Tripwire, Wednesday, October 23rd, 2024
Defending Against Ransom DDoS Attacks
DDoS attacks have become an annoyance most companies assume they may have to deal with at some point.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Popular →
All sections ›
Archive
Security — Archive
2,534 articles · page 29 of 51
Security Boulevard, Tuesday, October 22nd, 2024
Best Cybersecurity Metrics To Use In The Boardroom
As the cost and frequency of cyber events grow, technologies evolve, and regulatory bodies enact stricter cybersecurity laws on the market, it's become exceedingly clear that elevating cyber matters to the boardroom is a strategic imperative.
more →
Security Boulevard, Tuesday, October 22nd, 2024
Elevating SaaS Security: The Strategic Role Of Bug Bounty Programs
For engineers and security professionals working within SaaS environments, the standard suite of security tools-firewalls, IDS/IPS, SIEMs, WAFs, endpoint protection and secure development practices-forms the backbone of any security architecture.
more → Security Boulevard, Tuesday, October 22nd, 2024
Identity Revolution: Welcome To The Dynamic World Of IAM 360
For too long, Identity and Access Management (IAM) has played a background role-a fundamental but 'invisible' part of digital transformation. That's why I'm so excited to present IAM 360-the magazine where IAM shifts from a behind-the-scenes function into a dynamic, forward-thinking conversation.
more → HelpNet Security, Monday, October 21st, 2024
Effective Strategies For Measuring And Testing Cyber Resilience
In this Help Net Security interview, Detective Superintendent Ian Kirby, CEO of the National Cyber Resilience Centre Group (NCRCG), discusses the emerging cyber threats and strategies organizations can use to increase cyber resilience.
more →
Microsoft News, Monday, October 21st, 2024
Microsoft Digital Defense Report 2024
In the last year, the cyber threat landscape continued to become more dangerous and complex. The malign actors of the world are becoming better resourced and better prepared, with increasingly sophisticated tactics, techniques, and tools that challenge even the world's best cybersecurity defenders.
more →
Security Boulevard, Friday, October 18th, 2024
Get An Untrusted Security Advisor! Have Fun, Reduce Fail!
Many organizations are looking for trusted advisors, and this applies to our beloved domain of cyber/information security. If you look at LinkedIn, many consultants present themselves as trusted advisors to CISOs or their teams.
more → Security Boulevard, Friday, October 18th, 2024
Beyond Passwords: Advanced Api Authentication Strategies For Enhanced Security
Passwordless authentication for end users is taking the world by storm, offering organizations and individuals alike unprecedented security, user experience, and efficiency benefits. By all indications, the next generation of authentication for end users has finally arrived, sending the password the way of the dodo.
more → techradar.pro, Thursday, October 17th, 2024
Google Warns Attackers Are Getting Worryingly Good At Exploiting Zero-Days
Better detection tools have forced hackers to move faster
more →
SC Media, Thursday, October 17th, 2024
Threat Actors Exploit Zero Days Within 5 Days, Says Google's Mandiant
In analyzing 138 actively exploited vulnerabilities in 2023, Google Mandiant reported Oct. 15 that 70% of them were zero-days, indicating that threat actors are getting much better at identifying vulnerabilities in software.
more →
Nextgov/FCW, Thursday, October 17th, 2024
Mandiant Founder Calls Chinese Wiretap Hack Unsurprising
Telecommunications providers have always been an ideal espionage target for foreign adversaries, Kevin Mandia said in an interview.
more →
Security Boulevard, Thursday, October 17th, 2024
What is DORA (Digital Operational Resilience Act)?
The Digital Operational Resilience Act (DORA) is a significant regulation introduced by the European Union, set to take effect on 17 January 2025. While DORA is primarily designed to enhance the operational resilience of financial entities against ICT-related incidents, its impact extends far beyond financial institutions.
more → Security Boulevard, Thursday, October 17th, 2024
Largest DDoS Cloudflare Attack On Global Sectors Mitigated
As per recent media reports, Cloudflare has successfully disclosed the mitigation of a record-breaking distributed denial-of-service (DDoS) attack. The DDoS Cloudflare attack, at its peak, was 3.8 terabits per seconds (Tbps) and had a duration of around 65 seconds. In this article, we'll dive into the details of the attack and determine how it was successfully mitigated. Let's begin!
more → Security Boulevard, Thursday, October 17th, 2024
Executive Perspectives, Episode 2, Michelle Faylo
Axio CEO, Scott Kannry recently sat down with Michelle Faylo, US Cyber & Technology Leader of Lockton in our executive perspectives podcast. In each episode, we interview the world's top
more → The Futurum Group, Thursday, October 17th, 2024
Elastic's 2024 Global Threat Report Reveals Key Cybersecurity Trends
Elastic Security Labs' 2024 Global Threat Report details significant trends in the cybersecurity landscape, focusing on the misuse of offensive security tools, cloud security vulnerabilities, and increasing credential access attacks
more →
Security Boulevard, Wednesday, October 16th, 2024
Everything You Need To Know About NIST Security Compliance
National Institute of Standards and Technology (NIST) security standards have become a core competency for organizations aiming to strengthen their cybersecurity posture.
