AWS News, Thursday, June 8,2023
Top 10 Risky Behaviours Of Employees
With data from its SecurityCoach product, KnowBe4 has revealed the top 10 risky behaviours that employees have engaged in on their work devices.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Services → Popular →
All sections ›
Archive
Security — Archive
2,604 articles · page 46 of 53
wallarm, Wednesday, June 7,2023
OWASP API Security Top-10 for 2023 Risk Ratings
As you know by now, the final version of the OWASP API Security Top-10 2023 has been released. At first blush, the final 2023 release seems to retain most of the changes in category naming, language and intent from the 2019 edition which we saw in the RC version.
more →
Red Hat News, Monday, June 5,2023
Gartner Identifies Four Myths Obscuring Cybersecurity's Full Value
Analysts Discuss How CISOs Can Maximize Security Effectiveness at the Gartner Security & Risk Management Summit, June 5-7 in National Harbor, Maryland
more →
CSO Online, Monday, June 5,2023
10 Notable Critical Infrastructure Cybersecurity Initiatives In 2023
How vendors, governments, industry bodies, and nonprofits are contributing to increasing the cyber resilience of critical national infrastructure this year.
more →
CISO MAG, Monday, June 5,2023
API Security: Best Practices For Vulnerability Mitigation
Learn how to secure APIs with our practical guide to vulnerability mitigation. Covering OWASP top 10 API vulnerabilities, authentication, testing, and more. Ideal for developers and security pros. Download the whitepaper now.
more →
Deepak Gupta, Friday, June 2,2023
Why Is Identity Security Awareness Becoming The Need Of The Hour?
Discover why identity security awareness is crucial in today's digital landscape. Learn how to protect yourself and your business from cyber threats. Read more now.
more →
Avast, Friday, June 2,2023
The Rise And Fall Of Ransomware: Insights From Avast's Q1/2023 Threat Report
Ransomware has been a prominent threat in cybersecurity for more than a decade, but the rates of incidents are showing slight decline. The Avast Q1/2023 Threat Report examines why.
more →
Security Boulevard, Thursday, June 1,2023
What is the Gartner Hype Cycle for Security Products? Demystifying the Hype Cycle for CDR
In information security, technologies change very quickly. Security has a fast cycle of innovation: product builders launch new products quickly, adapting to the needs of the market and cybersecurity defenders, with the expectation that these products and solutions will mature and become widely adopted across various industries over time.
more →
Security Boulevard, Thursday, June 1,2023
What Is Data Loss Prevention (DLP)? And How Low-Code Security Automation Can Help
Data is the lifeblood of companies. It drives decision-making, fuels innovation and holds immense value. However, the increase in data also presents significant challenges, particularly in ensuring its security and preventing unauthorized access or loss.
more → SiliconANGLE , Thursday, June 1,2023
AI vs. Adversaries: How Machine-Leveraged Attacks Drive The Need For Advanced Security
AI vs. adversaries: How machine-leveraged attacks drive the need for advanced security
more →
CSO Online, Wednesday, May 31,2023
What Is Federated Identity? How It Works And Its Importance To Enterprise Security
Federated identity can be hugely beneficial for creating a solid user experience and better security, but it can be more costly and complex to implement.
more → Solutions Review, Wednesday, May 31,2023
9 MDR Key Features Your Enterprise Solution Should Have
MDR (Managed Detection and Response) is an advanced security service that combines proactive threat hunting, real-time monitoring, incident response, and continuous improvement to enhance the security posture of enterprises.
more →
Solutions Review, Wednesday, May 31,2023
7 Common EDR Deployment Mistakes And How To Resolve Them
The editors at Solutions Review examine some common EDR deployment mistakes and how you and your team can avoid them.
more → Red Hat News, Tuesday, May 30,2023
PCI DSS 4.0: How to Delight the Auditors
While we all know the actual point of PCI is vastly more far-reaching, we can't deny that the juggernaut of PCI DSS 4.0 compliance is getting past the auditors.
more →
sonrai, Tuesday, May 30,2023
9 Common IAM Risks & How To Mitigate Them
If Identity and Access Management is on your mind, you're not alone. Recognizing a weak point and seeking out stronger protections is the first step to securing your environment. Anecdotally, many industry practitioners express IAM to be one of their greatest challenges. Let's explore why that's the case.
more →
DARKReading, Monday, May 29,2023
Top Cyberattacks Revealed In New Threat Intelligence Report
We recognize that in today's world, security leaders must expand their focus beyond technologies and their vulnerabilities. To effectively manage risk, security leaders must continually analyze the global threat landscape and understand how business decisions can influence their organization's threat profile.
