2,486 articles · page 32 of 50
Search Security, Monday, July 22nd, 2024
Cloud detection and response is the latest detection and response tool. Explore how it differs from endpoint, network and extended detection and response tools.
more →
Security Boulevard, Monday, July 22nd, 2024
Your organization might have many cybersecurity defenses in place, but defenses alone are not enough to protect you from today's multi-faceted cyberattacks.
more →
Security Boulevard, Friday, July 19th, 2024
This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Threat Horizons Report that we just released.
more → Security Boulevard, Friday, July 19th, 2024
A vulnerability assessment involves identifying, classifying, and prioritizing security vulnerabilities within an IT infrastructure. This comprehensive evaluation determines if an IT system is susceptible to known vulnerabilities. It also assigns severity levels to these vulnerabilities and recommends mitigation steps as necessary.
more → CybetSaint, Friday, July 19th, 2024
Cyber risk management has taken center stage for managing and assessing cybersecurity. Security professionals who have taken a risk-first approach to replacing legacy GRC tools have done so for several reasons.
more →
Security Boulevard, Friday, July 19th, 2024
Cybersecurity stands as a pivotal element within any organization's infrastructure. Given the rising frequency of cyber threats, a strong framework is indispensable for defending against these risks. One notable solution is the NIST Cybersecurity Framework. But what is it, and how can it benefit your organization?
more → Security Boulevard, Thursday, July 18th, 2024
Integrating hybrid cloud has become a cornerstone for the DevOps team in today's rapidly evolving digital landscape. With the combination of public, on-premises and private cloud environments, DevOps teams have maximum flexibility, allowing them to deploy applications and microservices across all clouds.
more → Security Boulevard, Thursday, July 18th, 2024
In the cyber security arena, the decision to mitigate or remediate a vulnerability can be pivotal. Choosing the right action-whether to reduce the risk with temporary measures or eliminate the threat altogether-depends on a deep understanding of your current security controls, their effectiveness, and availability.
more → DARK Reading, Wednesday, July 17th, 2024
The tactic is not new, but there has been a steady increase in its use as of this spring.
more →
Security Boulevard, Wednesday, July 17th, 2024
Prevent Cyber Breaches with Cyber Threat Intelligence!
more →
Security Boulevard, Tuesday, July 16th, 2024
As we move into new business strategies or transition to new enterprise deployment models CISOs must constantly look to update the risk register and security program controls.
more → Search Security, Tuesday, July 16th, 2024
An intrusion detection system monitors (IDS) network traffic for suspicious activity and sends alerts when such activity is discovered.
more → Cloud Native Now, Tuesday, July 16th, 2024
When we think of digital identity, it is usually in terms of human beings - personal logins, usernames, passwords, and the like that enable us to access apps and services. However, a major part of digital identity is being ignored within organizations - machine identities.
more →
HelpNet Security, Tuesday, July 16th, 2024
This article provides an overview of the major data breaches we covered in 2024 so far, highlighting incidents involving Trello, AnyDesk, France Travail, Nissan, MITRE, Dropbox, BBC Pension Scheme, TeamViewer, Advance Auto Parts, and AT&T.
more →
Security Boulevard, Tuesday, July 16th, 2024
63% of organizations suffered cyberattacks due to unpatched vulnerabilities, highlighting a critical issue. However, top-tier companies consistently maintain superior security. How do they do it? Their advantage lies in a robust vulnerability management strategy, anchored by a well-defined vulnerability management lifecycle (VML).
more → CSO Online, Monday, July 15th, 2024
Meltdown and Spectre raised the alarm over vulnerabilities that attackers can exploit in popular hardware. This list, though not comprehensive, presents the most significant CPU and DRAM threats.
more →
HelpNet Security, Monday, July 15th, 2024
AuditBoard launched out-of-the-box (OOTB) self-assessment tools that enable internal auditors to easily assess and streamline conformance with the new Institute of Internal Auditors (IIA) Global Internal Audit Standards ('Standards') that go into effect January 9th, 2025.
more → Security Boulevard, Monday, July 15th, 2024
Phishing attacks are becoming increasingly sophisticated, and the latest attack strategy targeting employees highlights this evolution.
more → SecurityIntelligence, Monday, July 15th, 2024
Cybersecurity experts tell organizations that the question is not if they will become the target of a cyberattack but when.
more →
Security Boulevard, Friday, July 12th, 2024
Data protection is a top concern for businesses both large and small, and that's where NIST comes in. NIST, or the National Institute of Standards and Technology, provides a framework to help organizations manage and reduce cyber risk.
more → Security Boulevard, Friday, July 12th, 2024
Certificate Lifecycle Management (CLM) involves discovering, issuing, renewing, and revoking digital certificates, crucial for enterprise cybersecurity. Key pillars: Discover, Deploy, Revoke and Replace, Renew, Integration.
more → ComputerWorld, Thursday, July 11th, 2024
UEM has emerged as the next step in the development of enterprise mobility software, offering better management of a wider range of devices. By extending EMM capabilities to laptops and desktops, UEM tools helped enterprises make the quick move to remote work.
more →
HelpNet Security, Thursday, July 11th, 2024
In this Help Net Security interview, Chaim Mazal, Chief Security Officer at Gigamon, discusses cybersecurity preparedness measures for businesses, the impact of international inconsistencies on global operations, and the board's role in cybersecurity.
more → Gestalt IT, Thursday, July 11th, 2024
The Cybersecurity and Infrastructure Security Agency (CISA) has released a comprehensive guide to bolster operational security (OPSEC) for election officials. This guide aims to enhance the security of election infrastructure by offering detailed strategies for identifying and mitigating potential risks within the election context. This and more on The Rundown.
