IT Security Guru, Tuesday, October 17,2023
IT Admins Are Just As Guilty For Weak Password Use
No, it's not just end-users who are to blame for bad passwords. New research by Outpost24 examines admin use of weak passwords.
more →
Back Issues This Week → Popular →
All issues › Archive
Security — Archive
2,417 articles · page 39 of 49
Indusface, Tuesday, October 17,2023
HTTP/2 Rapid Reset Attack Vulnerability
Google, Amazon Web Services & others recently disclosed a vulnerability in HTTP/2 protocol, which is being tracked as 'CVE-2023-44487'. The flaw lies in how the HTTP/2 protocol was implemented to increase the efficiency of transmitting various messages between endpoints by 'Stream multiplexing'.
more →
CIO, Tuesday, October 17,2023
CIOs Must Safeguard Organizations With A Validated Zero Trust Solution
Despite significant investment in cybersecurity, organizations' current approaches fall short, introducing rising levels of vulnerability. Validated Zero Trust is here to change that.
more →
FORTRA, Monday, October 16,2023
Understanding Cybersecurity Footprinting: Techniques And Strategies
Footprinting, also known as fingerprinting, is a methodology used by penetration testers, cybersecurity professionals, and even threat actors to gather information about a target organization to identify potential vulnerabilities.
more →
Dataversity, Monday, October 16,2023
4 Benefits of Role-Based Access Control (RBAC) and How to Implement It
Data has become the new gold, and ensuring its security has never been more paramount. As cyber threats evolve, so must our defenses. Enter role-based access control (RBAC), a solution that promises to revolutionize how we think about data access and security.
more →
Solutions Review, Friday, October 13,2023
What Does Successful Cyber Warfare Look Like?
Conventional shooting or 'kinetic' wars used to end with a clear winner and clear loser, and the closure was palpable in ticker-tape parades, terms-of-surrender signings, and mass discharges of returning soldiers. That, clearly, is no longer the case, exemplified by the seemingly endless analyses during our wars in Afghanistan and Iraq that asked a common question: what does victory look like?
more →
IT Security Guru, Friday, October 13,2023
No, We're Not All Going Passwordless
S&P Market Intelligence Business Impact Brief Finds Organisations Will Continue To Use Passwords for the Foreseeable Future
more →
Search Security, Thursday, October 12,2023
5 Steps To Achieve A Risk-Based Security Strategy
Learn about the five steps to implement a risk-based security strategy that helps naturally deliver compliance as a consequence of an improved security posture.
more →
Architecture and Governance, Wednesday, October 11,2023
Automating For Zero Trust
Increasing automation and using change management techniques can help you integrate a Zero Trust strategy into a function SecOps environment.
more →
FutureCIO, Tuesday, October 10,2023
Leveraging AI For Cybersecurity
The use of Artificial Intelligence (AI) has been a double-edged sword when it comes to cybersecurity. As technology advances, threat actors can also leverage it for malicious attacks.
more → Solutions Review, Monday, October 9,2023
37 Cybersecurity Awareness Month Quotes From Industry Experts In 2023
As part of Cybersecurity Awareness Month, we called for the industry's best and brightest to share their comments. The experts featured represent some of the top Cybersecurity solution providers with experience in these marketplaces, and each projection has been vetted for relevance and ability to add business value.
more → The Record, Thursday, October 5,2023
Cybercrime Gangs Now Deploying Ransomware Within 24 Hours Of Hacking Victims
Cybercriminals are now deploying ransomware within the first day of initially compromising their targets, a dramatic drop on the 4.5 days that the task had been taking last year, according to a new threat report.
more →
CXOtoday.com, Wednesday, October 4,2023
Key Security Trends Observed In 2023
As the world returns to normalcy post a turbulent period of two years, cybersecurity strategies too have evolved to manage the new normal.
more →
Solutions Review, Wednesday, October 4,2023
Data Security Ownership: Navigating Top Challenges & Key Solutions
Data security ownership involves the rights and responsibilities related to managing data security within an organization. It entails designating a person within the organization who appreciates the value of collected data and ensures its security, accuracy, and usefulness.
more → Security Boulevard, Wednesday, October 4,2023
A Guide To IAM Compliance: Set Your Organization Up For Success
When it comes to successfully securing your organization today, the three most important words may be who, what, and how. Who can access your network, what company assets will they have access to, and how are the access privileges used?
more →
wallarm, Wednesday, October 4,2023
2023 OWASP Top-10 Series: Spotlight on Injection
Welcome to the 12th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category - the details, the impact and what you can do about it
more →
IT Security Guru, Tuesday, October 3,2023
The State Of Cybersecurity: Cyber Skills Gap Leaves Business Vulnerable To Attacks, New Research Reveals
ISACA, the leading global professional association helping individuals and organisations in their pursuit of digital trust, today launches new research looking at the state of cybersecurity.