more →
SiliconANGLE , Monday, May 29,2023
The Top 10 Endpoint Security Challenges And How To Overcome Them
One of the main reasons companies keep being breached is that they don't know how many endpoints are on their networks and what condition those endpoints are in.
more →
iapp, Friday, May 26,2023
GDPR at Five
Since becoming applicable 25 May 2018, the EU General Data Protection Regulation propelled data protection and privacy to unprecedented and profound prominence, both within the EU and internationally.
more →
ITProToday, Thursday, May 25,2023
Why IT Operations Teams Should Embrace Context-Aware Security
Context-aware security can be a win-win. Here's why using it is beneficial to both your organization's end users and IT team.
more →
Solutions Review, Wednesday, May 24,2023
What To Consider When Building An Autonomous SOC
Solutions Review's Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Gunter Ollmann of Devo offers a crash course on autonomous SOC, laying down the foundation on what to consider when building yours.
more → FORTRA, Wednesday, May 24,2023
Security Awareness Training (SAT) Is Finally Having Its Day. Here's Why.
Cybersecurity awareness is on the rise as more organizations adopt security awareness training programs. Why the hype? In several recent reports, we break down our findings around why SAT is on the rise-and why companies need it now more than ever.
more →
SecurityIntelligence, Wednesday, May 24,2023
CISA, NSA Issue New IAM Best Practice Guidelines
The Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) recently released a new 31-page document outlining best practices for identity and access management (IAM) administrators.
more →
DARKReading, Wednesday, May 24,2023
5 Questions To Ask When Evaluating A New Cybersecurity Technology
Any new cybersecurity technology should be not just a neutral addition to a security stack but a benefit to the other technologies or people managing them.
more → Continuity Central, Wednesday, May 24,2023
#StopRansomware Guide Released by National Security Agency
The US National Security Agency (NSA) has published an updated guide to assist organizations with protecting against ransomware attacks.
more →
DCIG, Thursday, May 18,2023
Time Taken For Hackers To Crack Passwords Revealed
New Specops Software research has unearthed the length of time it takes modern attackers to brute force user passwords. Plain text password storage is rare in these modern times, requiring attackers to adopt password cracking methods to make use of the majority of (hashed) password leaks.
more → DARKReading, Thursday, May 18,2023
10 Types Of AI Attacks CISOs Should Track
Risk from artificial intelligence vectors presents a growing concern among security professionals in 2023.
more → Security Boulevard, Tuesday, May 16,2023
What The White House's Cybersecurity Strategy Means For CISOs
Cybersecurity is a huge concern. Businesses and individuals stand to lose a lot of time and money in the event of an unauthorized exposure or corruption of sensitive data. And lately, these types of attacks have started impacting businesses that affect the entire population.
more → Sectrio, Monday, May 15,2023
Role Of Threat Intelligence In Ot Security: Best Practices And Use Cases
In today's interconnected world, operational technology (OT) systems play a crucial role in industries such as manufacturing, energy, and transportation. However, with increased connectivity comes the risk of cyber threats targeting these critical infrastructures.
more →
Security Boulevard, Monday, May 15,2023
Survey: Most CISOs Feel Their Business Is At Risk For Cyberattack
A new report from Proofpoint provides global insight into CISOs' challenges, expectations and priorities for 2023.
more →
Security Boulevard, Friday, May 12,2023
Identity Governance: Right People, Right Access, Right Time
Enterprise companies are increasing spending on software-as-a-service (SaaS) tools to enhance employee productivity and drive digital transformation projects.
more → HelpNet Security, Friday, May 12,2023
Top 3 Trends Shaping The Future Of Cybersecurity And IAM
The need to protect sensitive information from unauthorized access and theft has never been greater, and cybersecurity and IAM technologies are evolving to meet this challenge while providing users with more convenience.
more →
Security Boulevard, Thursday, May 11,2023
Advice From The ISACA Ransomware Response Checklist
A decade ago, most companies realized that being hit with a data breach was inevitable-the well-known 'when, not if' statement drove that idea home.
more → BOLSTER, Thursday, May 11,2023
What Are Lookalike Domains & How To Detect Them
Lookalike domains are fraudulent domains that mimic legitimate ones in order to trick users into divulging sensitive information or downloading malware. These domains can be used for phishing attacks, domain name spoofing, and other malicious activities.
more →
Solutions Review, Wednesday, May 10,2023
5 Facts About The Future Of Cybersecurity
Today's attackers have become increasingly elusive by generally just using stolen credentials or looking for misconfigured systems. With the evolving nature of the cyber landscape, they are taking advantage of the current geopolitical climate to exploit new areas of business operations.
