Security Experts:

long dotted

NEWS & INDUSTRY UPDATES

Adobe patches a security flaw in the RoboHelp Server product, warning that corporate environments are exposed to arbitrary code execution attacks. [Read More]
The U.S. Treasury Department slaps sanctions against the Chatex cryptocurrency exchange and offers multi-million-dollar rewards for information on the REvil ransomware gang. [Read More]
Since mid-September, at least nine global entities across multiple sectors were compromised in attacks exploiting a ManageEngine ADSelfService Plus security flaw. [Read More]
Electronic Warfare Associates said its email system was compromised in August by hackers who stole social security numbers and other personally identifiable information. [Read More]
As cybersecurity valuations soar, Drata banks $100 million in a funding deal that values the company north of $1 billion. [Read More]
The $10 million Series A funding round was led by Gula Tech Ventures and Paladin Capital Group [Read More]
Software supply chain security jitters escalated again Friday with new “critical severity” warnings about malware embedded in two npm package managers with millions of weekly downloads. [Read More]
Cisco patches vulnerabilities that could be exploited to login remotely using default debugging credential, or execute arbitrary commands without authentication. [Read More]
Laika plans to use the new funds to add audit experiences to the platform, build additional automation, and extend growth and momentum on the market. [Read More]
The FBI says ransomware operators leverage information on mergers, acquisitions and stock valuations to target and extort companies. [Read More]

FEATURES, INSIGHTS // Compliance

rss icon

Jalal Bouhdada's picture
Jalal Bouhdada, Founder and Principal ICS Security Consultant at Applied Risk, discusses the implications of the new EU Directive on Security of Network and Information Systems (NIS)
Steven Grossman's picture
Why do we seem to need layer upon layer of regulation and guidance to try to ensure a more secure business world? Is it working?
Travis Greene's picture
Reducing the amount of personal data subject to GDPR is a critical step towards minimizing the amount of risk that GDPR will expose.
Steven Grossman's picture
The PCI DSS 3.2 should greatly help companies reduce third party vendor risk, and is starting to shift from just a check-the-compliance-box activity to a more continuous compliance model.
Travis Greene's picture
To understand why return on Access Governance is lower versus other security technologies, we first need to understand why Access Governance is implemented in the first place.
Torsten George's picture
To achieve continuous compliance and monitoring, organizations are forced to automate many otherwise manual, labor-intensive tasks.
Torsten George's picture
The NIST Cybersecurity Framework is an important building block, but still just the first step towards implementing operationalized defenses against cyber security risks.
James McFarlin's picture
U.S tech giants are playing a game of high-stakes global brinksmanship around who has rights to control their data, which impacts their European growth prospects, business models, and ultimately stock valuations.
Mark Hatton's picture
The oversight for the protection of healthcare information is only getting tighter, and it is incumbent upon the security teams to ensure healthcare professionals have all the tools necessary to improve patient outcomes, while we worry about keeping the bad guys away.
Nimmy Reichenberg's picture
With the release of PCI-DSS 3.0, organizations have a framework for payment security as part of their business-as-usual activities by introducing more flexibility, and an increased focus on education, awareness and security as a shared responsibility.