Analytics Insight, Wednesday, June 12th, 2024
Quantum Computing And Its Implications For Cybersecurity
Learn about the impact of quantum computing and its implications for cybersecurity
more →
Back Issues This Week → Popular →
All issues › Archive
Security — Archive
2,417 articles · page 32 of 49
TechRepublic, Wednesday, June 12th, 2024
Mandiant Report: Snowflake Users Targeted For Data Theft And Extortion
A threat actor exploited the Snowflake platform to target organizations for data theft and extortion using compromised credentials. Learn how to protect your business from this threat.
more →
Axiad, Wednesday, June 12th, 2024
Identity Security & Identity Fabrics
Identity security seems simple enough - make sure people are who they claim they are and give them privileges to access the applications and assets they need, nothing more.
more →
ITPro , Wednesday, June 12th, 2024
A Disgruntled Ex-Employee At A Singaporean IT Firm Caused Carnage After Deleting Over 180 Servers
The staff member was angry about his dismissal and sought to get his own back
more →
Backup Central, Monday, June 10th, 2024
Understanding SIEM Tools
SIEM tools play a crucial role in safeguarding your systems from potential threats. This blog post will explore the importance of these tools and how they can help keep your data secure.
more →
Search Security, Monday, June 10th, 2024
Mandiant: 'Exposed Credentials' Led To Snowflake Attacks
According to new threat research, Mandiant is reporting that UNC5537 conducted attacks against Snowflake database customers at least as early as April 14.
more →
TechCrunch, Monday, June 10th, 2024
Mandiant Says Hackers Stole A 'Significant Volume Of Data' From Snowflake Customers
Security researchers say they believe financially motivated cybercriminals have stolen a 'significant volume of data' from hundreds of customers hosting their vast banks of data with cloud storage giant Snowflake.
more →
The Cyber Hut, Monday, June 10th, 2024
Identity Data Automation: The What And Why
Identity Governance and Administration (IGA) has a long and often tortured history. Emerging 20+ years ago in response to financial services regulation such as 2002 Sarbanes-Oxley Act or the 1999 Gramm-Leach-Bliley Act it was often littered with complex project analysis phases, tooling that had limited integration capabilities and user experiences that were far from perfect.
more →
Search Security, Monday, June 10th, 2024
8 SaaS Security Best Practices For 2024
SaaS has become ubiquitous. To secure it, take steps to inventory SaaS usage, securely authenticate usage, encrypt data, adopt single sign-on and more.
more → Analytics Insight, Saturday, June 8th, 2024
20 Free Cybersecurity Tools
Stay Ahead in Cybersecurity With Our Curated List of 20 Free Tools In the Year 2024
more → Balbix, Friday, June 7th, 2024
What is CTEM? The Basics of Continuous Threat Exposure Management
This article discusses the basics of CTEM and its five phases. For a detailed guide, including a checklist, for organizations looking to migrate to CTEM, don't miss our Comprehensive CTEM ebook.
more →
Fortra, Thursday, June 6th, 2024
What Is The Standard Of Good Practice For Information Security?
The ISF (Information Security Forum) Standard of Good Practice (SoGP) is a comprehensive set of best practices designed to help organizations effectively manage their information security risks.
more →
SearchSecurity, Thursday, June 6th, 2024
What Is A Cloud Security Framework? A Complete Guide
With so many apps and data residing in cloud, employing a security framework to help protect cloud infrastructure is an essential move for an organization.
more → aembit, Thursday, June 6th, 2024
NIST 2.0: Securing Workload Identities and Access
The updated framework addresses the need to secure non-human identities. Here's how that can extend across the guidance's five key functions.
more →
InformationWeek, Thursday, June 6th, 2024
How To Protect Your Enterprise From Deepfake Damage
As fraudulent content proliferates, it's important to build a defense and response strategy. Here's how to get started.
more →
Click Armor, Thursday, June 6th, 2024
Cyber Lingo: What Is Pretexting In Cyber Security?
Pretexting in cyber security is commonly used but not widely known. When employees don't know what pretexting is - or how convincing it can be - it makes them more vulnerable to the tricks of a cyber criminal.
more →
Cyber Defense Magazine, Thursday, June 6th, 2024
Conference 2024: Transformative Innovations In Cybersecurity
Beyond the Buzz Word AI, the Practical Groundbreaking Stuff
more →
DARK Reading, Wednesday, June 5th, 2024
Cloud Security Alliance Survey Finds 70% Of Organizations Have Established Dedicated SaaS Security Teams
Seventy percent of organizations have prioritized investment in SaaS security, establishing dedicated SaaS security teams, despite economic uncertainty and workforce reductions. This was a key finding in the fourth Annual SaaS Security Survey Report: 2025 CISO Plans and Priorities released today by the Cloud Security Alliance (CSA)
more →
APOND, Monday, June 3rd, 2024
Mastering The Art Of Least Privilege Access Implementation: A Comprehensive Guide
The concept of least privilege access has emerged as a paramount principle, serving as a cornerstone for robust identity governance and access management strategies.
more →
Click Armor, Friday, May 31st, 2024
Risk vs. Threat vs. Vulnerability: What Is The Difference?
