ITProToday, Thursday, May 25,2023
Why IT Operations Teams Should Embrace Context-Aware Security
Context-aware security can be a win-win. Here's why using it is beneficial to both your organization's end users and IT team.
more →
Back Issues/Search Home → Archive → Popular →
All sections ›
Archive
Security — Archive
2,486 articles · page 44 of 50
Solutions Review, Wednesday, May 24,2023
What To Consider When Building An Autonomous SOC
Solutions Review's Expert Insights Series is a collection of contributed articles written by industry experts in enterprise software categories. Gunter Ollmann of Devo offers a crash course on autonomous SOC, laying down the foundation on what to consider when building yours.
more →
FORTRA, Wednesday, May 24,2023
Security Awareness Training (SAT) Is Finally Having Its Day. Here's Why.
Cybersecurity awareness is on the rise as more organizations adopt security awareness training programs. Why the hype? In several recent reports, we break down our findings around why SAT is on the rise-and why companies need it now more than ever.
more →
SecurityIntelligence, Wednesday, May 24,2023
CISA, NSA Issue New IAM Best Practice Guidelines
The Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) recently released a new 31-page document outlining best practices for identity and access management (IAM) administrators.
more →
DARKReading, Wednesday, May 24,2023
5 Questions To Ask When Evaluating A New Cybersecurity Technology
Any new cybersecurity technology should be not just a neutral addition to a security stack but a benefit to the other technologies or people managing them.
more →
Continuity Central, Wednesday, May 24,2023
#StopRansomware Guide Released by National Security Agency
The US National Security Agency (NSA) has published an updated guide to assist organizations with protecting against ransomware attacks.
more →
DCIG, Thursday, May 18,2023
Time Taken For Hackers To Crack Passwords Revealed
New Specops Software research has unearthed the length of time it takes modern attackers to brute force user passwords. Plain text password storage is rare in these modern times, requiring attackers to adopt password cracking methods to make use of the majority of (hashed) password leaks.
more →
DARKReading, Thursday, May 18,2023
10 Types Of AI Attacks CISOs Should Track
Risk from artificial intelligence vectors presents a growing concern among security professionals in 2023.
more → Security Boulevard, Tuesday, May 16,2023
What The White House's Cybersecurity Strategy Means For CISOs
Cybersecurity is a huge concern. Businesses and individuals stand to lose a lot of time and money in the event of an unauthorized exposure or corruption of sensitive data. And lately, these types of attacks have started impacting businesses that affect the entire population.
more →
Sectrio, Monday, May 15,2023
Role Of Threat Intelligence In Ot Security: Best Practices And Use Cases
In today's interconnected world, operational technology (OT) systems play a crucial role in industries such as manufacturing, energy, and transportation. However, with increased connectivity comes the risk of cyber threats targeting these critical infrastructures.
more →
Security Boulevard, Monday, May 15,2023
Survey: Most CISOs Feel Their Business Is At Risk For Cyberattack
A new report from Proofpoint provides global insight into CISOs' challenges, expectations and priorities for 2023.
more →
Security Boulevard, Friday, May 12,2023
Identity Governance: Right People, Right Access, Right Time
Enterprise companies are increasing spending on software-as-a-service (SaaS) tools to enhance employee productivity and drive digital transformation projects.
more → HelpNet Security, Friday, May 12,2023
Top 3 Trends Shaping The Future Of Cybersecurity And IAM
The need to protect sensitive information from unauthorized access and theft has never been greater, and cybersecurity and IAM technologies are evolving to meet this challenge while providing users with more convenience.
more →
Security Boulevard, Thursday, May 11,2023
Advice From The ISACA Ransomware Response Checklist
A decade ago, most companies realized that being hit with a data breach was inevitable-the well-known 'when, not if' statement drove that idea home.
more → BOLSTER, Thursday, May 11,2023
What Are Lookalike Domains & How To Detect Them
Lookalike domains are fraudulent domains that mimic legitimate ones in order to trick users into divulging sensitive information or downloading malware. These domains can be used for phishing attacks, domain name spoofing, and other malicious activities.
more →
Solutions Review, Wednesday, May 10,2023
5 Facts About The Future Of Cybersecurity
Today's attackers have become increasingly elusive by generally just using stolen credentials or looking for misconfigured systems. With the evolving nature of the cyber landscape, they are taking advantage of the current geopolitical climate to exploit new areas of business operations.
more → Security Boulevard, Wednesday, May 10,2023
Open Source Threat Intelligence Tools & Feeds: A Complete 2023 List
The rapidly evolving cyber threat landscape demands constant vigilance from organizations seeking to protect their digital assets.