more → Enzoic, Tuesday, October 3,2023
Survey Results: The Proof Is In The Passwords
Authentication is a cornerstone of cybersecurity, but strategies to reduce the common pitfalls and resulting security risks haven't evolved.
more →
NIST, Monday, October 2,2023
Kicking off NIST's Cybersecurity Awareness Month Celebration
October is always an exciting time for us as we celebrate Cybersecurity Awareness Month and some of NIST's greatest accomplishments, resources, guidance, and latest news in the cybersecurity space.
more →
Decipher, Friday, September 29,2023
FBI: Ransomware Actors Launching 'Dual' Attacks
The FBI is warning of dual ransomware attacks, where victim organizations are hit with two different types of ransomware variants in quick succession - sometimes within 48 hours of each other.
more →
DARKReading, Friday, September 29,2023
People Still Matter In Cybersecurity Management
Cybersecurity's constant stream of shiny new things shouldn't distract managers from their focus on the people they're protecting.
more →
DARK Reading, Thursday, September 28,2023
Looking Beyond the Hype Cycle of AI/ML in Cybersecurity
Artificial intelligence and machine learning aren't yet delivering on their cybersecurity promises. How can we close the gaps?
more → HelpNet Security, Tuesday, September 26,2023
5 Free Vulnerability Scanners You Should Check Out
Vulnerability scanners delve into systems to uncover security gaps. The primary mission? To fortify organizations against breaches and shield sensitive data from exposure.
more →
Fortra, Tuesday, September 26,2023
Best 10 Cybersecurity Podcasts
The cybersecurity industry is one in which staying in the loop on recent developments is incredibly important. Because technologies, industry conditions, and the threat landscape all change so frequently, it can be difficult to remain up to date on news, standard practices, and significant threats.
more →
SecurityIntelligence, Tuesday, September 26,2023
The Growing Risks of Shadow IT and SaaS Sprawl
In today's fast-paced digital landscape, there is no shortage of apps and Software-as-a-Service (SaaS) solutions tailored to meet the diverse needs of businesses across different industries. This incredible array of options has revolutionized how we work, providing cost-effective and user-friendly tools that streamline tasks and boost productivity.
more →
Rezilion, Tuesday, September 26,2023
What Exactly Is Application Security Posture Management?
For security leaders looking for a more modern approach to improve their application security posture and better manage enterprise risk, enter application security posture management, or ASPM.
more →
CIO, Monday, September 25,2023
The Changing Face Of Cybersecurity Threats In 2023
Cybersecurity has always been a cat-and-mouse game, but the mice keep getting bigger and are becoming increasingly harder to hunt.
more → Infoworld, Monday, September 25,2023
How Generative AI Changes Cybersecurity
The impacts of large language models and AI on cybersecurity range from the good to the bad to the ugly. Here's what to watch out for, and how to prepare.
more →
Security Boulevard, Wednesday, September 20,2023
XDR vs SIEM vs SOAR: Choosing The Best Security Solution
In today's ever-evolving cybersecurity landscape, choosing the right threat detection and incident response (TDIR) strategy is paramount. It's like selecting the perfect toolset for a critical job - you need it to be precise, reliable, and efficient.
more → Click Armor, Wednesday, September 20,2023
The 10 Most Common Cyber Security Myths
Is it a cyber security truth or a cyber security myth? Cyber crime is on the rise, and a large part of combating it starts with understanding the threats that exist. Unfortunately, numerous myths about cyber security persist which can lead to complacency or an incorrect risk management approach.
more →
Security Boulevard, Tuesday, September 19,2023
What Is Continuous Threat Exposure Management (CTEM)?
This integrates threat intelligence situational awareness and automated response capabilities, enabling organizations to respond to new or evolving cyber threats more effectively and proactively.
more → Cyral, Tuesday, September 19,2023
How Security Leaders Think About Data Security Governance
At Cyral, we pride ourselves on working closely with security leaders to see the world as they see it. We conducted multiple interviews and surveys to understand their needs as it pertains to data security governance - what it encompasses, what it excludes, how much of it is driven by risk, how much by business needs, where they feel good, and where they need to invest. the list goes on.
more →
Click Armor, Monday, September 18,2023
Role-Based Security Awareness Training: Planning & Delivering To Manage Risks
Role-based security awareness training is a customized approach to training that tailors the content and delivery of security awareness programs to the specific roles and responsibilities of individuals within an organization.
more → Security Intelligence, Monday, September 18,2023
How NIST Cybersecurity Framework 2.0 Tackles Risk Managemen
The NIST Cybersecurity Framework 2.0 (CSF) is moving into its final stages before its 2024 implementation. After the public discussion period to inform decisions for the framework closed in May, it's time to learn more about what to expect from the changes to the guidelines.
