2,604 articles · page 47 of 53
Guardrails, Wednesday, May 3,2023
No one said being a Chief Information Security Officer (CISO) was an easy job. There are numerous concerns competing for attention from CISOs that keep them busy. One of the more pressing concerns pertains to meeting regulatory requirements for application security compliance.
more →
Radware, Wednesday, May 3,2023
Cybersecurity staff and skills shortages have been consistent trends over the past few years. According to the (ISC2) 2022 Cybersecurity Workforce Study, the 2022 global cybersecurity workforce gap stood at 3.4 million people, an increase of 26.2% from 2021. This means that not only are cybersecurity staff shortages continuing, but they are getting worse and impacting organizations' ability to fight cyberattacks.
more →
VentureBeat, Tuesday, May 2,2023
Application security provider Data Theorem, announced the release of a new report in partnership with TechTarget's Enterprise Strategy Group (ESG). ESG surveyed 397 respondents on cloud-native applications and API security and found that 92% of organizations experienced at least one API-related security incident in the last 12 months.
more →
The Register, Tuesday, May 2,2023
The Open Web Application Security Project (OWASP) is an online community that was established on September 9, 2001, by Mark Curphey, a cybersecurity expert, with the objective of mitigating cyber attacks.
more →
Search Security, Tuesday, May 2,2023
Hash-based Message Authentication Code (HMAC) is a message encryption method that uses a cryptographic key in conjunction with a hash function. It provides the server and the client each with a private key that is known only to that specific server and client, providing a more secure means of encrypting data than a simple Message Authentication Code (MAC).
more →
DTEX, Tuesday, May 2,2023
Companies worldwide spend billions of dollars on endpoint data loss prevention (DLP) technology, hoping it will protect intellectual property. In theory, it's a good idea. There's just one problem: it doesn't work.
more →
Fortra, Tuesday, May 2,2023
Think of all the different points within your organization that provide access to information. That could be your website, the mobile version of your application, your Slack instance, and so much more. It's a list that gets very long, very quickly.
more →
CSO Online, Tuesday, May 2,2023
Compromised employee personal devices and accounts can disrupt and possibly threaten business security. Getting these tools into their hands will help.
more →
The Register, Monday, May 1,2023
Security posture management gets its due at RSA
more →
ITProToday, Thursday, April 27,2023
There are a lot of things that can go wrong with DevSecOps that practitioners should be aware of and avoid.
more →
DARKReading, Thursday, April 27,2023
SEO-aided attacks, developer targeting, and malicious use of AI top the list for 2023
more →
Cloud Security Alliance (CSA), Thursday, April 27,2023
This position paper provides analysis across four dimensions: How it can benefit cybersecurity, how it can benefit malicious attackers, how ChatGPT might be attacked directly, and guidelines for responsible usage
more →
Forrester, Thursday, April 27,2023
Over the last year, I've been scared of two things. Our research teams have been planning and publishing a ton of research around Zero Trust, and since we're analysts, new terminology, and comorbid acronyms, have emerged.
more →
DARKReading, Thursday, April 27,2023
CISOs who have survived major cyber incidents recommend letting company ethos guide incident response.
more → CSO Online, Thursday, April 27,2023
Adversarial AI, ChatGPT-powered social engineering, and paid advertising attacks are among the most dangerous emerging attack methods, according to SANS Institute analysts.
more → Fortra, Wednesday, April 26,2023
A Comprehensive Guide to Understanding WAFs: How it Works, Types, and Security Models
more → SearchSecurity, Wednesday, April 26,2023
Organizations in every industry can be targets of cybercrime for profit. Get expert advice on ransomware prevention, detection and recovery in our comprehensive guide.
more → DARKReading, Wednesday, April 26,2023
The Data Security Maturity Model ditches application, network, and device silos when it comes to architecting a data security strategy.
more → HelpNet Security, Wednesday, April 26,2023
Cyberattackers leveraged more than 500 unique tools and tactics in 2022, according to Sophos.
more →
Security Boulevard, Tuesday, April 25,2023
If you are part of an app and security team, or work with sensitive data, especially those in the tech industries, or have a global consumer base, then GDPR compliance needs to be on your radar.
more → Security Intelligence, Tuesday, April 25,2023
Data breaches are a risk that every business has to prepare for. To mitigate potential risks like the loss of sensitive information, financial impact and reputational damage, organizations need to take a proactive approach to protect their data and comply with industry regulations.
more →
Enterprise Storage Forum, Tuesday, April 25,2023
When it comes to ensuring the security of your network, performing regular vulnerability scans is essential. This is the process of combing through the network for weaknesses, gaps, or loopholes in the network's software code or architecture.
more →
SearchSecurity, Tuesday, April 25,2023
Enterprises are struggling to keep up as adversary groups improve tactics. But one of the most difficult groups to defend against, according to Google and Mandiant, was a surprise.
more → SearchSecurity, Tuesday, April 25,2023
Author and chief risk officer Rich Seiersen talks about the challenges of securing cloud-native applications and how to use metrics to improve their effectiveness.
more → Security Boulevard, Tuesday, April 25,2023
While CISOs and other security leaders have never been blessed with unlimited budgets, many have recently felt the pinch as companies work to weather recent economic constraints.
