Security Experts:

long dotted

NEWS & INDUSTRY UPDATES

A survey of over 600 people conducted by (CS)2AI revealed that while most ICS security incidents are caused by negligent insiders, over 12% of incidents have been attributed to nation-state actors. [Read More]
Oracle has released an out-of-band security alert for CVE-2020-14750, a critical remote code execution vulnerability affecting WebLogic Server. [Read More]
Russian interference has been minimal so far in the most tempestuous U.S. presidential election in decades. But that doesn’t mean the Kremlin can’t inflict serious damage. [Read More]
A US federal judge on Friday issued an injunction temporarily blocking an executive order by President Donald Trump aimed at banning TikTok, throwing up a legal roadblock ahead of a November 12 deadline. [Read More]
Alerts from US authorities and security researchers highlight a wave of cyberattacks on hospitals coping with rising virus infections. [Read More]
CISA, FBI and HHS warn hospitals and healthcare providers in the US of an “increased and imminent” ransomware threat, which some experts have attributed to cybercriminals from Eastern Europe. [Read More]
US President Donald Trump's administration has insisted on the need to ban TikTok due to national security concerns in a new court filing ahead of a plan to make the video app unavailable on November 12. [Read More]
Microsoft and MITRE, in collaboration with a dozen other organizations, have developed a framework designed to help identify, respond to, and remediate attacks targeting machine learning (ML) systems. [Read More]
The Epiphany Intelligence Platform from DigitalWare gathers information on every node on a network, examining both its users and connections to other nodes. [Read More]
The FDA has approved the use of a new rubric specifically designed for assigning CVSS scores to vulnerabilities found in medical devices. [Read More]

FEATURES, INSIGHTS // Risk Management

rss icon

Marc Solomon's picture
Phil Jones who, who has overseen Operations within Airbus Cybersecurity since 2016, discusses some of the key takeaways from the current crisis.
Joshua Goldfarb's picture
Some security start-ups bring much needed creative thinking and new ideas to a challenging field. Others don’t bring much of anything to the table, and in some cases, can actually harm an organization’s security posture.
Gunter Ollmann's picture
As SecOps teams increasingly take on proactive risk reduction, their vocabulary expands from security threats to include posture lapses, and posture fatigue will grow.
Idan Aharoni's picture
The threat intelligence space is filled with great vendors who can provide organizations with a lot of value in helping them protect their brand, employees and customers.
Jim Ducharme's picture
Heightened anxiety is a normal consequence of drastic change, and it’s natural for the entire organization to be stressed by the shift to a fully remote work environment.
Laurence Pitt's picture
What can we do in order to prevent the spread of fake content or reduce the risk of a targeted use of Deepfakes that could cause damage to our organization?
Joshua Goldfarb's picture
Gap analysis can serve as a wonderful driver for improving security metrics if the security team understands how to seize the opportunity it presents.
AJ Nash's picture
Once we shed the shackles of “cyber” and “threat,” we free our teams to consider a full spectrum of intelligence, including support to physical security, insider threats, procurement, mergers and acquisitions, and executive decision-making.
Fred Kneip's picture
While some forward-thinking companies have created c-suite positions for IT and security personnel such as CTOs and CISOs, these are, overall, still relatively rare.
Josh Lefkowitz's picture
The successful execution of each step of the intelligence cycle relies on the successful execution of the step that came before it.