TrueFort, Wednesday, July 12,2023
How Can Organizations Manage Technical Debt?
Organizations need to manage technical debt, but why, and what is the best process for successful mitigation?
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Services → Popular →
All sections ›
Archive
Security — Archive
2,604 articles · page 45 of 53
Cavelo, Wednesday, July 12,2023
Data Protection And Confidentiality Training: 10 Best Practices For Your Team
Did you know that your company's employees are your biggest cybersecurity risk? In fact, 52 percent of businesses admit that employees are their biggest weakness in IT security.
more →
CIO, Wednesday, July 12,2023
5 Zero Trust and SASE trends for CISOs to watch
Businesses will find that robust, built-in network support for Zero Trust and SASE frameworks can provide the protection required by today's digital transformation.
more →
DARKReading, Tuesday, July 11,2023
Top Takeaways From Table Talks With Fortune 100 CISOs
As organizations struggle to keep up with new regulations and hiring challenges, chief information security officers share common challenges and experiences.
more →
Menlo Security, Tuesday, July 11,2023
How Legacy URL Reputation Evasion (LURE) Attacks Easily Bypass Current Security Tech
Whether it's the push for fully remote work, in-office work, or a hybrid workstyle, the conversation around how and where employees will work continues. But guess what? To cybercriminals, this conversation doesn't really matter.
more →
TrustCloud, Friday, July 7,2023
Why SOC 2 Is An Industry Standard
SOC 2 (Service Organization Control 2) provides a framework for assessing and reporting on the security, availability, processing integrity, confidentiality, and privacy of systems and data of service organizations. It was developed by the American Institute of Certified Public Accountants (AICPA) to address the need for consistent and comprehensive security and privacy controls in service organizations.
more →
Solutions Review, Friday, July 7,2023
Debunking 5 Common SIEM Myths
Myths around SIEM (Security Information and Event Management) can hinder a successful deployment. By debunking these myths, organizations gain a realistic understanding of what SIEM solutions can and cannot accomplish.
more →
Truefort, Thursday, July 6,2023
Why Insider Risk Cybersecurity Should Be A Major Concern
Why every organization should be concerned about insider risk cybersecurity and what we can do about it
more → ManagedMethods, Thursday, July 6,2023
What Is A Cybersecurity Incident Response Plan?
Cybersecurity threats are a constant problem in today's digital world. But, for the U.S. school system, it's an especially serious concern.
more →
HelpNet Security, Thursday, July 6,2023
Cybercriminals Can Break Voice Authentication With 99% Success Rate
Computer scientists at the University of Waterloo have discovered a method of attack that can successfully bypass voice authentication security systems with up to a 99% success rate after only six tries.
more →
CIODIVE, Wednesday, July 5,2023
The Role For AI In Cybersecurity
Generative AI can be an ally for new security professionals. For more seasoned security analysts, it can offer time to refine their skills through automation of repetitive tasks.
more →
FORTRA, Wednesday, July 5,2023
PCI DSS 4.0 Requirements -Test Security Regularly and Support Information Security with Organizational Policies and Programs
The Payment Card Industry Data Security Standard (PCI DSS) has always been a massive security undertaking for any organization that has worked to fully implement its recommendations.
more →
DARKReading, Wednesday, July 5th, 2023
Mitigating Risk With Threat Intelligence
When it comes to enterprise risk, third-party cybersecurity risks have increased substantially in recent years. By implementing an effective third-party risk management program, organizations can mitigate much of their risk and better protect themselves from attacks that emanate from third parties. The key word here is "effective."
more → Architecture & Governance Magazine, Monday, July 3,2023
Is Zero Trust Achievable?
The concept of Zero Trust is 'never trust, always verify' so that in a Zero Trust Architecture (ZTA) every access request is regarded as potentially hostile and so needs to be authenticated, authorised and continually validated.
more →
TechCrunch, Thursday, June 29,2023
Millions Affected By Moveit Mass-Hacks As List Of Casualties Continues To Grow
Hackers have compromised the personal data of more than 15.5 million individuals by exploiting a security vulnerability in the MOVEit file transfer tool, and the number of victim organizations continues to grow.
more →
Security Boulevard, Wednesday, June 28,2023
The Unfair Blame Game: Why CISOs Shouldn't Shoulder All The Responsibility
In the ever-evolving landscape of cybersecurity, organizations face a constant battle against hackers and data breaches. The role of the Chief Information Security Officer (CISO) is crucial in safeguarding digital assets and mitigating risks.
more →
Solutions Review, Wednesday, June 28,2023
Debunking 7 Common Storage Security Myths
Debunking storage security myths helps organizations align their security practices with the current threat landscape. The cybersecurity landscape is constantly evolving, with new vulnerabilities, attack vectors, and techniques emerging regularly.
more → TechRepublic, Tuesday, June 27,2023
What Is Data Loss Prevention (DLP)?
