2,604 articles · page 37 of 53
SC Media, Wednesday, May 1st, 2024
The UK has become the first country worldwide to prohibit Internet of Things device manufacturers from using default usernames and passwords in their products following the approval of the Product Security and Telecommunications Infrastructure act, which seeks to bolster smart device cybersecurity, The Hacker News reports.
more →
ITPro, Wednesday, May 1st, 2024
Hackers are increasingly targeting remote desktop tools in their attacks, new research reveals, prompting warnings for enterprises globally
more →
WeSecureApp, Wednesday, May 1st, 2024
Data breaches are like uninvited guests at a party - they show up unexpectedly, take what they want, and leave a big mess behind.
more →
SC Magazine, Wednesday, May 1st, 2024
Verizon published its 2024 Data Breach Investigations Report (DBIR) Wednesday, highlighting the interplay between actions and attack vectors that provide the initial pathway for breaches.
more → Obsidian Security, Tuesday, April 30th, 2024
The MITRE ATT&CK framework is a continually evolving resource, tracking the tactics, techniques, and procedures (TTPs) employed by adversaries across all phases of an attack.
more →
Datamation, Monday, April 29th, 2024
The use of artificial intelligence (AI) in cybersecurity has fundamentally changed the way businesses protect themselves against cyberthreats.
more →
Search Networking, Monday, April 29th, 2024
Enterprises interested in SASE must grapple with challenges and misinformation about the tool. Businesses should discern SASE's true benefits before adoption.
more →
Architecture and Governance, Monday, April 29th, 2024
Originally developed for federal use, the National Institute for Standards and Technology (NIST) Cybersecurity Framework (CSF) has been widely adopted across the world (and translated into numerous languages) by organisations to mitigate information security and organisational risk.
more →
The cyphere, Wednesday, April 24th, 2024
Penetration testing, or pen testing for short, is a critical way to protect IT systems and sensitive data from malicious activity proactively. This guide provides a comprehensive overview of how this technique works, business benefits, its types, methodologies, costs, and everything in between.
more →
Information Week, Wednesday, April 24th, 2024
How does law enforcement identify the people behind cybercrimes, and what happens afterward?
more →
scytale, Wednesday, April 24th, 2024
When you're working towards getting (and staying) compliant, it's only natural to want to make extra sure that you're doing it right.
more →
HYPR, Wednesday, April 24th, 2024
Virtual private networks (VPNs) form a staple of the modern work environment. VPNs provide an essential layer of protection for employees working remotely or across multiple office locations, encrypting data traffic to stop hackers from intercepting and stealing information.
more →
DARKReading , Wednesday, April 24th, 2024
Attacks increased by "only" 19% last year. But that number is expected to grow significently.
more →
SearchSecurity, Tuesday, April 23rd, 2024
Mandiant's 'M-Trends' 2024 report offered positive signs for global cybersecurity but warned that threat actors are shifting to zero-day exploitation and evasion techniques.
more → SiliconANGLE , Tuesday, April 23rd, 2024
Global median dwell time, the average amount of time that attackers remain undetected on a target's network after gaining unauthorized access, has fallen to its lowest point in a decade.
more →
InformationWeek, Friday, April 19th, 2024
An employee recognized something was wrong when they received an audio deepfake of the LastPass CEO.
more → HelpNet Security, Friday, April 19th, 2024
Threat actors are continuing to successfully breach across the entire attack surface and the stakes are only getting higher: 93% of enterprises who admitted a breach reported unplanned downtime, data exposure, or financial loss as a result, according to Pentera.
more →
Cyberscoop, Wednesday, April 17th, 2024
Researchers from the Google-owned firm conclude that Sandworm personas are linked to several recent attacks on critical infrastructure.
more →
SearchSecurity, Wednesday, April 17th, 2024
Over the past decade, Sandworm has been responsible for high-severity attacks that highlight the group's persistence, evasion techniques and threat to government bodies.
more → SearchSecurity, Wednesday, April 17th, 2024
Mandiant released a report that links Sandworm, a Russian state-backed threat actor, to a series of recent cyberattacks against water utilities.
more → centraleyes, Tuesday, April 16th, 2024
The stakes for safeguarding sensitive information have never been higher. Cyber Data loss can lead to severe consequences, including financial losses, damage to reputation, and legal repercussions.
more →
Fortra, Tuesday, April 16th, 2024
Generative AI has exploded in popularity across many industries. While this technology has many benefits, it also raises some unique cybersecurity concerns. Securing AI must be a top priority for organizations as they rush to implement these tools.
more →
HelpNet Security, Tuesday, April 16th, 2024
In this Help Net Security interview, Caleb Sima, Chair of CSA AI Security Alliance, discusses how AI empowers security pros, emphasizing its role in enhancing skills and productivity rather than replacing staff.
more → Security Boulevard, Tuesday, April 16th, 2024
Opinions are divided on the role of artificial intelligence (AI) in cybersecurity, according to a recent survey from CyberEdge Group. The report found that more than a third (36%) of security professionals anticipate that AI will primarily benefit IT security teams.
more →
HelpNet Security, Tuesday, April 16th, 2024
Red teaming is evaluating the effectiveness of your cybersecurity by eliminating defender bias and adopting an adversarial perspective within your organization.
