16 articles that week
Security Boulevard, Friday, September 20th, 2024
If you've spent any length of time reading about the internationally accepted security framework laid out in ISO 27001, you've likely come across the term ISMS or Information Security Management System. You may wonder, though; what is the ISMS specifically, how do you set one up, and what does it do for your business? Let's talk about it.
more →
SecurityIntelligence, Friday, September 20th, 2024
In 2023, the Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team operation against an FCEB (Federal Civilian Executive Branch) organization. In July 2024, CISA released a new CSA that detailed the findings of this assessment along with key findings relevant to the security of the organization's network.
more →
Security Boulevard, Thursday, September 19th, 2024
The firehose of security incidents - data breaches, ransomware, and supply chain attacks - often obscures the methods that attackers use to create these incidents. One of the most common is credential stuffing, which is a type of authentication-related attack that leads to account takeovers (ATO) and ultimately theft or fraud.
more → SearchSecurity, Thursday, September 19th, 2024
DNS is a key component in any enterprise network. Auditing DNS servers and encrypting DNS traffic are just two of the steps to take to protect your organization's DNS deployment.
more →
Security Boulevard, Thursday, September 19th, 2024
Over the past century, international printing machinery manufacturers like Komori have had to innovate because of the internet. As a manufacturer, they rely on the distribution chain for the overall success of their companies.
more → DARKReading, Thursday, September 19th, 2024
By enhancing threat detection, enabling real-time risk assessment, and providing predictive insights, AI is empowering organizations to build more robust defenses against cyber threats.
more →
Analytics Insight, Wednesday, September 18th, 2024
SecOps vs. DevOps: Understanding the key differences in modern IT security practices
more →
Security Boulevard, Wednesday, September 18th, 2024
You think you've nailed your third-party risk management (TPRM) strategy. You've assessed your vendors, reviewed their security postures, and your risk dashboard is looking pretty green.
more → Security Boulevard, Wednesday, September 18th, 2024
The Payment Card Industry Data Security Standard (PCI DSS) is a comprehensive set of security requirements that protect cardholder data from unauthorized access, misuse, and fraud. DMARC (Domain-based Message Authentication, Reporting, and Conformance) implementation will become mandatory for the payments industry by March 2025.
more → Security Boulevard, Tuesday, September 17th, 2024
The cybersecurity landscape is undergoing a significant shift. Traditionally, security operations centers (SOCs) relied on a complex ecosystem of disparate tools from various vendors.
more → HelpNet Security, Tuesday, September 17th, 2024
In this Help Net Security interview, Robert Ramsey, CEO at Rain Technology, discusses the growing threat of visual hacking, how it bypasses traditional cybersecurity measures, and the importance of physical barriers like switchable privacy screens.
more →
Security Boulevard, Tuesday, September 17th, 2024
For decades, companies have struggled to modernize their legacy authorization systems, hindering security and user experience. These outdated approaches often lack the security features to protect sensitive data in today's digital world.
more → devops.com, Tuesday, September 17th, 2024
Over a decade ago, development and security were separate worlds. Dev teams would build features at breakneck speed, while security was an afterthought - a final hurdle before release. It was inefficient, frustrating, and - as it turned out - extremely risky.
more →
ITProToday, Monday, September 16th, 2024
IT security is vital for protecting systems, data, and networks. Explore strategies, critical domains, and career opportunities in protecting information assets.
more →
Security Boulevard, Monday, September 16th, 2024
The digital deception game is on track to becoming more intense. We're talking about artificial intelligence (AI) that mimics your boss's voice so well that it'll make you do a double-take; a deepfake that sends the stock market on a roller coaster, or a fake speech made by a world leader that misleads voters or instigates conflict between nations.
more → DataCenter Knowledge, Monday, September 16th, 2024
Tina D'Agostin, CEO of Alcatraz AI, shares essential practices for securing your data center in 2024.
more →