DLP helps organizations protect their sensitive data. Learn about the best practices and tools available to prepare for and prevent data loss.
more →
iapp, Tuesday, June 27,2023
IAPP Publishes Privacy Risk Study 2023
The IAPP released the Privacy Risk Study 2023, which examines the significant privacy challenges faced by organizations in relation to risk assessment and management.
more →
Scytale, Tuesday, June 27,2023
Essential 8 Maturity Model: Achieving Cyber Security Excellence
The Essential 8 Maturity Model is quickly rising in rank and is known for helping businesses establish the baseline of cyber threat protection. But how exactly should organizations achieve Essential 8 compliance, and is it worth the fuss?
more →
IT Security Guru, Monday, June 26,2023
What Does Cybersecurity Really Mean?
As technology continues to play an integral role in our daily lives, the growing importance of cybersecurity cannot be overstated. From personal data breaches to sophisticated cyberattacks on critical infrastructure, the consequences of inadequate cybersecurity measures can be far-reaching and devastating.
more →
Security Boulevard, Monday, June 26,2023
Top 5 Industries Most Vulnerable To Data Breaches In 2023
Today's interconnected digital landscape has enabled organizations to unlock new levels of efficiency via automation, cloud storage, modernization of legacy applications, and much more.
more → Hypr, Monday, June 26,2023
RIP Passwords: Why The Future Is Passwordless
Almost every website, app, and user platform now requires usernames and passwords. And for user data to remain secure, passwords must be strong-most platforms require a mix of upper and lower case letters, numbers, and special characters.
more →
DARKReading, Monday, June 26,2023
3 Steps To Successfully & Ethically Navigate A Data Breach
In this day of "not if, but when" for breaches, transparency and full disclosure are important to salvage a company's reputation and keep public trust.
more → Security Boulevard, Friday, June 23, 2023
Zero Trust Security Guide For The Digital Enterprise
The growing severity and frequency of data breaches and cyberattacks expose the reality that current security strategies are ineffective in combatting modern cyber threats.
more → Enterprise Storage Forum, Friday, June 23, 2023
Top Data Loss Prevention Solutions For 2023
Data loss prevention tools help businesses protect one of their most valuable assets: information. Data is not only vulnerable to cybersecurity threats, but to inaccuracies, duplicates, and other problems that affect its validity. Data loss prevention software identifies weaknesses within enterprise data management and alerts businesses of those issues before they cause problems.
more →
SearchSecurity, Friday, June 23, 2023
Top 10 Threat Modeling Tools, Plus Features To Look For
Automated threat modeling tools make identifying threats simpler, but the tools themselves can be fairly complex. Understanding where risks exist is only one part of the process.
more →
Cyber Defense Magazine, Thursday, June 22, 2023
5 Benefits Of SIEM To The Cybersecurity Of Any Business
Cybersecurity is a top priority for many businesses today because of the significant threats they face from hackers and cybercriminals. Companies now deal with a lot of consumer data and they are obliged to protect them from being leaked and accessed by malicious actors.
more →
Imperva, Wednesday, June 21, 2023
Understanding and Mitigating the MOVEit Incidents
Over the last several weeks, attackers have taken advantage of vulnerabilities in MOVEit, a popular file transfer application developed by Progress.
more →
MixMode, Wednesday, June 21, 2023
Top 5 Takeaways from the CISA 2023-2025 Strategic Plan That the Cybersecurity Community Should Know About
In its inaugural bi-annual strategic plan, CISA (Cybersecurity and Infrastructure Security Agency), the nation's primary cybersecurity oversight agency, highlights the importance of taking a proactive approach to mitigate threats that takes advantage of recent advancements in AI technology.
more →
DevOps.com, Wednesday, June 21, 2023
The Security Pipeline
Over the last few years, the ability to secure our applications has grown, and deep integration into the DevOps toolchain has, too. There are more tools doing more security checks protecting more of the infrastructure and source than there have ever been. The key is putting them to use intelligently.
more →
Security Boulevard, Tuesday, June 20, 2023
Understanding Identity Access and Management (IAM) Security
A crucial component of protecting your organization, identity access and management (IAM) security has become a trusted cybersecurity best practice. It takes control of user access to systems, data, and resources within your company's networks and manages digital identities, improving the effectiveness and efficiency of your IT security process.
more → HelpNet Security, Tuesday, June 20, 2023
The Significance Of CIS Control Mapping In The 2023 Verizon DBIR
Verizon's recently released 2023 Data Breach Investigation Report (DBIR) provides organizations with a comprehensive analysis of the evolving threat landscape and valuable insights into incident types and vulnerabilities.
