Abalytics Insight, Monday, May 20th, 2024
Top 10 Risks Of Cybersecurity In Cloud Computing
Unleash the top 10 cybersecurity risks in cloud computing
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Popular →
All sections ›
Archive
Security — Archive
2,534 articles · page 35 of 51
Analytics Insight, Monday, May 20th, 2024
Top 10 Innovative BI Tools For Strategic Market Segmentation
Explore these top 10 innovative BI tools for strategic market segmentation
more → Security Boulevard, Monday, May 20th, 2024
Shifting The Security Mindset: From Network To Application Defense
Until recently, when businesses thought about securing their organizations, they had one focus: network security. The spotlight was on protecting network infrastructure against cyberthreat actors and data breaches. This included connected devices such as computers, servers and wireless networks.
more →
Data Science Cloud, Friday, May 17th, 2024
5 Biggest Cybersecurity Risks In Edge Computing
Edge computing is quickly gaining popularity because it enables low-latency, high-efficiency, real-time operations by moving storage and processing to the network's boundary.
more →
CSO Online, Thursday, May 16th, 2024
Cyber Resilience: A Business Imperative CISOs Must Get Right
With ransomware at an all-time high, companies need to understand that being cyber resilient means going beyond compliance to considering all aspects of a business, from operational continuity to software supply chain security.
more →
Enzoic, Thursday, May 16th, 2024
2024 Verizon DBIR: Key Thoughts
It's DBIR season once again, and, as usual, the Verizon team has produced a detailed and comprehensive (and humorous) exemplar of statistical cybersecurity analysis and reporting.
more →
Gigaom, Wednesday, May 15th, 2024
SSE vs. SASE: Which One is Right for Your Business?
Security service edge (SSE) and secure access service edge (SASE) are designed to cater to the evolving needs of modern enterprises that are increasingly adopting cloud services and supporting remote workforces.
more →
Analytics Insight, Wednesday, May 15th, 2024
How AI Detection Tools Tackle Deepfake Threats
How AI detection tools tackle deepfake threats- Have a look
more → theCUBEresearch, Wednesday, May 15th, 2024
CISA's Secure by Design Pledge Continues to Build Momentum: Is it Basic? Maybe, but it's a Start
CISA's Secure by Design Pledge is a voluntary pledge that enterprise software vendors make in a good-faith effort to set and attain certain security-focused goals, the most fundamental of which is to build cybersecurity into the design and manufacture of tech products.
more →
Security Boulevard, Wednesday, May 15th, 2024
5 Must-Haves To Get (And Stay) Compliant With Privacy And Security Frameworks
Achieving and maintaining compliance with data privacy and security frameworks is a complex undertaking that requires a multi-faceted approach. From automation tools to consultancy services, penetration testing to third-party audits, there are several crucial components that organizations must consider.
more → DARKReading, Tuesday, May 14th, 2024
Top 5 Most Dangerous Cyber Threats In 2024
SANS Institute experts weigh in on the top threat vectors faced by enterprises and the public at large.
more →
ITProToday, Tuesday, May 14th, 2024
Five Things We Learned From The 2024 RSA Conference
Speakers at the 2024 RSA Conference painted a bleak picture for the future of the cyber security industry
more →
HelpNet Security, Monday, May 13th, 2024
Critical Vulnerabilities Take 4.5 Months On Average To Remediate
Over a third of organizations had at least one known vulnerability in 2023, with nearly a quarter of those facing five or more, and 60% of vulnerabilities remained unaddressed past CISA's deadlines, according to Bitsight.
more →
HelpNet Security, Monday, May 13th, 2024
AI's Rapid Growth Puts Pressure On Cisos To Adapt To New Security Risks
The increased use of AI further complicates CISO role as industries begin to realize the full potential of GenAI and its impact on cybersecurity, according to Trellix.
more → Security Boulevard, Thursday, May 9th, 2024
The Road To Continuous Threat Exposure Management (CTEM) , Part 1: The Role Of Validation
Continuous threat exposure management (CTEM) is a formal program to manage cyber risk that allows organizations to enhance and optimize their overall cybersecurity posture.
more → HelpNet Security, Thursday, May 9th, 2024
3 CIS Resources To Help You Drive Your Cloud Cybersecurity
In the process of moving to the cloud, you need a security-first cloud migration strategy that considers both your security and compliance requirements upfront. In this article, we'll discuss how you can use resources from the Center for Internet Security (CIS) to create such an approach.
more → Search Enterprise Desktop, Wednesday, May 8th, 2024
Patch Management Vs. Vulnerability Management: Key Differences
Although patch and vulnerability management are intertwined, they differ in critical ways. It's important to have distinct tools and processes to execute both effectively.
