Cyberwarfare
In August, word spread that after the Senate rejected the Cybersecurity Act of 2012 the Obama administration was considering an executive order that would...
Hi, what are you looking for?
SecurityWeek
Data Protection
PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.
Risk Management
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
Compliance
The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure.
CISO Strategy
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
Management & Strategy
Last month, an (electronic) age old debate was rekindled by an article penned by Dave Aitel titled “Why you shouldn't train employees for security...
Privacy & Compliance
Part Two In A Series, Please See Part One - Big Data, Little Devices: Security Analytics Enable Health Care Transformation
Incident Response
How Can Today’s IT Managers Prepare and Recover From a Certificate Authority Breach?It is no secret that IT security breaches, data theft and attacks...
Incident Response
New Software Update to Windows Restricts Use of Certificates with RSA Keys Less Than 1024 bits in Length
Funding/M&A
IT infrastructure integrator Forsythe Technology has acquired SOS Security, a Houston, Texas-based provider of information security product to enhance its risk management capabilities.
Audits
Internal audit has to play a far more substantial role in information security to ensure organizations are following proper security procedures, according to the...
Management & Strategy
Startup to Encourage Security Information Sharing Among CISOsA new information sharing framework is in town, and the former CISO of eBay is at the...
Compliance
Part 1: Why the Star Trek Medical Tricorder Didn’t have an App Store
Management & Strategy
Many large organizations are not confident in their ability to fight off the latest salvos of advanced persistent threats, and are relying on reactive...
Cybersecurity Funding
LockPath, an Overland Park, Kanas-based provider of governance, risk and compliance (GRC) solutions, today announced that it has closed a $6 million series B...
Management & Strategy
CISOs Today Must Build a Risk-Aware Culture Where Security Awareness Permeates Every Level of the Organization...
Risk Management
How Browser Sync Features Can Pose a Risk to The Enterprise
Management & Strategy
Sun Tzu once said, “if you know your enemies and know yourself, you can win a hundred battles without a single loss.”
Cybercrime
A Higher Education Student Database is an Identity Thief’s Dream Come True...No more fertile ground for security breaches exists in the United States than...
Data Protection
Each year, security experts and IT experts take a hard look at the threats that dominated in years past in an effort to prepare...
Data Protection
A Russian security firm, using a combination of TCP scans and Google, found that nearly a quarter of the organizations running vulnerable versions of...
Data Protection
Big Data Means Exposing More Data to Internal Misuse or Accidental Exposure, and Exposing More Data to a Successful Attacker
Data Protection
High Profile Breaches Create a Misguided Belief That SMBs are Immune from Attacks Because They Are Small Fish in a Big Ocean.
Learn how to address potential risks and not restrict AI adoption in your organization. See what a centralized AI gateway is and how it works in practice.
RegisterJoin as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
RegisterExpert Insights
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)