more → IT Security Guru, Tuesday, October 15th, 2024
Secure By Design: The (Necessary) Future Of Hardware And Software
ICE 2024: Leading figures discussed why secure by design is not only necessary, but absolutely imperative in today's complex connected world
more →
DARKReading, Tuesday, October 15th, 2024
Even Orgs With SSO Are Vulnerable To Identity-Based Attacks
Use SSO, don't use SSO. Have MFA, don't have MFA. An analysis of a snapshot of organizations using Push Security's platform finds that 99% of accounts are susceptible to phishing attacks.
more →
Cyber Defense Magazine, Tuesday, October 15th, 2024
70% Of Enterprises Established Saas Security Teams, Cloud Security Alliance Survey Finds
More than 70 percent of enterprises have prioritized SaaS security by establishing dedicated teams to secure SaaS applications, a trend identified for the first time in the fourth Annual SaaS Security Survey Report: 2025 CISO Plans and Priorities.
more →
Security Boulevard, Tuesday, October 15th, 2024
Threat Hunting In macOS With The SecOps Cloud Platform
The second most popular OS in today's business environment, macOS, is often neglected in cybersecurity discussions. This is likely due to Windows OS holding a dominant share (72.1%) of the global workstation market and Linux (4.03%) running critical parts of IT infrastructure. This often leaves macOS excluded from the conversation.
more → Security Boulevard, Tuesday, October 15th, 2024
The Value of Breadth and Depth in SaaS Security
In July, an Emerging Tech report by analyst firm Gartner focused on the ways SaaS ecosystem security products are transforming SaaS security.
more → Security Boulevard, Tuesday, October 15th, 2024
Navigating the Cybersecurity Risks of Shadow & Open-Source GenAI
Generative AI is no doubt the leading frontier in AI. Models have captured attention and driven exciting use cases across industries with their ability to create everything from text to images, and even solve complex coding problems.
more → Security Boulevard, Tuesday, October 15th, 2024
Cybersecurity Risk Assessment Best Practices
A cybersecurity risk assessment offers organizations a structured approach to identifying vulnerabilities and threats, thereby providing actionable insights for making strategic risk management decisions.
more → Tripwire, Monday, October 14th, 2024
Advanced Tips For Leveraging The NIST Cybersecurity Framework For Compliance
Depending on the industry, location, and business operations of your organization, you may have any number of cybersecurity regulations to comply with. Keeping track of each law that affects your organization and the various requirements associated with them can be overwhelming, but the consequences of noncompliance are often far worse.
more → Techstrong.ai, Monday, October 14th, 2024
Is AI The Secret Weapon In The Fight To Secure Identity?
It is not surprising that the increasing complexity and number of identities held by organizations has been accompanied by a surge in identity-related security breaches. In fact, a 2023 report revealed that 90% of organizations reported a security incident related to digital identities over the previous year.
more →
Analytics Insight, Saturday, October 12th, 2024
Top 10 AI-Based Threat Detection Systems
From Darktrace to Fortinet know the top AI detection system which will protect your data
more →
Cyber Defense Magazine, Friday, October 11th, 2024
Strengthening Security
Business executives in all sectors place a high premium on security in the quickly changing digital landscape of today. Security is no longer only about preventing hacks.
more → Cyber Defense Magazine, Friday, October 11th, 2024
NextGen Identity Management
Federal agencies face a pivotal cybersecurity challenge: prevent unauthorized entities from accessing systems and facilities, while granting authorized federal employees and contractors access commensurate with verified need.
more → Security Boulevard, Friday, October 11th, 2024
Generational Security: The Meaning Behind This Year's Cyber Security Awareness Month Theme
This year's Cyber Security Awareness Month theme is 'Generation Cyber Safe: Because online security knows no age', but what does that mean? The annual theme of CSAM doesn't have to affect your events, but it's a good way to find nuances from previous years and spark inspiration for innovative resources.
more → ComputerWeekly, Thursday, October 10th, 2024
How Recorded Future Finds Ransomware Victims Before They Get Hit
Threat intel specialists at Recorded Future have shared details of newly developed techniques they are using to disrupt Rhysida ransomware attacks before the gang even has a chance to execute them
more →
Security Boulevard, Thursday, October 10th, 2024
Remediation Vs. Mitigation: The Choice Between Instant Or Indirect Action
Organizations are constantly faced with the challenge of addressing vulnerabilities and threats to maintain a secure environment. Two common strategies to aide in this are remediation and mitigation, both of which aim to reduce risk but with different approaches and timelines.
more → Security Boulevard, Thursday, October 10th, 2024
Podcast Episode 20: Interview With Alan Delahunty, His Role As Vice President/Commercial Lines Agent
Unlock the secrets to navigating the ever-evolving world of cybersecurity and commercial insurance with expert insights from Alan Delahunty of McGriff Insurance. Discover how the complexity of cyber threats is reshaping insurance policies and learn why multi-factor authentication and other security measures are now industry standards
more → Security Boulevard, Thursday, October 10th, 2024
Cybersecurity Awareness Month: The Noble Work Of Repeated Reminders
Another October. Another Cybersecurity Awareness Month. And, in the thick of the mundane online training courses and the collective sighing from the employee base, it can be easy to lose sight of its value.
