aembit, Thursday, June 6th, 2024
NIST 2.0: Securing Workload Identities and Access
The updated framework addresses the need to secure non-human identities. Here's how that can extend across the guidance's five key functions.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Services → Popular →
All sections ›
Archive
Security — Archive
2,604 articles · page 36 of 53
InformationWeek, Thursday, June 6th, 2024
How To Protect Your Enterprise From Deepfake Damage
As fraudulent content proliferates, it's important to build a defense and response strategy. Here's how to get started.
more →
Click Armor, Thursday, June 6th, 2024
Cyber Lingo: What Is Pretexting In Cyber Security?
Pretexting in cyber security is commonly used but not widely known. When employees don't know what pretexting is - or how convincing it can be - it makes them more vulnerable to the tricks of a cyber criminal.
more →
Cyber Defense Magazine, Thursday, June 6th, 2024
Conference 2024: Transformative Innovations In Cybersecurity
Beyond the Buzz Word AI, the Practical Groundbreaking Stuff
more →
DARK Reading, Wednesday, June 5th, 2024
Cloud Security Alliance Survey Finds 70% Of Organizations Have Established Dedicated SaaS Security Teams
Seventy percent of organizations have prioritized investment in SaaS security, establishing dedicated SaaS security teams, despite economic uncertainty and workforce reductions. This was a key finding in the fourth Annual SaaS Security Survey Report: 2025 CISO Plans and Priorities released today by the Cloud Security Alliance (CSA)
more →
APOND, Monday, June 3rd, 2024
Mastering The Art Of Least Privilege Access Implementation: A Comprehensive Guide
The concept of least privilege access has emerged as a paramount principle, serving as a cornerstone for robust identity governance and access management strategies.
more →
Click Armor, Friday, May 31st, 2024
Risk vs. Threat vs. Vulnerability: What Is The Difference?
The words risk, threat, and vulnerability are commonly used interchangeably, but they mean different things.
more → Digital Defense, Thursday, May 30th, 2024
Weighing The Risk: The Cost Of Skipping Pen Tests
Cybersecurity budgets are beginning to get cut across the country, and organizations are faced with tough choices about what should stay and what should go.
more →
Enzoic, Thursday, May 30th, 2024
Understanding Penetration Testing
A penetration test, or pentest, is a simulated cyberattack on your system to identify vulnerabilities before malicious actors can exploit them. It's a proactive approach to discovering and addressing security weaknesses.
more →
Pondurance, Thursday, May 30th, 2024
Identify Your Cybersecurity Risk Using A Risk-Based Approach
The National Institute of Standards and Technology (NIST) has laid out the Cybersecurity Framework as a set of guidelines that offers outcomes that organizations can use in their cybersecurity efforts.
more →
The Verge, Thursday, May 30th, 2024
600,000 Routers Were Bricked In A Single Cyberattack
A cyberattack was behind an incident last year that disabled over 600,000 internet routers across several Midwest states between October 25th and 27th, according to new research published by Lumen Technologies' threat research arm, Black Lotus Labs. The incident wasn't disclosed at the time, despite hundreds of thousands of routers being rendered inoperable.
more →
Balbix, Wednesday, May 29th, 2024
The Top 11 Metrics For Successful Vulnerability Management
In our latest ebook, The Ultimate Guide to Vulnerability Management (VM) Metrics, we uncover the top 11 VM metrics you should measure and report, why these metrics matter to the success of your team and your business, and how to use them to get the executive buy-in, support and resources you need to maintain a successful VM program. Let's highlight some of the key points in the ebook.
more →
Security Boulevard, Wednesday, May 29th, 2024
Security Operations By The Numbers: 30 Cybersecurity Stats That Matter
Enterprise IT and security operations (SecOps) leaders are under growing pressure from threat actors pounding away at their infrastructure defenses using a variety of new and proven tactics, techniques and procedures.
more →
Backup Central, Monday, May 27th, 2024
Cybersecurity Red Team: Offensive Experts
In today's digital landscape, organizations must remain vigilant against the ever-evolving threats posed by cybercriminals. One crucial aspect of maintaining a robust security posture is understanding the tactics and techniques employed by attackers.
more →
strobes, Monday, May 27th, 2024
Continuous Threat Exposure Management (CTEM) - The Ultimate Guide For CISOs
A security breach. Headlines scream, investors panic, and fingers get pointed. But what if you could anticipate an attack with the help of CTEM before it happens?
more →
The Register, Thursday, May 23rd, 2024
Google Guru Roasts Useless Phishing Tests, Calls For Fire Drill-Style Overhaul
Current approaches aren't working and demonize security teams
more →
TripWire, Wednesday, May 22nd, 2024
Top 7 Cybersecurity Trends For Enterprises In 2024
How can an organization prepare to be cyber-resilient in 2024? The major trends to look out for seem to focus mainly on AI. While the rise of generative AI indeed poses challenges, executives should be cautious not to miss other critical trends that will shape the cybersecurity landscape this year.