more → Data Science Central, Monday, April 15th, 2024
Think of a battlefield - not filled with soldiers but cyber warriors. The Defense Industrial Base (DIB) stands as the front line. This digital battleground faces nonstop cyberattacks, each one getting trickier.
more →
hyperproof, Friday, April 12th, 2024
One of the most eye-popping events in cybersecurity this year has been the former head of security for Twitter, Peiter Zatko, releasing a whistleblower complaint about the social media giant, alleging all manner of shortcomings. Anyone responsible for cybersecurity audits should take note - in fact, take lots of notes.
more →
techradar.com, Friday, April 12th, 2024
Why traditional passwords need to be abandoned
more →
Search App Architecture, Thursday, April 11th, 2024
OAuth (Open Authorization) is an open standard authorization framework for token-based authorization on the internet.
more → DARKReading, Wednesday, April 10th, 2024
A cheat sheet for all of the most common techniques hackers use, and general principles for stopping them.
more → DARKReading, Wednesday, April 10th, 2024
Global organizations and geopolitical entities must adopt new strategies to combat the growing sophistication in attacks that parallel the complexities of our new geopolitical reality.
more → Computerworld, Wednesday, April 10th, 2024
Unified endpoint management software lets IT manage all endpoint devices - smartphones, laptops, desktops, printers, IoT devices, and others - from a single management console. Here's what to look for in a UEM platform and key vendors to consider.
more →
Datamation, Monday, April 8th, 2024
Cybersecurity refers to the defensive measures that can be employed in the effort to protect digital assets-including enterprise systems, networks, programs, and data-from a wide range of risks and cyber threats. These measures involve implementing a combination of technologies and procedures to thwart cyberattacks and minimize their impact.
more → The Register, Monday, April 8th, 2024
Many decide to make no changes after detecting a breach
more →
FutureCIO, Friday, April 5th, 2024
Nearly 10 million devices fell victim to data-stealing malware in 2023, amounting to a 643 percent increase over the past three years, according to Kaspersky Digital Footprint Intelligence.
more →
InformationWeek, Thursday, April 4th, 2024
If your organization hasn't yet adopted a zero-trust architecture, it's sitting on a cybersecurity time bomb. Now is the time to defuse the threat.
more → DARK Reading, Wednesday, April 3rd, 2024
Working together and integrating cybersecurity as part of our corporate and individual thinking can make life harder for hackers and safer for ourselves.
more → DARK Reading, Wednesday, April 3rd, 2024
Security teams often confuse tool purchasing with program management. They should focus on what a security program means to them, and what they are trying to accomplish.
more → SiliconANGLE , Wednesday, April 3rd, 2024
A new report from security ratings firm SecurityScorecard Inc. on security at S&P 500 companies finds that 21% experienced a data breach in 2023, as new regulations heighten the urgency of cybersecurity.
more → scytale, Wednesday, April 3rd, 2024
In today's ever-evolving threat landscape, reactive security is no longer enough. Organizations need a proactive approach that continuously identifies and addresses security risks.
more → Fortra, Tuesday, April 2nd, 2024
The National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) was published in 2014 for the purpose of providing cybersecurity guidance for organizations in critical infrastructure.
more → centraleyes, Tuesday, April 2nd, 2024
SIEM solutions enable enterprises to monitor and analyze security-related data from a variety of sources, such as firewalls, intrusion detection systems (IDS), and endpoint security devices.
more → TuxCare, Tuesday, April 2nd, 2024
xz is a widely distributed package that provides lossless compression for both users and developers, and is included by default in most, if not all, Linux distributions. Created in 2009, it has since released numerous versions.
more →
HelpNet Security, Tuesday, April 2nd, 2024
Only 3% of organizations across the globe have the 'mature' level of readiness needed to be resilient against modern cybersecurity risks, according to Cisco.
more → The Last Watchdog, Monday, April 1st, 2024
The technology and best practices for treating cybersecurity as a business enabler, instead of an onerous cost-center, have long been readily available.
more →
Security Boulevard, Monday, April 1st, 2024
In a 2023 survey of over 1,300 risk and compliance professionals across the globe, three out of ten respondents reported that their organizations have experienced a data privacy or cybersecurity breach in the past three years, a notable increase from 22% in 2022.
more → Veriti, Monday, April 1st, 2024
In a recent panel discussion, a thought-provoking question was posed to us, one that delves into the murky waters of cyber security and governmental responsibility. The query centered on the obligation of governments regarding the vulnerabilities they discover and utilize for intelligence and espionage, especially in the context of public safety.
more →
HelpNet Security, Monday, April 1st, 2024
Armed forces have always utilized war-gaming exercises for battlefield training to prepare for times of conflict. With today's digital transformation, the same concept is being applied in the form of cybersecurity exercises - tests and simulations based on plausible cyber-attack scenarios and incident response.
more → Apono, Friday, March 29th, 2024
In 2023, data security faced an uphill battle against cyberattacks, and the risks of becoming a victim grew stronger.
more →
Noetic, Thursday, March 28th, 2024
With the emergence of new cybersecurity regulations like the SEC's incident disclosure rules and the EU's NIS2 Directive, much attention is directed towards understanding and complying with these new incident reporting requirements.
more →