more → Help Net Security, Monday, April 24,2023
Although interest in passwordless technology, which aims to eliminate the need for passwords, is relatively low, 65% of consumers are receptive to using new technology that simplifies their lives, according to 1Password.
more → RiskLens, Monday, April 24,2023
This comprehensive resource guide was compiled for cybersecurity leaders who want to secure or improve their budgets through the rest of this year and next.
more →
Help Net Security, Monday, April 24,2023
Ransomware operators have been increasingly launching frequent attacks, demanding higher ransoms, and publicly exposing victims, leading to the emergence of an ecosystem that involves access brokers, ransomware service providers, insurance providers, and ransom negotiators, according to Deepwatch.
more → Security Boulevard, Monday, April 24,2023
The Payment Card Industry Data Security Standard (PCI DSS) is a widely recognized set of security standards that organizations must comply with when handling credit card information.
more → The Enterprisers Project, Monday, April 24,2023
Thinking about an AI strategy for your organization? Here are 6 real-world examples of how this powerful technology can boost business.
more →
VentureBeat, April 22nd, 2023
Since its launch in November 2022, ChatGPT, an artificial intelligence (AI) chatbot, has been causing quite a stir because of the software's surprisingly human and accurate responses.
more → DARKReading, April 21st, 2023
Software written or acquired outside of IT's purview is software that IT can't evaluate for security or compliance.
more → Techradar.pro, April 20th, 2023
Clop has certainly left its mark on the ransomware world
more →
DARK Reading, April 20th, 2023
Organizations are planning on newer multifactor authentication methods, such as invisible MFA and passwordless, says SecureAuth in its "State of Authentication" report.
more → AiTHORITY, April 19th, 2023
Mandiant Inc., now part of Google Cloud, released the findings of its M-Trends 2023 report. Now in its 14th year, this annual report provides timely data and expert analysis on the ever-evolving threat landscape based on Mandiant frontline investigations and remediations of high-impact cyber attacks worldwide.
more →
CXOtoday.com, April 18th, 2023
In recent years, the world of cybersecurity has seen its fair share of headline-grabbing happenings: the post-pandemic shift to remote work, a former social media exec whistleblowing, the AI-driven ChatGPT phenomenon, and much more.
more →
Security Intelligence, April 18th, 2023
The debates have (mostly) stopped about whether remote work is here to stay. For many people, it's just the way we work today. However, even three years later, cybersecurity around remote work is still a top concern.
more → SearchSecurity, April 18th, 2023
Mandiant said the 2022 increase is most likely affected by the threat intelligence firm proactively investigating threat activity targeting Ukraine last year.
more → Security Boulevard, April 18th, 2023
The security threats facing organizations today have never been higher, but 'by 2026, organizations prioritizing their security investments via a continuous threat exposure management program will suffer two-thirds fewer breaches,' according to Gartner.
more → Security Boulevard, April 18th, 2023
With more than $170 billion spent on cybersecurity in 2022 (Gartner), enterprise organizations are still struggling to adequately protect their data.
more → Security Boulevard, April 18th, 2023
Cybersecurity breaches or ransomware-induced shutdowns can crush a company. Financial loss. Reputation damage. Legal penalties.
more → Solutions Review, April 18th, 2023
The editors at Solutions Review team up with ManageEngine to discuss zero trust best practices enterprises should consider in their strategy.
more →
Security Boulevard, April 17th, 2023
Cyber security is all about understanding the risk that a cyber incident may represent to your organisation and it's about understanding the level of risk you are willing to accept before taking mitigating steps.
more → The Last Watchdog, April 17th, 2023
No organization is immune to cybersecurity threats. Even the most well-protected companies can be susceptible to attacks if they are not careful about a proactive approach towards cyber security.
more →
Security Intelligence, April 17th, 2023
For decades, the IT industry relied on perimeter security to safeguard critical digital assets. Firewalls and other network-based tools monitored and validated network access. However, the shift towards digital transformation and hybrid cloud infrastructure has made these traditional security methods inadequate. Clearly, the perimeter no longer exists.
more → CSO Online, April 17th, 2023
The Cybersecurity and Infrastructure Security Agency updated its Zero Trust Maturity Model to include a new stage that could make it easier for organizations to transition to a zero-trust architecture.
more → CSO Online, April 17th, 2023
CISOs and other security practitioners can sometimes see things from a negative perspective, which is understandable given the nature of the job. But correcting how we see the role of cybersecurity can lead to much more positive outcomes.
more → Enzoic, April 15th, 2023
Many individuals' first encounter with real cybersecurity concerns come in the form of some brush with an Identity Management (IdM) issue-whether their bank details have been stolen, someone has taken out an insurance policy in their name, or they receive an alert letting them know their account has been compromised.
more →
DATAVERSITY, April 13th, 2023
According to my company's State of the SIEM survey, 97% of security professionals report being confident in their ability to stop adversaries and cyberattacks. Yet, 83% of organizations suffered more than one data breach last year. It's hard to be a security professional and not look at the glass half-empty.
more →
VentureBeat, 45026
Enterprises are struggling to manage the proliferating machine identities their organizations create. Existing methods are not scaling to secure them.
more →