more →
ITProToday, Wednesday, May 22nd, 2024
Master AI Cybersecurity: Protect And Enhance Your Network
This guide examines AI's role in cybersecurity strategies and how cybercriminals exploit AI to enhance their attacks.
more →
AiTHORITY, Wednesday, May 22nd, 2024
HR and IT Related Emails are the Top Choices for Phishing Scams
KnowBe4's Q1 2024 global phishing report finds that HR and IT related email subjects account for more than 42% and 30% of top phishing email subjects respectively
more →
VentureBeat, Monday, May 20th, 2024
Why Data Breaches Have Become 'Normalized' And 6 Things Cisos Can Do To Prevent Them
Every week, a new data breach threatens enterprise organizations worldwide, forcing a re-evaluation of cybersecurity strategies to protect consumers.
more →
Abalytics Insight, Monday, May 20th, 2024
Top 10 Risks Of Cybersecurity In Cloud Computing
Unleash the top 10 cybersecurity risks in cloud computing
more →
Analytics Insight, Monday, May 20th, 2024
Top 10 Innovative BI Tools For Strategic Market Segmentation
Explore these top 10 innovative BI tools for strategic market segmentation
more → Security Boulevard, Monday, May 20th, 2024
Shifting The Security Mindset: From Network To Application Defense
Until recently, when businesses thought about securing their organizations, they had one focus: network security. The spotlight was on protecting network infrastructure against cyberthreat actors and data breaches. This included connected devices such as computers, servers and wireless networks.
more → Data Science Cloud, Friday, May 17th, 2024
5 Biggest Cybersecurity Risks In Edge Computing
Edge computing is quickly gaining popularity because it enables low-latency, high-efficiency, real-time operations by moving storage and processing to the network's boundary.
more →
CSO Online, Thursday, May 16th, 2024
Cyber Resilience: A Business Imperative CISOs Must Get Right
With ransomware at an all-time high, companies need to understand that being cyber resilient means going beyond compliance to considering all aspects of a business, from operational continuity to software supply chain security.
more →
Enzoic, Thursday, May 16th, 2024
2024 Verizon DBIR: Key Thoughts
It's DBIR season once again, and, as usual, the Verizon team has produced a detailed and comprehensive (and humorous) exemplar of statistical cybersecurity analysis and reporting.
more → Gigaom, Wednesday, May 15th, 2024
SSE vs. SASE: Which One is Right for Your Business?
Security service edge (SSE) and secure access service edge (SASE) are designed to cater to the evolving needs of modern enterprises that are increasingly adopting cloud services and supporting remote workforces.
more →
Analytics Insight, Wednesday, May 15th, 2024
How AI Detection Tools Tackle Deepfake Threats
How AI detection tools tackle deepfake threats- Have a look
more → theCUBEresearch, Wednesday, May 15th, 2024
CISA's Secure by Design Pledge Continues to Build Momentum: Is it Basic? Maybe, but it's a Start
CISA's Secure by Design Pledge is a voluntary pledge that enterprise software vendors make in a good-faith effort to set and attain certain security-focused goals, the most fundamental of which is to build cybersecurity into the design and manufacture of tech products.
more →
Security Boulevard, Wednesday, May 15th, 2024
5 Must-Haves To Get (And Stay) Compliant With Privacy And Security Frameworks
Achieving and maintaining compliance with data privacy and security frameworks is a complex undertaking that requires a multi-faceted approach. From automation tools to consultancy services, penetration testing to third-party audits, there are several crucial components that organizations must consider.
more → DARKReading, Tuesday, May 14th, 2024
Top 5 Most Dangerous Cyber Threats In 2024
SANS Institute experts weigh in on the top threat vectors faced by enterprises and the public at large.
more → ITProToday, Tuesday, May 14th, 2024
Five Things We Learned From The 2024 RSA Conference
Speakers at the 2024 RSA Conference painted a bleak picture for the future of the cyber security industry
more →
HelpNet Security, Monday, May 13th, 2024
Critical Vulnerabilities Take 4.5 Months On Average To Remediate
Over a third of organizations had at least one known vulnerability in 2023, with nearly a quarter of those facing five or more, and 60% of vulnerabilities remained unaddressed past CISA's deadlines, according to Bitsight.
more →
HelpNet Security, Monday, May 13th, 2024
AI's Rapid Growth Puts Pressure On Cisos To Adapt To New Security Risks
The increased use of AI further complicates CISO role as industries begin to realize the full potential of GenAI and its impact on cybersecurity, according to Trellix.
