Thursday, July 6,2023
Cybersecurity threats are a constant problem in today's digital world. But, for the U.S. school system, it's an especially serious concern.
more →
HelpNet Security, Thursday, July 6,2023
Computer scientists at the University of Waterloo have discovered a method of attack that can successfully bypass voice authentication security systems with up to a 99% success rate after only six tries.
more → CIODIVE, Wednesday, July 5,2023
Generative AI can be an ally for new security professionals. For more seasoned security analysts, it can offer time to refine their skills through automation of repetitive tasks.
more →
FORTRA, Wednesday, July 5,2023
The Payment Card Industry Data Security Standard (PCI DSS) has always been a massive security undertaking for any organization that has worked to fully implement its recommendations.
more →
DARKReading, Wednesday, July 5th, 2023
When it comes to enterprise risk, third-party cybersecurity risks have increased substantially in recent years. By implementing an effective third-party risk management program, organizations can mitigate much of their risk and better protect themselves from attacks that emanate from third parties. The key word here is "effective."
more → Architecture & Governance Magazine, Monday, July 3,2023
The concept of Zero Trust is 'never trust, always verify' so that in a Zero Trust Architecture (ZTA) every access request is regarded as potentially hostile and so needs to be authenticated, authorised and continually validated.
more →
TechCrunch, Thursday, June 29,2023
Hackers have compromised the personal data of more than 15.5 million individuals by exploiting a security vulnerability in the MOVEit file transfer tool, and the number of victim organizations continues to grow.
more →
Security Boulevard, Wednesday, June 28,2023
In the ever-evolving landscape of cybersecurity, organizations face a constant battle against hackers and data breaches. The role of the Chief Information Security Officer (CISO) is crucial in safeguarding digital assets and mitigating risks.
more → Solutions Review, Wednesday, June 28,2023
Debunking storage security myths helps organizations align their security practices with the current threat landscape. The cybersecurity landscape is constantly evolving, with new vulnerabilities, attack vectors, and techniques emerging regularly.
more → TechRepublic, Tuesday, June 27,2023
DLP helps organizations protect their sensitive data. Learn about the best practices and tools available to prepare for and prevent data loss.
more →