The words risk, threat, and vulnerability are commonly used interchangeably, but they mean different things.
more → Digital Defense, Thursday, May 30th, 2024
Weighing The Risk: The Cost Of Skipping Pen Tests
Cybersecurity budgets are beginning to get cut across the country, and organizations are faced with tough choices about what should stay and what should go.
more →
Enzoic, Thursday, May 30th, 2024
Understanding Penetration Testing
A penetration test, or pentest, is a simulated cyberattack on your system to identify vulnerabilities before malicious actors can exploit them. It's a proactive approach to discovering and addressing security weaknesses.
more →
Pondurance, Thursday, May 30th, 2024
Identify Your Cybersecurity Risk Using A Risk-Based Approach
The National Institute of Standards and Technology (NIST) has laid out the Cybersecurity Framework as a set of guidelines that offers outcomes that organizations can use in their cybersecurity efforts.
more →
The Verge, Thursday, May 30th, 2024
600,000 Routers Were Bricked In A Single Cyberattack
A cyberattack was behind an incident last year that disabled over 600,000 internet routers across several Midwest states between October 25th and 27th, according to new research published by Lumen Technologies' threat research arm, Black Lotus Labs. The incident wasn't disclosed at the time, despite hundreds of thousands of routers being rendered inoperable.
more →
Balbix, Wednesday, May 29th, 2024
The Top 11 Metrics For Successful Vulnerability Management
In our latest ebook, The Ultimate Guide to Vulnerability Management (VM) Metrics, we uncover the top 11 VM metrics you should measure and report, why these metrics matter to the success of your team and your business, and how to use them to get the executive buy-in, support and resources you need to maintain a successful VM program. Let's highlight some of the key points in the ebook.
more → Security Boulevard, Wednesday, May 29th, 2024
Security Operations By The Numbers: 30 Cybersecurity Stats That Matter
Enterprise IT and security operations (SecOps) leaders are under growing pressure from threat actors pounding away at their infrastructure defenses using a variety of new and proven tactics, techniques and procedures.
more →
Backup Central, Monday, May 27th, 2024
Cybersecurity Red Team: Offensive Experts
In today's digital landscape, organizations must remain vigilant against the ever-evolving threats posed by cybercriminals. One crucial aspect of maintaining a robust security posture is understanding the tactics and techniques employed by attackers.
more → strobes, Monday, May 27th, 2024
Continuous Threat Exposure Management (CTEM) - The Ultimate Guide For CISOs
A security breach. Headlines scream, investors panic, and fingers get pointed. But what if you could anticipate an attack with the help of CTEM before it happens?
more →
The Register, Thursday, May 23rd, 2024
Google Guru Roasts Useless Phishing Tests, Calls For Fire Drill-Style Overhaul
Current approaches aren't working and demonize security teams
more →
TripWire, Wednesday, May 22nd, 2024
Top 7 Cybersecurity Trends For Enterprises In 2024
How can an organization prepare to be cyber-resilient in 2024? The major trends to look out for seem to focus mainly on AI. While the rise of generative AI indeed poses challenges, executives should be cautious not to miss other critical trends that will shape the cybersecurity landscape this year.
more → ITProToday, Wednesday, May 22nd, 2024
Master AI Cybersecurity: Protect And Enhance Your Network
This guide examines AI's role in cybersecurity strategies and how cybercriminals exploit AI to enhance their attacks.
more →
AiTHORITY, Wednesday, May 22nd, 2024
HR and IT Related Emails are the Top Choices for Phishing Scams
KnowBe4's Q1 2024 global phishing report finds that HR and IT related email subjects account for more than 42% and 30% of top phishing email subjects respectively
more →
VentureBeat, Monday, May 20th, 2024
Why Data Breaches Have Become 'Normalized' And 6 Things Cisos Can Do To Prevent Them
Every week, a new data breach threatens enterprise organizations worldwide, forcing a re-evaluation of cybersecurity strategies to protect consumers.