more → SearchSecurity, Wednesday, May 10,2023
5 Sbom Tools To Start Securing The Software Supply Chain
Organizations can use these SBOM tools to help secure their software supply chain by understanding the components of their deployed software and applications.
more →
ReversingLabs, Wednesday, May 10,2023
What's behind SBOM skepticism? One word: Fear
In this ConversingLabs Cafe interview, Josh Corman, founder of I Am The Cavalry, talks about what's behind industry skepticism around software bills of materials.
more →
HelpNet Security, Wednesday, May 10,2023
Refined Methodologies Of Ransomware Attacks
Adversaries were able to encrypt data in 76% of the ransomware attacks that were conducted against surveyed organizations, according to Sophos.
more → Cloud Native Now, Wednesday, May 10,2023
8 Tips For Successful Container Vulnerability Scanning
Container vulnerability scanning is a critical part of container security. It involves inspecting container images and their components to identify potential security issues, weaknesses or vulnerabilities.
more →
Search Security, Tuesday, May 9,2023
Hypervisor Security
Hypervisor security is the process of ensuring the hypervisor -- software that enables virtualization -- is secure throughout its lifecycle. Common security practices for hypervisors include limiting users in a local system, reducing attack surfaces and keeping systems updated.
more → flare, Tuesday, May 9,2023
9 Open Source Threat Intelligence Sources
Keeping up with cybersecurity news is a challenge. From newly discovered vulnerabilities to new attack methodologies, you live a life of 'need to know' when ability to find is difficult. As a security professional, knowing is more than half the battle.
more →
CloudTech, Tuesday, May 9,2023
IT And Security Pros Face Increased Workload Due To Hybrid/Virtual Work Adoption
Duncan is an award-winning editor with more than 20 years experience in journalism. Having launched his tech journalism career as editor of Arabian Computer News in Dubai, he has since edited an array of tech and digital marketing publications, including Computer Business Review, TechWeekEurope, Figaro Digital, Digit and Marketing Gazette.
more →
AWS News, Tuesday, May 9,2023
Threat Intelligence Management: Best Practices
Security teams rely on threat intelligence like a ship's captain relies on a lighthouse. The information enables them to see new risks and steer clear of known threats. While threat intelligence provides benefits, many security teams struggle to use it effectively.
more →
Ckick Armor, Friday, May 5,2023
Security Culture: What Is It And How Can You Improve It To Protect Your Business?
Security culture is the key to protecting your business from phishing and social engineering attacks. Without it, implementing successful training and having prepared employees is nearly impossible.
more →
LeaksID, Friday, May 5,2023
10 Unusual Insider Threat Behavioral Indicators
In today's digital age, the risk of insider threats has become increasingly common. Insider threats can be actions taken by employees, contractors, or partners who intentionally or unintentionally compromise the confidentiality, integrity, or availability of sensitive information.
more →
CXOtoday.com, Thursday, May 4,2023
What The Phish! Bye-Bye Passwords
Twitter co-founder and chief executive officer (CEO) Jack Dorsey has stepped down from his position, ending his nearly 16-year stint with the social media giant. The company's Board has unanimously appointed Twitter's chief technology officer (CTO) Parag Agrawal as his successor.
more →
DARKReading, Thursday, May 4,2023
The Critical Importance Of Creating Secure Passwords
Almost everyone is connected to the internet in some form, and while the internet is a wonderful opportunity - full of offerings for people from all walks of life, it's more important than ever for us to be #CyberFit and smart about cyber protection.
more → DTEX, Thursday, May 4,2023
Insider Risk Detection 101: Mitigating Unintentional Insider Threats
According to the Ponemon Institute's 2022 Cost of Insider Threats Global study, the overall number of insider threat incidents jumped by 44% in the past two years, with non-malicious insiders driving 56% of incidents that cost organizations an average of $484,931 per incident.
more →
Fortra, Thursday, May 4,2023
Cybersecurity - Change Is Coming And That's A Good Thing
Those words were spoken by the US National Security Advisor way back in 2005, and it is remarkable to see how prescient they were. The economy is not only supported by the cyber world, but that world is entirely data driven. Data has become a primary focus, not just for regulatory fodder, but for business survival.
more → DARKReading, Wednesday, May 3,2023
Anatomy Of A Malicious Package Attack
Malicious packages are hard to avoid and hard to detect - unless you know what to look for.
more → Guardrails, Wednesday, May 3,2023
Achieving Compliance With Application Security Regulations: A CISO's Guide
No one said being a Chief Information Security Officer (CISO) was an easy job. There are numerous concerns competing for attention from CISOs that keep them busy. One of the more pressing concerns pertains to meeting regulatory requirements for application security compliance.