more →
hyperproof, Wednesday, May 8th, 2024
Build Strong Information Security Policy: Template & Examples
Every organization needs to have security measures and policies in place to safeguard its data. One of the best and most important measures you can take to protect your data (and that of your customers) is simply to have a robust information security policy.
more →
scytale, Tuesday, May 7th, 2024
What Are Cyber Essentials? Requirements, Preparation Process & Certification
Let's be honest: anything with the word 'essentials' in it is bound to grab our attention. However, understanding yet another cybersecurity certification may be daunting, so we've consolidated everything you need to know about Cyber Essentials and whether or not this may be a tailor-made fit for your company.
more →
Kratikal Blogs, Tuesday, May 7th, 2024
Top Endpoint Security Tips Organizations Should Know In 2024
In today's evolving threat landscape, endpoint security remains crucial. Endpoints, which can be any device that connects to your network - laptops, desktops, tablets, and even mobile phones - are a common target for cyber attacks. A successful endpoint breach can give hackers access to your whole network, potentially leading to serious consequences.
more →
NETWORKComputing, Tuesday, May 7th, 2024
SASE Architecture: A Checklist For SASE-Savvy Businesses
SASE provides secure and efficient access to cloud-based services and resources for users, regardless of their location. Follow this checklist to attain this goal.
more →
SearchSecurity, Tuesday, May 7th, 2024
Recorded Future Observes 'Concerning' Hacktivism Shift
At RSA Conference 2024, Recorded Future detailed alarming trends as nation-state attackers operate under the guise of hacktivism to cover real threats to organizations.
more → SiliconANGLE , Monday, May 6th, 2024
theCube Research Talks Cybersecurity In The Digital Age At RSAC
Staying ahead of threats is not just a challenge, but a necessity when it comes to cybersecurity.
more →
Cyber Defense Magazine, Monday, May 6th, 2024
Defense With Threat Intelligence Operations
In an era where cyber threats loom larger and are more complex than ever, it is vitally important for organizations to have a cyber threat intelligence (CTI) program and implement threat intelligence operations (TI Ops) to bolster their defenses.
more →
Fortra, Friday, May 3rd, 2024
Vulnerability Scanning vs. Penetration Testing
In the modern digital landscape, cybersecurity is paramount, making the differentiation between vulnerability scanning and penetration testing essential for safeguarding organizational assets.
more → HelpNet Security, Thursday, May 2nd, 2024
93% of security leaders have increased SaaS security budgets
58% of the organizations were affected by a SaaS security incident in the last 18 months, according to Valence Security's 2024 State of SaaS Security Report.
more → Thales, Thursday, May 2nd, 2024
IAM and Passkeys: 4 Steps Towards a Passwordless Future
In the ever-evolving landscape of cybersecurity, Identity and Access Management (IAM) remains a vital link in the cybersecurity chain. However, with World Password Day just around the corner, there's no time like the present to consider how relying on antiquated password systems leaves organizations exposed to vulnerabilities
more →
Fortra, Thursday, May 2nd, 2024
Cybersecurity: The Battle of Wits
With cybersecurity, the digital battlegrounds stretch across the vast expanse of the internet. On the one side, we have increasingly sophisticated and cunning adversaries. On the other, skilled cybersecurity practitioners who are desperate to protect their companies' assets at all costs. One fundamental truth rings clear: it's an ongoing and relentless battle of wits.
more →
HelpNet Security, Thursday, May 2nd, 2024
2024 Data Breach Investigations Report: Most breaches involve a non-malicious human element
The exploitation of vulnerabilities as an initial point of entry almost tripled from the previous year, accounting for 14% of all breaches, according to Verizon's 2024 Data Breach Investigations Report, which analyzed a record-high 30,458 security incidents and 10,626 confirmed breaches in 2023.
more → Security Boulevard, Wednesday, May 1st, 2024
Reading the Mandiant M-Trends 2024
This is my informal, unofficial, unapproved etc blog based on my reading of the just-released Mandiant M-Trends 2024 report (Happy 15th Birthday, M-Trends! May you live for many googley years.)
more → SC Media, Wednesday, May 1st, 2024
UK cracks down on default passwords for smart devices
The UK has become the first country worldwide to prohibit Internet of Things device manufacturers from using default usernames and passwords in their products following the approval of the Product Security and Telecommunications Infrastructure act, which seeks to bolster smart device cybersecurity, The Hacker News reports.
more →
ITPro, Wednesday, May 1st, 2024
Why remote desktop tools are facing an onslaught of cyber threats
Hackers are increasingly targeting remote desktop tools in their attacks, new research reveals, prompting warnings for enterprises globally
more → WeSecureApp, Wednesday, May 1st, 2024
Data Breaches in April 2024 - Infographic
Data breaches are like uninvited guests at a party - they show up unexpectedly, take what they want, and leave a big mess behind.
