ITProToday, Thursday, April 27,2023
Top 15 DevSecOps Worst Practices
There are a lot of things that can go wrong with DevSecOps that practitioners should be aware of and avoid.
more →
Back Issues/Search Home → Archive → Popular →
All sections ›
Archive ›
Vol 301 · Issue 4
Security — Archive · Vol 301 Issue 4
21 articles that week
DARKReading, Thursday, April 27,2023
Sans Reveals Top 5 Most Dangerous Cyberattacks For 2023
SEO-aided attacks, developer targeting, and malicious use of AI top the list for 2023
more →
Cloud Security Alliance (CSA), Thursday, April 27,2023
DOWNLOAD: Security Implications of ChatGPT
This position paper provides analysis across four dimensions: How it can benefit cybersecurity, how it can benefit malicious attackers, how ChatGPT might be attacked directly, and guidelines for responsible usage
more →
Forrester, Thursday, April 27,2023
Decoding The New Zero Trust Terminology
Over the last year, I've been scared of two things. Our research teams have been planning and publishing a ton of research around Zero Trust, and since we're analysts, new terminology, and comorbid acronyms, have emerged.
more →
DARKReading, Thursday, April 27,2023
CISO Survival Guide For Cyberattacks
CISOs who have survived major cyber incidents recommend letting company ethos guide incident response.
more → CSO Online, Thursday, April 27,2023
5 Most Dangerous New Attack Techniques
Adversarial AI, ChatGPT-powered social engineering, and paid advertising attacks are among the most dangerous emerging attack methods, according to SANS Institute analysts.
more →
Fortra, Wednesday, April 26,2023
What Is A WAF? (Web Application Firewall)
A Comprehensive Guide to Understanding WAFs: How it Works, Types, and Security Models
more →
SearchSecurity, Wednesday, April 26,2023
The Complete Guide To Ransomware
Organizations in every industry can be targets of cybercrime for profit. Get expert advice on ransomware prevention, detection and recovery in our comprehensive guide.
more →
DARKReading, Wednesday, April 26,2023
CISOs Rethink Data Security With Info-Centric Framework
The Data Security Maturity Model ditches application, network, and device silos when it comes to architecting a data security strategy.
more → HelpNet Security, Wednesday, April 26,2023
Attackers Are Logging In Instead Of Breaking In
Cyberattackers leveraged more than 500 unique tools and tactics in 2022, according to Sophos.
more →
Security Boulevard, Tuesday, April 25,2023
Why App Security Teams Need To Understand GDPR Compliance
If you are part of an app and security team, or work with sensitive data, especially those in the tech industries, or have a global consumer base, then GDPR compliance needs to be on your radar.
more →
Security Intelligence, Tuesday, April 25,2023
Leveraging SaaS Data Security And Compliance Tools
Data breaches are a risk that every business has to prepare for. To mitigate potential risks like the loss of sensitive information, financial impact and reputational damage, organizations need to take a proactive approach to protect their data and comply with industry regulations.
more →
Enterprise Storage Forum, Tuesday, April 25,2023
How To Scan For Vulnerabilities With Nmap: Steps & Definition
When it comes to ensuring the security of your network, performing regular vulnerability scans is essential. This is the process of combing through the network for weaknesses, gaps, or loopholes in the network's software code or architecture.
more →
SearchSecurity, Tuesday, April 25,2023
Google, Mandiant Highlight Top Threats, Evolving Adversaries
Enterprises are struggling to keep up as adversary groups improve tactics. But one of the most difficult groups to defend against, according to Google and Mandiant, was a surprise.
more → SearchSecurity, Tuesday, April 25,2023
Cloud-Native Security Metrics For CISOs
Author and chief risk officer Rich Seiersen talks about the challenges of securing cloud-native applications and how to use metrics to improve their effectiveness.
more → Security Boulevard, Tuesday, April 25,2023
Practical Ways To Optimize Your Security Tech Stack
While CISOs and other security leaders have never been blessed with unlimited budgets, many have recently felt the pinch as companies work to weather recent economic constraints.
more → Help Net Security, Monday, April 24,2023
Unlocking The Passwordless Era
Although interest in passwordless technology, which aims to eliminate the need for passwords, is relatively low, 65% of consumers are receptive to using new technology that simplifies their lives, according to 1Password.
more → RiskLens, Monday, April 24,2023
The CISO's Ultimate Budget Retention Playbook for 2023
This comprehensive resource guide was compiled for cybersecurity leaders who want to secure or improve their budgets through the rest of this year and next.
more →
Help Net Security, Monday, April 24,2023
Study Of Past Cyber Attacks Can Improve Organizations' Defense Strategies
Ransomware operators have been increasingly launching frequent attacks, demanding higher ransoms, and publicly exposing victims, leading to the emergence of an ecosystem that involves access brokers, ransomware service providers, insurance providers, and ransom negotiators, according to Deepwatch.
more → Security Boulevard, Monday, April 24,2023
Getting Ready for the Next Generation of PCI DSS: Version 4.0
The Payment Card Industry Data Security Standard (PCI DSS) is a widely recognized set of security standards that organizations must comply with when handling credit card information.
more → The Enterprisers Project, Monday, April 24,2023
Artificial Intelligence: 6 Ways It Improves Decision-Making
Thinking about an AI strategy for your organization? Here are 6 real-world examples of how this powerful technology can boost business.
more →