more →
Abalytics Insight, Monday, May 20th, 2024
Top 10 Risks Of Cybersecurity In Cloud Computing
Unleash the top 10 cybersecurity risks in cloud computing
more → Analytics Insight, Monday, May 20th, 2024
Top 10 Innovative BI Tools For Strategic Market Segmentation
Explore these top 10 innovative BI tools for strategic market segmentation
more → Security Boulevard, Monday, May 20th, 2024
Shifting The Security Mindset: From Network To Application Defense
Until recently, when businesses thought about securing their organizations, they had one focus: network security. The spotlight was on protecting network infrastructure against cyberthreat actors and data breaches. This included connected devices such as computers, servers and wireless networks.
more → Data Science Cloud, Friday, May 17th, 2024
5 Biggest Cybersecurity Risks In Edge Computing
Edge computing is quickly gaining popularity because it enables low-latency, high-efficiency, real-time operations by moving storage and processing to the network's boundary.
more →
CSO Online, Thursday, May 16th, 2024
Cyber Resilience: A Business Imperative CISOs Must Get Right
With ransomware at an all-time high, companies need to understand that being cyber resilient means going beyond compliance to considering all aspects of a business, from operational continuity to software supply chain security.
more →
Enzoic, Thursday, May 16th, 2024
2024 Verizon DBIR: Key Thoughts
It's DBIR season once again, and, as usual, the Verizon team has produced a detailed and comprehensive (and humorous) exemplar of statistical cybersecurity analysis and reporting.
more → Gigaom, Wednesday, May 15th, 2024
SSE vs. SASE: Which One is Right for Your Business?
Security service edge (SSE) and secure access service edge (SASE) are designed to cater to the evolving needs of modern enterprises that are increasingly adopting cloud services and supporting remote workforces.
more →
Analytics Insight, Wednesday, May 15th, 2024
How AI Detection Tools Tackle Deepfake Threats
How AI detection tools tackle deepfake threats- Have a look
more → theCUBEresearch, Wednesday, May 15th, 2024
CISA's Secure by Design Pledge Continues to Build Momentum: Is it Basic? Maybe, but it's a Start
CISA's Secure by Design Pledge is a voluntary pledge that enterprise software vendors make in a good-faith effort to set and attain certain security-focused goals, the most fundamental of which is to build cybersecurity into the design and manufacture of tech products.
more →
Security Boulevard, Wednesday, May 15th, 2024
5 Must-Haves To Get (And Stay) Compliant With Privacy And Security Frameworks
Achieving and maintaining compliance with data privacy and security frameworks is a complex undertaking that requires a multi-faceted approach. From automation tools to consultancy services, penetration testing to third-party audits, there are several crucial components that organizations must consider.
more → DARKReading, Tuesday, May 14th, 2024
Top 5 Most Dangerous Cyber Threats In 2024
SANS Institute experts weigh in on the top threat vectors faced by enterprises and the public at large.
more → ITProToday, Tuesday, May 14th, 2024
Five Things We Learned From The 2024 RSA Conference
Speakers at the 2024 RSA Conference painted a bleak picture for the future of the cyber security industry
more → HelpNet Security, Monday, May 13th, 2024
Critical Vulnerabilities Take 4.5 Months On Average To Remediate
Over a third of organizations had at least one known vulnerability in 2023, with nearly a quarter of those facing five or more, and 60% of vulnerabilities remained unaddressed past CISA's deadlines, according to Bitsight.
more →
HelpNet Security, Monday, May 13th, 2024
AI's Rapid Growth Puts Pressure On Cisos To Adapt To New Security Risks
The increased use of AI further complicates CISO role as industries begin to realize the full potential of GenAI and its impact on cybersecurity, according to Trellix.
more → Security Boulevard, Thursday, May 9th, 2024
The Road To Continuous Threat Exposure Management (CTEM) , Part 1: The Role Of Validation
Continuous threat exposure management (CTEM) is a formal program to manage cyber risk that allows organizations to enhance and optimize their overall cybersecurity posture.
more → HelpNet Security, Thursday, May 9th, 2024
3 CIS Resources To Help You Drive Your Cloud Cybersecurity
In the process of moving to the cloud, you need a security-first cloud migration strategy that considers both your security and compliance requirements upfront. In this article, we'll discuss how you can use resources from the Center for Internet Security (CIS) to create such an approach.
more → Search Enterprise Desktop, Wednesday, May 8th, 2024
Patch Management Vs. Vulnerability Management: Key Differences
Although patch and vulnerability management are intertwined, they differ in critical ways. It's important to have distinct tools and processes to execute both effectively.
more →