more → Security Boulevard, Thursday, October 10th, 2024
Cybersecurity Awareness Month: AI Safety For Friends And Family
Happy October! The leaves are changing and everyone is starting to get ready for the upcoming holidays, but let's not forget one of the most important holidays of the year-Cybersecurity Awareness Month!
more → Security Boulevard, Thursday, October 10th, 2024
2024 GigaOm Radar for SaaS Security Posture Management (SSPM)
GigaOm analysts highlight proactive SaaS security features and the platform's ability to manage complex environments with a robust SaaS Security Posture Management (SSPM) solution.
more → Security Boulevard, Thursday, October 10th, 2024
AppOmni Named a Leader in the 2024 GigaOm Radar for SSPM
In the fast-paced world of SaaS, productivity gains can come at a cost. With enterprises using over 100 different SaaS applications on average, many organizations find themselves in an unmanaged landscape, leaving critical data-and customer PII-vulnerable.
more → SearchSecurity, Wednesday, October 9th, 2024
What is OPSEC (operations security)?
OPSEC (operations security) is an analytical process that military, law enforcement, government and private organizations use to prevent sensitive or proprietary information from being accessed inappropriately.
more →
SecurityIntelligence, Wednesday, October 9th, 2024
Cybersecurity Awareness Month: Horror Stories
When it comes to cybersecurity, the question is when, not if, an organization will suffer a cyber incident. Even the most sophisticated security tools can't withstand the biggest threat: human behavior.
more →
Security Boulevard, Wednesday, October 9th, 2024
Choosing The Right Deployment Option For Your API Security Solution
You need an API security solution. That much is a given (although some may argue it isn't!). While essential for business growth and innovation, APIs, or Application Programming Interfaces, expose the organizations that use them to cyber threats.
more → DARKReading, Tuesday, October 8th, 2024
The Perils Of Ignoring Cybersecurity Basics
The massive outage involving a faulty Falcon update is an excellent illustration of what happens when organizations neglect security fundamentals.
more → Security Boulevard, Monday, October 7th, 2024
Reachability And Risk: Prioritizing Protection In A Complex Security Landscape
Organizations face an ever-expanding attack surface and a host of cyberthreats. Yet, most organizations have limited resources and lack effective solutions to fully understand and address their network security risks.
more → Security Boulevard, Monday, October 7th, 2024
Managing OT And IT Risk: What Cybersecurity Leaders Need To Know
Security leaders face the challenge of managing a vast, interconnected attack surface, where traditional approaches to managing cyber risk are no longer sufficient. Modern threats exploit vulnerabilities across domains, requiring a more holistic approach to avoid operational disruption, safety risks and financial losses.
more → Security Boulevard, Monday, October 7th, 2024
How Cybercriminals Use Stolen Data To Target Companies - A Deep Dive Into The Dark Web
The digital world has revolutionized the way we live and work, but it has also opened up a new realm for cybercriminals. The rise of the dark web has provided a breeding ground for hackers and other malicious actors to trade stolen data and launch attacks against companies worldwide.
more → Security Boulevard, Monday, October 7th, 2024
Facts And Stats About Cybersecurity And Compliance
Cybercrime remains one of the primary risks facing companies across the United States. The following statistics highlight the most pressing cybersecurity risks organizations face today and underscore the importance of proactive security measures.
more → Security Boulevard, Monday, October 7th, 2024
8 Best Cyber Risk Mitigation Tools You Should Know
Cyber risk mitigation is an ongoing process that aims to reduce the impact of cyber threats on your organization. It encompasses various strategies and tools designed to safeguard your systems and data from potential attacks.
more → InformationWeek, Friday, October 4th, 2024
Why Are We Still Talking About Cybersecurity Basics After All These Years?
Here's a deep dive into the latest innovation and how it is transforming the technology landscape.
more →
SC Media, Friday, October 4th, 2024
How Modern IAM Can Mitigate Risk
Is your company still using the same identity management system it had in 1998? Does a mere username and password log you into the local network and let you access almost any resource?
more → DARKReading, Friday, October 4th, 2024
Cybersecurity Is Serious - But It Doesn't Have To Be Boring
Thoughtfully applied, humor breaks through security fatigue, increases engagement, and fosters a culture of security awareness.
more → TechZone360, Friday, October 4th, 2024
Cloud Password Managers: Features You Can't Miss
Imagine standing guard over a treasure trove of valuable assets while threats lurk in every shadow. As digital threats evolve, so must our defenses.
more →
Security Boulevard, Thursday, October 3rd, 2024
Virtual Patching: A Proactive Approach To API Security
In the API-driven world of modern enterprises, security vulnerabilities such as Broken Object Level Authorization (BOLA) represent one of the more insidious threats.
more →