more →
Radware, Wednesday, May 3,2023
3 Ways To Overcome Cybersecurity Staff Shortages In 2023
Cybersecurity staff and skills shortages have been consistent trends over the past few years. According to the (ISC2) 2022 Cybersecurity Workforce Study, the 2022 global cybersecurity workforce gap stood at 3.4 million people, an increase of 26.2% from 2021. This means that not only are cybersecurity staff shortages continuing, but they are getting worse and impacting organizations' ability to fight cyberattacks.
more →
VentureBeat, Tuesday, May 2,2023
Report Shows 92% Of Orgs Experienced An Api Security Incident Last Year
Application security provider Data Theorem, announced the release of a new report in partnership with TechTarget's Enterprise Strategy Group (ESG). ESG surveyed 397 respondents on cloud-native applications and API security and found that 92% of organizations experienced at least one API-related security incident in the last 12 months.
more →
The Register, Tuesday, May 2,2023
OWASP Penetration Testing: Your Ultimate Guide!
The Open Web Application Security Project (OWASP) is an online community that was established on September 9, 2001, by Mark Curphey, a cybersecurity expert, with the objective of mitigating cyber attacks.
more → Search Security, Tuesday, May 2,2023
Hash-Based Message Authentication Code (HMAC)
Hash-based Message Authentication Code (HMAC) is a message encryption method that uses a cryptographic key in conjunction with a hash function. It provides the server and the client each with a private key that is known only to that specific server and client, providing a more secure means of encrypting data than a simple Message Authentication Code (MAC).
more → DTEX, Tuesday, May 2,2023
7 Reasons To Ditch Endpoint DLP For Endpoint Visibility
Companies worldwide spend billions of dollars on endpoint data loss prevention (DLP) technology, hoping it will protect intellectual property. In theory, it's a good idea. There's just one problem: it doesn't work.
more → Fortra, Tuesday, May 2,2023
4 Lessons From Fortra's Attack Surface Management Guide
Think of all the different points within your organization that provide access to information. That could be your website, the mobile version of your application, your Slack instance, and so much more. It's a list that gets very long, very quickly.
more → CSO Online, Tuesday, May 2,2023
11 Security Tools All Remote Employees Should Have
Compromised employee personal devices and accounts can disrupt and possibly threaten business security. Getting these tools into their hands will help.
more →
The Register, Monday, May 1,2023
Plugging The Infosec Holes Before The Bad Guys Can Sneak In
Security posture management gets its due at RSA
more →
ITProToday, Thursday, April 27,2023
Top 15 DevSecOps Worst Practices
There are a lot of things that can go wrong with DevSecOps that practitioners should be aware of and avoid.
more → DARKReading, Thursday, April 27,2023
Sans Reveals Top 5 Most Dangerous Cyberattacks For 2023
SEO-aided attacks, developer targeting, and malicious use of AI top the list for 2023
more → Cloud Security Alliance (CSA), Thursday, April 27,2023
DOWNLOAD: Security Implications of ChatGPT
This position paper provides analysis across four dimensions: How it can benefit cybersecurity, how it can benefit malicious attackers, how ChatGPT might be attacked directly, and guidelines for responsible usage
more →
Forrester, Thursday, April 27,2023
Decoding The New Zero Trust Terminology
Over the last year, I've been scared of two things. Our research teams have been planning and publishing a ton of research around Zero Trust, and since we're analysts, new terminology, and comorbid acronyms, have emerged.
more →
DARKReading, Thursday, April 27,2023
CISO Survival Guide For Cyberattacks
CISOs who have survived major cyber incidents recommend letting company ethos guide incident response.
more → CSO Online, Thursday, April 27,2023
5 Most Dangerous New Attack Techniques
Adversarial AI, ChatGPT-powered social engineering, and paid advertising attacks are among the most dangerous emerging attack methods, according to SANS Institute analysts.
more → Fortra, Wednesday, April 26,2023
What Is A WAF? (Web Application Firewall)
A Comprehensive Guide to Understanding WAFs: How it Works, Types, and Security Models
more → SearchSecurity, Wednesday, April 26,2023
The Complete Guide To Ransomware
Organizations in every industry can be targets of cybercrime for profit. Get expert advice on ransomware prevention, detection and recovery in our comprehensive guide.
more → DARKReading, Wednesday, April 26,2023
CISOs Rethink Data Security With Info-Centric Framework
The Data Security Maturity Model ditches application, network, and device silos when it comes to architecting a data security strategy.
more →