more → Security Boulevard, Thursday, May 9th, 2024
The Road To Continuous Threat Exposure Management (CTEM) , Part 1: The Role Of Validation
Continuous threat exposure management (CTEM) is a formal program to manage cyber risk that allows organizations to enhance and optimize their overall cybersecurity posture.
more → HelpNet Security, Thursday, May 9th, 2024
3 CIS Resources To Help You Drive Your Cloud Cybersecurity
In the process of moving to the cloud, you need a security-first cloud migration strategy that considers both your security and compliance requirements upfront. In this article, we'll discuss how you can use resources from the Center for Internet Security (CIS) to create such an approach.
more → Search Enterprise Desktop, Wednesday, May 8th, 2024
Patch Management Vs. Vulnerability Management: Key Differences
Although patch and vulnerability management are intertwined, they differ in critical ways. It's important to have distinct tools and processes to execute both effectively.
more →
hyperproof, Wednesday, May 8th, 2024
Build Strong Information Security Policy: Template & Examples
Every organization needs to have security measures and policies in place to safeguard its data. One of the best and most important measures you can take to protect your data (and that of your customers) is simply to have a robust information security policy.
more →
scytale, Tuesday, May 7th, 2024
What Are Cyber Essentials? Requirements, Preparation Process & Certification
Let's be honest: anything with the word 'essentials' in it is bound to grab our attention. However, understanding yet another cybersecurity certification may be daunting, so we've consolidated everything you need to know about Cyber Essentials and whether or not this may be a tailor-made fit for your company.
more →
Kratikal Blogs, Tuesday, May 7th, 2024
Top Endpoint Security Tips Organizations Should Know In 2024
In today's evolving threat landscape, endpoint security remains crucial. Endpoints, which can be any device that connects to your network - laptops, desktops, tablets, and even mobile phones - are a common target for cyber attacks. A successful endpoint breach can give hackers access to your whole network, potentially leading to serious consequences.
more →
NETWORKComputing, Tuesday, May 7th, 2024
SASE Architecture: A Checklist For SASE-Savvy Businesses
SASE provides secure and efficient access to cloud-based services and resources for users, regardless of their location. Follow this checklist to attain this goal.
more →
SearchSecurity, Tuesday, May 7th, 2024
Recorded Future Observes 'Concerning' Hacktivism Shift
At RSA Conference 2024, Recorded Future detailed alarming trends as nation-state attackers operate under the guise of hacktivism to cover real threats to organizations.
more → SiliconANGLE , Monday, May 6th, 2024
theCube Research Talks Cybersecurity In The Digital Age At RSAC
Staying ahead of threats is not just a challenge, but a necessity when it comes to cybersecurity.
more →
Cyber Defense Magazine, Monday, May 6th, 2024
Defense With Threat Intelligence Operations
In an era where cyber threats loom larger and are more complex than ever, it is vitally important for organizations to have a cyber threat intelligence (CTI) program and implement threat intelligence operations (TI Ops) to bolster their defenses.
more → Fortra, Friday, May 3rd, 2024
Vulnerability Scanning vs. Penetration Testing
In the modern digital landscape, cybersecurity is paramount, making the differentiation between vulnerability scanning and penetration testing essential for safeguarding organizational assets.
more → HelpNet Security, Thursday, May 2nd, 2024
93% of security leaders have increased SaaS security budgets
58% of the organizations were affected by a SaaS security incident in the last 18 months, according to Valence Security's 2024 State of SaaS Security Report.
more → Thales, Thursday, May 2nd, 2024
IAM and Passkeys: 4 Steps Towards a Passwordless Future
In the ever-evolving landscape of cybersecurity, Identity and Access Management (IAM) remains a vital link in the cybersecurity chain. However, with World Password Day just around the corner, there's no time like the present to consider how relying on antiquated password systems leaves organizations exposed to vulnerabilities
more →
Fortra, Thursday, May 2nd, 2024
Cybersecurity: The Battle of Wits
With cybersecurity, the digital battlegrounds stretch across the vast expanse of the internet. On the one side, we have increasingly sophisticated and cunning adversaries. On the other, skilled cybersecurity practitioners who are desperate to protect their companies' assets at all costs. One fundamental truth rings clear: it's an ongoing and relentless battle of wits.
more → HelpNet Security, Thursday, May 2nd, 2024
2024 Data Breach Investigations Report: Most breaches involve a non-malicious human element
The exploitation of vulnerabilities as an initial point of entry almost tripled from the previous year, accounting for 14% of all breaches, according to Verizon's 2024 Data Breach Investigations Report, which analyzed a record-high 30,458 security incidents and 10,626 confirmed breaches in 2023.
more → Security Boulevard, Wednesday, May 1st, 2024
Reading the Mandiant M-Trends 2024
This is my informal, unofficial, unapproved etc blog based on my reading of the just-released Mandiant M-Trends 2024 report (Happy 15th Birthday, M-Trends! May you live for many googley years.)
more →