more → Security Boulevard, Wednesday, May 10,2023
Open Source Threat Intelligence Tools & Feeds: A Complete 2023 List
The rapidly evolving cyber threat landscape demands constant vigilance from organizations seeking to protect their digital assets.
more → SearchSecurity, Wednesday, May 10,2023
5 Sbom Tools To Start Securing The Software Supply Chain
Organizations can use these SBOM tools to help secure their software supply chain by understanding the components of their deployed software and applications.
more →
ReversingLabs, Wednesday, May 10,2023
What's behind SBOM skepticism? One word: Fear
In this ConversingLabs Cafe interview, Josh Corman, founder of I Am The Cavalry, talks about what's behind industry skepticism around software bills of materials.
more →
HelpNet Security, Wednesday, May 10,2023
Refined Methodologies Of Ransomware Attacks
Adversaries were able to encrypt data in 76% of the ransomware attacks that were conducted against surveyed organizations, according to Sophos.
more → Cloud Native Now, Wednesday, May 10,2023
8 Tips For Successful Container Vulnerability Scanning
Container vulnerability scanning is a critical part of container security. It involves inspecting container images and their components to identify potential security issues, weaknesses or vulnerabilities.
more →
Search Security, Tuesday, May 9,2023
Hypervisor Security
Hypervisor security is the process of ensuring the hypervisor -- software that enables virtualization -- is secure throughout its lifecycle. Common security practices for hypervisors include limiting users in a local system, reducing attack surfaces and keeping systems updated.
more → flare, Tuesday, May 9,2023
9 Open Source Threat Intelligence Sources
Keeping up with cybersecurity news is a challenge. From newly discovered vulnerabilities to new attack methodologies, you live a life of 'need to know' when ability to find is difficult. As a security professional, knowing is more than half the battle.
more →
CloudTech, Tuesday, May 9,2023
IT And Security Pros Face Increased Workload Due To Hybrid/Virtual Work Adoption
Duncan is an award-winning editor with more than 20 years experience in journalism. Having launched his tech journalism career as editor of Arabian Computer News in Dubai, he has since edited an array of tech and digital marketing publications, including Computer Business Review, TechWeekEurope, Figaro Digital, Digit and Marketing Gazette.
more →
AWS News, Tuesday, May 9,2023
Threat Intelligence Management: Best Practices
Security teams rely on threat intelligence like a ship's captain relies on a lighthouse. The information enables them to see new risks and steer clear of known threats. While threat intelligence provides benefits, many security teams struggle to use it effectively.
more →
Ckick Armor, Friday, May 5,2023
Security Culture: What Is It And How Can You Improve It To Protect Your Business?
Security culture is the key to protecting your business from phishing and social engineering attacks. Without it, implementing successful training and having prepared employees is nearly impossible.
more →
LeaksID, Friday, May 5,2023
10 Unusual Insider Threat Behavioral Indicators
In today's digital age, the risk of insider threats has become increasingly common. Insider threats can be actions taken by employees, contractors, or partners who intentionally or unintentionally compromise the confidentiality, integrity, or availability of sensitive information.
more →
CXOtoday.com, Thursday, May 4,2023
What The Phish! Bye-Bye Passwords
Twitter co-founder and chief executive officer (CEO) Jack Dorsey has stepped down from his position, ending his nearly 16-year stint with the social media giant. The company's Board has unanimously appointed Twitter's chief technology officer (CTO) Parag Agrawal as his successor.
more →
DARKReading, Thursday, May 4,2023
The Critical Importance Of Creating Secure Passwords
Almost everyone is connected to the internet in some form, and while the internet is a wonderful opportunity - full of offerings for people from all walks of life, it's more important than ever for us to be #CyberFit and smart about cyber protection.
more → DTEX, Thursday, May 4,2023
Insider Risk Detection 101: Mitigating Unintentional Insider Threats
According to the Ponemon Institute's 2022 Cost of Insider Threats Global study, the overall number of insider threat incidents jumped by 44% in the past two years, with non-malicious insiders driving 56% of incidents that cost organizations an average of $484,931 per incident.
more →
Fortra, Thursday, May 4,2023
Cybersecurity - Change Is Coming And That's A Good Thing
Those words were spoken by the US National Security Advisor way back in 2005, and it is remarkable to see how prescient they were. The economy is not only supported by the cyber world, but that world is entirely data driven. Data has become a primary focus, not just for regulatory fodder, but for business survival.
more → DARKReading, Wednesday, May 3,2023
Anatomy Of A Malicious Package Attack
Malicious packages are hard to avoid and hard to detect - unless you know what to look for.
more →