more →
SC Magazine, Wednesday, May 1st, 2024
Verizon's 2024 Data Breach Investigations Report: 5 key takeaways
Verizon published its 2024 Data Breach Investigations Report (DBIR) Wednesday, highlighting the interplay between actions and attack vectors that provide the initial pathway for breaches.
more → Obsidian Security, Tuesday, April 30th, 2024
MITRE ATT&CK v15: A Deeper Dive into SaaS Identity Compromise
The MITRE ATT&CK framework is a continually evolving resource, tracking the tactics, techniques, and procedures (TTPs) employed by adversaries across all phases of an attack.
more →
Datamation, Monday, April 29th, 2024
AI in Cybersecurity: The Comprehensive Guide to Modern Security
The use of artificial intelligence (AI) in cybersecurity has fundamentally changed the way businesses protect themselves against cyberthreats.
more →
Search Networking, Monday, April 29th, 2024
SASE reality check: What should organizations expect?
Enterprises interested in SASE must grapple with challenges and misinformation about the tool. Businesses should discern SASE's true benefits before adoption.
more → Architecture and Governance, Monday, April 29th, 2024
NIST 2.0 as a Framework for All
Originally developed for federal use, the National Institute for Standards and Technology (NIST) Cybersecurity Framework (CSF) has been widely adopted across the world (and translated into numerous languages) by organisations to mitigate information security and organisational risk.
more →
The cyphere, Wednesday, April 24th, 2024
What Is Penetration Testing: A Comprehensive Business Guide
Penetration testing, or pen testing for short, is a critical way to protect IT systems and sensitive data from malicious activity proactively. This guide provides a comprehensive overview of how this technique works, business benefits, its types, methodologies, costs, and everything in between.
more →
Information Week, Wednesday, April 24th, 2024
To Catch A Cybercriminal - And The Fallout That Follows
How does law enforcement identify the people behind cybercrimes, and what happens afterward?
more →
scytale, Wednesday, April 24th, 2024
The 5 Best Practices for PCI DSS Compliance
When you're working towards getting (and staying) compliant, it's only natural to want to make extra sure that you're doing it right.
more → HYPR, Wednesday, April 24th, 2024
Best Practices To Strengthen VPN Security
Virtual private networks (VPNs) form a staple of the modern work environment. VPNs provide an essential layer of protection for employees working remotely or across multiple office locations, encrypting data traffic to stop hackers from intercepting and stealing information.
more →
DARKReading , Wednesday, April 24th, 2024
2023: A 'Good' Year For OT Cyberattacks
Attacks increased by "only" 19% last year. But that number is expected to grow significently.
more → SearchSecurity, Tuesday, April 23rd, 2024
Mandiant: Attacker Dwell Time Down, Ransomware Up In 2023
Mandiant's 'M-Trends' 2024 report offered positive signs for global cybersecurity but warned that threat actors are shifting to zero-day exploitation and evasion techniques.
more → SiliconANGLE , Tuesday, April 23rd, 2024
Google Mandiant Report Finds Surprising Fall In Time To Detect Cyber Intrusions
Global median dwell time, the average amount of time that attackers remain undetected on a target's network after gaining unauthorized access, has fallen to its lowest point in a decade.
more → InformationWeek, Friday, April 19th, 2024
What CIOs Can Learn From An Attempted Deepfake Call
An employee recognized something was wrong when they received an audio deepfake of the LastPass CEO.
more → HelpNet Security, Friday, April 19th, 2024
51% Of Enterprises Experienced A Breach Despite Large Security Stacks
Threat actors are continuing to successfully breach across the entire attack surface and the stakes are only getting higher: 93% of enterprises who admitted a breach reported unplanned downtime, data exposure, or financial loss as a result, according to Pentera.
more → Cyberscoop, Wednesday, April 17th, 2024
Mandiant: Notorious Russian Hacking Unit Linked To Breach Of Texas Water Facility
Researchers from the Google-owned firm conclude that Sandworm personas are linked to several recent attacks on critical infrastructure.
more →
SearchSecurity, Wednesday, April 17th, 2024
Mandiant Upgrades Sandworm To APT44 Due To Increasing Threat
Over the past decade, Sandworm has been responsible for high-severity attacks that highlight the group's persistence, evasion techniques and threat to government bodies.
more → SearchSecurity, Wednesday, April 17th, 2024
Mandiant Links Russia's Sandworm Hacking Group To Water Infrastructure Breaches
Mandiant released a report that links Sandworm, a Russian state-backed threat actor, to a series of recent cyberattacks against water utilities.
more →