more → Noetic , Friday, September 15,2023
The CISO's Three-Point Checklist For Maximizing Cybersecurity ROI
In this blog, we present the CISO's Checklist for Maximizing Cybersecurity ROI, providing essential criteria to navigate this complex terrain effectively. Explore how aligning security strategies with business objectives, adopting continuous threat exposure management, and harnessing the power of automation can fortify cybersecurity in an ever-evolving threat landscape.
more →
Security Boulevard, Friday, September 15,2023
Cybersecurity Goals Conflict With Business Aims
Cybersecurity is often out of sync with business goals, according to a study conducted by Forrester Consulting, which found 97% of organizations face challenges in trying to align cybersecurity priorities with business outcomes.
more → DARKReading, Friday, September 15,2023
Ciso Global Deepens Capabilities With Integrated Threat Intelligence Feed
CISO Global (NASDAQ: CISO), an industry leader as a managed cybersecurity and compliance provider, is expanding its capabilities by deepening its threat intelligence feed and incorporating it into existing services
more → The Register, Thursday, September 14,2023
Here's Why Cloud Credentials Are The Hottest Item On Criminal Marketplaces
Stolen cloud credentials cost about the same as a dozen donuts, according to IBM X-Force, whose threat intel team says logins make up almost 90 percent of goods and services for sale on dark web marketplaces.
more →
Reversing Labs, Wednesday, September 13,2023
SANS DevSecOps report: 5 key takeaways
SANS has released the results of its annual DevSecOps survey, which reveals important shifts in how organizations are approaching application security testing.
more →
HelpNet Security, Wednesday, September 13,2023
Latest Fraud Schemes Targeting The Payments Ecosystem
These include the use of malvertising and search engine optimization (SEO) techniques to cultivate compelling and effective phishing and social engineering campaigns, the utilization of emerging advanced language model (ALM) technologies, and the increased targeting of authentication processes.
more → Fortra, Wednesday, September 13,2023
5 Reasons Why You Should Conduct Regular Cybersecurity Audits
Cyber threats are growing more sophisticated, covert, and frequent every day. This year alone has seen the likes of T-Mobile and PharMerica suffering serious security breaches. These incidents disrupted operations and threatened their bottom lines, not to mention the lingering aftereffects and negative brand perception in the eyes of their customers.
more → InformationWeek, Tuesday, September 12,2023
What Cybersecurity Gets Wrong
Cybercrime cost Americans $10.3 billion in 2022, according to the FBI's IC3 report. The average cost of a breach globally was $4.45 million in 2023, per IBM's Cost of a Data Breach report. And the total cost may be as much as $8 trillion around the world this year.
more →
Security Boulevard, Tuesday, September 12,2023
The Top 7 Insider Threats Every Company Should Be Aware Of
In today's volatile and interconnected world, safeguarding a company's assets is not just about fending off external cyber-attacks and physical breaches. However, an often overlooked risk comes from within - the insiders.
more → IT Security Guru, Tuesday, September 12,2023
Don't Leave Cybersecurity To Chance
In today's digital age, where organisations heavily rely on technology and data, ensuring strong Cyber Security practices is paramount, and one often overlooked aspect, is the departure of staff members.
more → ForgeRock, Tuesday, September 12,2023
6 Ways Passwords Can Be Stolen - And How Passwordless Can Stop Them All
Passwords have gotten a lot of attention lately. Why? Because they pose a double threat with hackers and users. According to the Verizon 2023 DBIR, 86% of breaches involve stolen, weak, or default passwords. Of those breaches, 74% involve the human element, which includes social engineering attacks, errors, or misuse.
more →
ZDNet, Tuesday, September 12,2023
6 Simple Cybersecurity Rules To Live By
How do you train others to avoid being victims of online crime? It's all about human behavior.
more →
CXOtoday.com, Monday, September 11,2023
Security Challenges With 5G Networks
India's telecom regulators aren't allocating spectrum directly to enterprises for building private 5G networks, but they can lease it from private operators. Once the process starts-off, CTOs may have to be ready to face some challenges when they shift over from legacy systems to private 5G networks.
more → Fortra, Monday, September 11,2023
10 Mistakes In Cybersecurity And How To Avoid Them
It's easy to rest on our laurels. Prevent a few breaches - or go long enough without one - and you start to feel invincible. While our efforts are certainly laudable, we can't get too comfortable.
more → Blackfog, Saturday, September 9,2023
What Types Of Data Breaches Do You Need To Know About In 2023?
What Types of Data Breaches do you Need to Know About in 2023? By now, all firms should be aware that cybersecurity threats are among the leading risks any business faces. Within this, those that directly compromise sensitive data have the potential to be especially damaging.
more →
Security Boulevard, Friday, September 8,2023
Zero-Trust: 5 Steps To Transition From Hype To Reality
The paradigm shift toward zero-trust has been years in the making for some organizations, while others still regard it as an aspiration. Although many organizations have touted their success in implementing the key principles, the journey toward full implementation is expected to be gradual.
more →