Management & Strategy
Why Centralizing Enterprise Security Resources is Not a Great Idea
Hi, what are you looking for?
SecurityWeek
Government
SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.
Data Protection
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.
Risk Management
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
Compliance
The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure.
Application Security
Security researchers are seeing evidence that up to 36 global organizations have been hacked via exploits against a vulnerability in SAP Business Applications that...
Malware & Threats
Contending with hostage situations is no longer something only shipping companies moving goods through pirate-infested waters must consider. With the growing threat of ransomware...
Incident Response
Verizon has published its widely anticipated 2016 Data Breach Investigations Report (DBIR), compiled by Verizon with the support of 67 contributing partners. This year’s...
Risk Management
When it comes to cybersecurity, the common tact is to build out your network defenses and then extend to endpoints. But as business becomes...
M&A Tracker
Mergers and acquisitions (M&A) can be exciting, offering companies a significant platform for growth. According to the Deloitte M&A Index 2016, global M&A activity...
M&A Tracker
Threat protection firm FireEye this week launched a new service designed to help organizations manage the risks associated with corporate Mergers & Acquisitions (M&A).
Cyber Insurance
A few months back, I was a passive observer to an interesting email thread. People on the thread were discussing a breach that was...
Data Protection
Enterprises Must go Beyond the Perimeter and Worry About the Surface Area that is Open for Attack and the Challenge of Detecting Attacks Quickly
Cyber Insurance
Incident Response
Companies in the United States aren’t confident that third-party vendors (or providers hired by their vendors) would inform them about breaches involving sensitive and...
Incident Response
Last week The Wall Street Journal reported that two major US law firms had been hacked in the summer of 2015. Why, by whom,...
Incident Response
Petya, the ransomware family recently discovered to encrypt entire hard disks, performs a two-phase encryption process, researchers have discovered.
Management & Strategy
Strategy without the ability to execute is destined to fail, and execution without forethought will face the same fate.Most individuals find it difficult to...
Data Protection
Data Science and Machine Learning Can Help Enterprises Keep Pace with Faster and More Automated Cyber Threats
Cloud Security
SAN FRANCISCO – RSA CONFERENCE 2016 - Cloud security and compliance solutions provider Qualys has announced a new solution that gathers and correlates data...
Risk Management
Security Metrics Need to Extend beyond Quantitative Factors
Incident Response
Risk Management
Facebook has paid out a total of more than $4.3 million since the launch of its bug bounty program in 2011, the social media...
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)