more → Solutions Review, Monday, June 19, 2023
Debunking 7 Common Cybersecurity Myths
Debunking cybersecurity myths is of utmost importance to enterprises for a number of reasons. Enterprises handle vast amounts of sensitive data, including customer information, financial records, and intellectual property.
more → The Register, Friday, June 16,2023
Third MOVEit Bug Fixed A Day After PoC Exploit Made Public
Millions of people's personal info swiped, Clop leaks begin with 'Shell's stolen data'
more →
DARKReading, Friday, June 16,2023
Cybercrime Doesn't Take A Vacation
Organizations need to prepare for security threats as summer holidays approach.
more → Continuity Central, Continuity Central
Cyber Security More Likely To Succeed If Linked To Business Objectives
Organizations that closely align their cyber security programs to business objectives are 26 percent more likely to lower the cost of cyber security breaches and incidents according to new research from Accenture.
more →
comforte, Thursday, June 15,2023
Verizon's Data Breach Investigations Report: Enterprise Data Is Under Attack From All Sides
IT and security leaders increasingly see data-driven decision making as the key to strategic success. But that puts an increasing amount of pressure on to ensure the data itself is current, accurate, high quality and free of vendor bias.
more →
Dataversity, Thursday, June 15,2023
Understanding The Importance Of Identity And Access Management In Data Protection
Companies today use a range of systems to transfer and store data, perform tasks, and, most importantly, manage their customers and staff members. With so many online and offline factors, good cybersecurity is a must.
more →
Fortra, Thursday, June 15,2023
Top 5 Malware Trends On The Horizon
Cybercrime has become a dominant concern for many businesses, as well as individuals. Cybercriminals will target any business, and any individual if they can realize a profit from their minimal efforts.
more →
CSO Online, Thursday, June 15,2023
5 Best Practices To Ensure The Security Of Third-Party APIs
The application programming interface (API) has become integral to setting up functionality and flexibility. But they're also potential attack vectors that need to be high on the security team's radar.
more →
Datamation, Wednesday, June 14,2023
The Top Intrusion Prevention Systems
Cyber threats pose significant risks to organizations of all sizes, making robust security measures imperative. An intrusion prevention system (IPS) is one critical component in an organization's cybersecurity arsenal, acting as a vigilant gatekeeper to actively monitor network traffic and prevent unauthorized access and malicious attacks.
more →
flare, Wednesday, June 14,2023
Cyber Threat Detection: The Definitive Guide
In today's interconnected world, cyber threats continue to rise, while traditional cybersecurity techniques are becoming less effective and costlier. Coupled with the challenges of hiring skilled cyber professionals, it is evident that cybersecurity needs to change.
more →
Preveil, Wednesday, June 14,2023
CMMC Assessment Guide
If you contract for the Department of Defense (DoD) you will soon need to achieve compliance with the Cybersecurity Maturity Model Certification (CMMC - the DoD's initiative to improve cybersecurity across the DIB.
more →
DARKReading, Monday, June 12,2023
10 Important Security Tasks You Shouldn't Skip
Time and money are valuable and finite, but some actions are well worth spending those resources on.
more → Solutions Review, Friday, June 9,2023
Zero Trust: Beyond The Smoke And Mirrors
Approaching zero trust - with all its supposed silver bullets, best practices, analyst perspectives, and vendor promises - can feel like walking into a hall of mirrors. What's real? What's not? Who's full of it? Who actually knows what they're talking about? Where are we on our zero-trust journey?
more → GitGuardian, Friday, June 9,2023
Verizon 2023 Data Breach Investigations Report (DBIR): Credential Leaks Continue To Be A Major Issue
Verizon's 2023 DBIR shows trends for incidents and breaches from the last year. Read our recap to see how credential leakage is helping malicious actors gain entry.
more →
DARKReading, Friday, June 9,2023
5 Tips For Modernizing Your Security Operations Center Strategy
A solid, dependable SOC strategy that is scalable in the face of various security threats is essential to reduce cybersecurity risks to your business.
more → Solutions Review, Thursday, June 8,2023
10 NDR Best Practices to Consider in 2023
NDR, which stands for Network Detection and Response, is a comprehensive cybersecurity solution designed to monitor and analyze network traffic to detect and respond to potential threats.
more → Security Boulevard, Thursday, June 8,2023
SBOM Executive Order: Ready for the June 11th Deadline?
In preparation for the June 11th deadline of President Biden's Executive Order (EO) on Improving the Nation's Cybersecurity, Deepfactor has focused on educating customers about the importance of accurately and systematically documenting software production, consumption, and operation using Software Bill of Materials (SBOMs). They represent a critical first step in discovering vulnerabilities and weaknesses within your products and the devices you procure from your software supply chain.
more →