Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
U.S. FERC and NERC release a report outlining cyber incident response and recovery best practices for electric utilities. [Read More]
CISA has launched the Cyber Career Pathways Tool, which aims to lay out a career path for current and future cybersecurity professionals. [Read More]
Information security training and certification provider Offensive Security this week announced the acquisition of VulnHub, an open-source catalog of security training resources. [Read More]
Cybersecurity training company RangeForce raises $16 million in a Series A funding round. [Read More]
SecurityWeek’s Enterprise Lockdown will allow attendees from around the world to immerse themselves in a virtual world to learn about and discuss the latest cybersecurity threats and challenges facing enterprise organizations. [Read More]
New rules require critical information infrastructure operators in China to conduct cybersecurity reviews when purchasing tech products and services. [Read More]
Kaspersky has teamed up with SecurityWeek for a three-day virtual event where researchers and other industry professionals will discuss malware, exploits, threat hunting, and other interesting topics. [Read More]
The GAO has analyzed the Pentagon’s cyber hygiene initiatives and found that they are incomplete and in some cases no one is keeping track of their progress. [Read More]
SecurityWeek announced the launch of Security Summits, a new virtual event series designed to allow participants from around the globe to immerse themselves in a virtual environment to discuss the latest cybersecurity threats and challenges facing enterprise organizations. [Read More]
When state election officials gathered ahead of the last presidential election, major topics were voter registration, identity theft and ballot design. This year, the main theme is election security. [Read More]
- 1 of 16
- ››
FEATURES, INSIGHTS // Training & Certification
Everyone is familiar with the three legs of cybersecurity stool: people, processes and technology. But most companies typically invest in just one area – technology.
With the pandemic creating a massive remote work shift and consequent rises in cyber risk, finding individuals with cybersecurity skills is harder than ever.
Cyber range scenarios provide real insights into an organization’s capabilities and resilience against threats, along with the confidence to tackle them when they occur.
Change may not always be on the docket, but when it is, how can we embrace it, understand it, and work to create a constructive environment around it?
The time to get serious about metrics is long overdue. It is in this spirit that I offer five helpful tips for building meaningful security metrics.
Here are a few observations from my time at RSAC 2019 about SOAR and the cybersecurity world at large.
Cyber attackers long ago figured out that the easiest way for them to gain access to sensitive data is by compromising an end user’s identity and credentials.
We’ve seen an evolution from more traditional simulation exercises that use a Red Team to identify vulnerabilities and launch mock attacks and a Blue Team to detect and respond to attacks, to Purple Teaming exercises.
To be an outstanding cybersecurity professional, you need to think outside of the box, be intellectually curious, self-sufficient and collaborative.
Writing and documenting aren’t the most exciting activities. But they have tremendous potential, both in improving security operations and incident response, as well as in opening up a constructive dialogue.
- 1 of 4
- ››
Get the Daily Briefing
- Google Broke Australian Law Over Location Data Collection: Court
- Codecov Bash Uploader Dev Tool Compromised in Supply Chain Hack
- Cloud Forensics Firm Cado Security Raises $10 Million in Series A Funding
- Domain Name Security Neglected by U.S. Energy Companies: Report
- IBM: 44 Organizations Targeted in Attacks Aimed at COVID-19 Vaccine Cold Chain
- Reddit Launches Public Bug Bounty Program
- NSA: Russian Hackers Exploiting VPN Vulnerabilities - Patch Immediately
- US Expels Russian Diplomats, Imposes Sanctions for Hacking
- Exploit for Second Unpatched Chromium Flaw Made Public Just After First Is Patched
- Months After Hack, US Poised to Announce Sanctions on Russia
Copyright © 2021 Wired Business Media. All Rights Reserved. Privacy Policy