more →
CSO Online, Thursday, July 11th, 2024
Spending sprees, acquisitions, siloed departments, and escalating security concerns have many CISOs drowning in security solutions. Here's how to rein in the tool sprawl and ensure enhanced security as you streamline your security stack.
more → SC Media, Wednesday, July 10th, 2024
There are many significant challenges in cybersecurity -- perhaps none bigger than improving software security through more secure design and development.
more →
DARKReading, Tuesday, July 9th, 2024
In an era where cybersecurity threats are becoming increasingly sophisticated, understanding the dynamics of Security Operations Centers (SOCs) is more critical than ever.
more → Security Boulevard, Monday, July 8th, 2024
The Cybersecurity Maturity Model Certification (CMMC) is a crucial program for defense contractors. CMMC Level 2, referred to as Advanced, applies to the 80,000 organizations that handle Controlled Unclassified Information (CUI).
more → Security Boulevard, Monday, July 8th, 2024
Software security is key to the online world's survival. Collaborative efforts of cybersecurity professionals and volunteers have come together to create the OWASP web security testing guide. Malicious actors constantly threaten web applications, the backbone of many businesses. OWASP penetration testing is crucial for identifying and addressing these security vulnerabilities.
more → Security Boulevard, Monday, July 8th, 2024
In episode 337, we cover 'broken' news about the new SSH vulnerability 'regreSSHion' highlighting the vulnerability discovered in the OpenSSH protocol by Qualys and its implications.
more → SC Media, Friday, July 5th, 2024
One-time passwords (OTPs) are everywhere - we have all experienced them in our daily lives.
more → WeSecureApp, Thursday, July 4th, 2024
It's 3 am. Your phone screams. Hackers are in your system. Panic sets in. But wait! Your Blue Team has been sharpening its skills, thanks to the relentless challenges posed by the Red Team. Red Team vs Blue Team isn't just an exercise; it's a strategic advantage.
more →
Security Boulevard, Thursday, July 4th, 2024
With cybersecurity threats on the rise, it's harder than ever for organizations to adequately protect themselves, especially since any device connected to the internet poses a security risk.
more → Security Boulevard, Wednesday, July 3rd, 2024
Have you ever gotten that sinking feeling that your personal information might be out in the open? At WeSecureApp we monitor several major breaches that occurred this month, exposing a wide range of data from financial information to phone numbers.
more → APONO, Wednesday, July 3rd, 2024
As businesses continue to expand their reliance on cloud security and privileged access management, the imperative to implement least privilege access in a manner both effective and efficient cannot be overstated.
more →
ITPro, Monday, July 1st, 2024
Researchers have uncovered the first security flaw affecting OpenSSH in almost two decades, and it's a big one - here's what you need to know
more →
scytale, Monday, July 1st, 2024
The General Data Protection Regulation (GDPR) is a comprehensive data privacy law enacted by the European Union (EU) to protect the personal data of EU citizens and residents.
more →
Analytics Insight, Monday, July 1st, 2024
Scaling Your SOC: Conquering 7 Major Challenges with Comprehensive and Effective Strategies
more → Medium, Monday, July 1st, 2024
A Security Engineering Commentary from industry insider Rohan Bafna , SecOps Engineer.
more →
DARK Reading, Monday, July 1st, 2024
To be effective, managing risk demands both fast responses and strategic thinking.
more → opensourceforu, Thursday, June 27th, 2024
Traditional and off-the-shelf security tools for the cloud may lull organisations into a false sense of being safe from cyber threats. This first article in the two-part series explains why organisations must develop an 'enterprise cloud security governance strategy'.
more →
descope, Thursday, June 27th, 2024
With most businesses now having a digital presence, user identity is the new battleground for cybercriminals.
more →
Gigacom, Wednesday, June 26th, 2024
In an age where cyber threats are growing exponentially, traditional security measures are no longer sufficient. At RSAC 2024, Cisco's Jeetu Patel and Tom Gillis made a compelling case for the transformative power of AI in cybersecurity during their keynote presentation, 'The Time is Now: Redefining Security in the Age of AI.' Their insights provide a roadmap for how AI can enhance cybersecurity, moving defenses from reactive to proactive.
more →
ITProToday, Wednesday, June 26th, 2024
Passwords are still criminally insecure and can be cracked or guessed by hackers with ease, but what precautions can you take to avoid getting breached?
more → CSO Online, Wednesday, June 26th, 2024
Top IT security execs are rising in prominence, increasing their business acumen, and branching into new arenas, as they become the company's key purveyor of trust.
more → techradar.com, Tuesday, June 25th, 2024
The necessity of a multi-faceted approach
more →
Gupta Deepak, Monday, June 24th, 2024
Say goodbye to passwords! Passkeys are the next generation of authentication, offering enhanced security and convenience. Learn how passkeys work, their benefits over passwords, and why they are the future of secure online access.
more →
HelpNet Security, Monday, June 24th, 2024
Organizations continue to struggle in detecting breaches as they become more targeted and sophisticated, with more than 1 out of 3 organizations citing their existing security tools were unable to detect breaches when they occur, according to Gigamon.
more → theCUBEresearch, Saturday, June 22nd, 2024
As customers try to 'get AI right,' the need to rationalize siloed data becomes increasingly important. Data practitioners could put all their data eggs into a single platform basket, but that's proving impractical.
more →
CYPHERE, Tuesday, June 18th, 2024
The Payment Card Industry Data Security Standard (PCI DSS) is a global cornerstone for safeguarding cardholder data. PCI DSS version 4.0, the most recent iteration, emphasises a dynamic, risk-based approach to security, compelling organisations to tailor their controls to their unique environments.
more →