Security Experts:
LATEST SECURITY NEWS HEADLINES
NEWS & INDUSTRY UPDATES
Senators have recently introduced and reintroduced bills whose goal is to help the U.S. government address the shortage of cybersecurity expertise. [Read More]
(ISC)² has increased the annual fee for its CISSP certification for security professionals by 47%, but members who hold will multiple certifications will benefit. [Read More]
Alphabet’s Jigsaw unit has published a quiz that tests users’ ability to identify phishing attacks and teaches them what signs to look for to determine if a message is legitimate or not. [Read More]
PCI Security Standards Council (PCI SSC) publishes new security standards for the design and development of payment software. [Read More]
The 2018 (ISC)2 Cybersecurity Workforce Study shows the workforce gap now stands at more than 2.9 million workers globally -- with 2.14 million cybersecurity staff required in the Asia-Pacific region, and almost half a million required in North America. [Read More]
Security awareness training firm KnowBe4 has added a Virtual Risk Officer (VRO), a Virtual Risk Score (VRS), and Advanced Reporting (AR) features to its security awareness training and simulated phishing platform. [Read More]
Democrat Congresswoman Jacky Rosen introduces Cyber Ready Workforce Act, a new bill that aims to address the cybersecurity workforce shortage [Read More]
The idea of a professional body to raise and maintain cybersecurity standards is good – but there are many concerns over how it may be implemented. [Read More]
U.S. Justice Department’s Cyber-Digital Task Force publishes first report, covering the threat to elections, cybercrime schemes, FBI’s role in incident response, and cyber personnel recruitment [Read More]
"Our society has not yet embraced cybersecurity as a civilization-defining competency, yet it is exactly central to our capacity to function in this massively technological age," ProtectWise CTO Gene Stevens told SecurityWeek. [Read More]
- 1 of 13
- ››
FEATURES, INSIGHTS // Training & Certification
Here are a few observations from my time at RSAC 2019 about SOAR and the cybersecurity world at large.
Cyber attackers long ago figured out that the easiest way for them to gain access to sensitive data is by compromising an end user’s identity and credentials.
We’ve seen an evolution from more traditional simulation exercises that use a Red Team to identify vulnerabilities and launch mock attacks and a Blue Team to detect and respond to attacks, to Purple Teaming exercises.
To be an outstanding cybersecurity professional, you need to think outside of the box, be intellectually curious, self-sufficient and collaborative.
Writing and documenting aren’t the most exciting activities. But they have tremendous potential, both in improving security operations and incident response, as well as in opening up a constructive dialogue.
Attended by roughly 40,000 people, RSA Conference 2016 was the biggest ever. Here are some observations on security trends observed at the event that took place last week at the conference.
Cyber Threat Intelligence (CTI) is critical for organizations that want to gain a comprehensive, tailored and relevant view of the potential threats and types of attackers that could be targeting them.
The ability to recruit the right person for an application security role who can also find the flaws is a struggle for many organizations. These job openings rarely get filled.
The global cybersecurity skills shortage isn’t going away any time soon. But by attacking it on multiple fronts we can proactively work to address it
Starting your own private ISAC is easier and more important long-term than you might think.
- 1 of 3
- ››
SecurityWeek Daily Briefing
- French Authorities Release Free Decryptor for PyLocky Ransomware
- Vulnerabilities Expose BD Infusion Therapy Devices to Attacks
- Vulnerabilities in Thunderbird Email Client Allow Code Execution
- Canadian City Loses $500,000 to Phishing Attack
- Hackers Behind 'Triton' Malware Target Electric Utilities in US, APAC
- Another World Password Day Has Passed and Little Has Changed
- New API Changes How Ad Blockers Work in Chrome
- Amid Privacy Firestorm, Facebook Curbs Research Tool
- Yubico Replacing YubiKey FIPS Devices Due to Security Issue
- New Malware Lays P2P Network on Top of IPFS’
Copyright © 2019 Wired Business Media. All Rights Reserved. Privacy Policy