HelpNet Security, Wednesday, May 10,2023
Refined Methodologies Of Ransomware Attacks
Adversaries were able to encrypt data in 76% of the ransomware attacks that were conducted against surveyed organizations, according to Sophos.
more →
Back Issues This Week → Popular →
All issues › Archive
Security — Archive
2,417 articles · page 43 of 49
Cloud Native Now, Wednesday, May 10,2023
8 Tips For Successful Container Vulnerability Scanning
Container vulnerability scanning is a critical part of container security. It involves inspecting container images and their components to identify potential security issues, weaknesses or vulnerabilities.
more →
Search Security, Tuesday, May 9,2023
Hypervisor Security
Hypervisor security is the process of ensuring the hypervisor -- software that enables virtualization -- is secure throughout its lifecycle. Common security practices for hypervisors include limiting users in a local system, reducing attack surfaces and keeping systems updated.
more →
flare, Tuesday, May 9,2023
9 Open Source Threat Intelligence Sources
Keeping up with cybersecurity news is a challenge. From newly discovered vulnerabilities to new attack methodologies, you live a life of 'need to know' when ability to find is difficult. As a security professional, knowing is more than half the battle.
more →
CloudTech, Tuesday, May 9,2023
IT And Security Pros Face Increased Workload Due To Hybrid/Virtual Work Adoption
Duncan is an award-winning editor with more than 20 years experience in journalism. Having launched his tech journalism career as editor of Arabian Computer News in Dubai, he has since edited an array of tech and digital marketing publications, including Computer Business Review, TechWeekEurope, Figaro Digital, Digit and Marketing Gazette.
more →
AWS News, Tuesday, May 9,2023
Threat Intelligence Management: Best Practices
Security teams rely on threat intelligence like a ship's captain relies on a lighthouse. The information enables them to see new risks and steer clear of known threats. While threat intelligence provides benefits, many security teams struggle to use it effectively.
more →
Ckick Armor, Friday, May 5,2023
Security Culture: What Is It And How Can You Improve It To Protect Your Business?
Security culture is the key to protecting your business from phishing and social engineering attacks. Without it, implementing successful training and having prepared employees is nearly impossible.
more →
LeaksID, Friday, May 5,2023
10 Unusual Insider Threat Behavioral Indicators
In today's digital age, the risk of insider threats has become increasingly common. Insider threats can be actions taken by employees, contractors, or partners who intentionally or unintentionally compromise the confidentiality, integrity, or availability of sensitive information.
more →
CXOtoday.com, Thursday, May 4,2023
What The Phish! Bye-Bye Passwords
Twitter co-founder and chief executive officer (CEO) Jack Dorsey has stepped down from his position, ending his nearly 16-year stint with the social media giant. The company's Board has unanimously appointed Twitter's chief technology officer (CTO) Parag Agrawal as his successor.
more →
DARKReading, Thursday, May 4,2023
The Critical Importance Of Creating Secure Passwords
Almost everyone is connected to the internet in some form, and while the internet is a wonderful opportunity - full of offerings for people from all walks of life, it's more important than ever for us to be #CyberFit and smart about cyber protection.
more → DTEX, Thursday, May 4,2023
Insider Risk Detection 101: Mitigating Unintentional Insider Threats
According to the Ponemon Institute's 2022 Cost of Insider Threats Global study, the overall number of insider threat incidents jumped by 44% in the past two years, with non-malicious insiders driving 56% of incidents that cost organizations an average of $484,931 per incident.
more →
Fortra, Thursday, May 4,2023
Cybersecurity - Change Is Coming And That's A Good Thing
Those words were spoken by the US National Security Advisor way back in 2005, and it is remarkable to see how prescient they were. The economy is not only supported by the cyber world, but that world is entirely data driven. Data has become a primary focus, not just for regulatory fodder, but for business survival.
more →
DARKReading, Wednesday, May 3,2023
Anatomy Of A Malicious Package Attack
Malicious packages are hard to avoid and hard to detect - unless you know what to look for.
more →
Guardrails, Wednesday, May 3,2023
Achieving Compliance With Application Security Regulations: A CISO's Guide
No one said being a Chief Information Security Officer (CISO) was an easy job. There are numerous concerns competing for attention from CISOs that keep them busy. One of the more pressing concerns pertains to meeting regulatory requirements for application security compliance.
more →
Radware, Wednesday, May 3,2023
3 Ways To Overcome Cybersecurity Staff Shortages In 2023
Cybersecurity staff and skills shortages have been consistent trends over the past few years. According to the (ISC2) 2022 Cybersecurity Workforce Study, the 2022 global cybersecurity workforce gap stood at 3.4 million people, an increase of 26.2% from 2021. This means that not only are cybersecurity staff shortages continuing, but they are getting worse and impacting organizations' ability to fight cyberattacks.
more →
VentureBeat, Tuesday, May 2,2023
Report Shows 92% Of Orgs Experienced An Api Security Incident Last Year
Application security provider Data Theorem, announced the release of a new report in partnership with TechTarget's Enterprise Strategy Group (ESG). ESG surveyed 397 respondents on cloud-native applications and API security and found that 92% of organizations experienced at least one API-related security incident in the last 12 months.
more →
The Register, Tuesday, May 2,2023
OWASP Penetration Testing: Your Ultimate Guide!
The Open Web Application Security Project (OWASP) is an online community that was established on September 9, 2001, by Mark Curphey, a cybersecurity expert, with the objective of mitigating cyber attacks.
more →
Search Security, Tuesday, May 2,2023
Hash-Based Message Authentication Code (HMAC)
Hash-based Message Authentication Code (HMAC) is a message encryption method that uses a cryptographic key in conjunction with a hash function. It provides the server and the client each with a private key that is known only to that specific server and client, providing a more secure means of encrypting data than a simple Message Authentication Code (MAC).
more → DTEX, Tuesday, May 2,2023
7 Reasons To Ditch Endpoint DLP For Endpoint Visibility
Companies worldwide spend billions of dollars on endpoint data loss prevention (DLP) technology, hoping it will protect intellectual property. In theory, it's a good idea. There's just one problem: it doesn't work.
more → Fortra, Tuesday, May 2,2023
4 Lessons From Fortra's Attack Surface Management Guide
Think of all the different points within your organization that provide access to information. That could be your website, the mobile version of your application, your Slack instance, and so much more. It's a list that gets very long, very quickly.
more → CSO Online, Tuesday, May 2,2023
11 Security Tools All Remote Employees Should Have
Compromised employee personal devices and accounts can disrupt and possibly threaten business security. Getting these tools into their hands will help.
more →
The Register, Monday, May 1,2023
Plugging The Infosec Holes Before The Bad Guys Can Sneak In
Security posture management gets its due at RSA
more →
ITProToday, Thursday, April 27,2023
Top 15 DevSecOps Worst Practices
There are a lot of things that can go wrong with DevSecOps that practitioners should be aware of and avoid.
more →
DARKReading, Thursday, April 27,2023
Sans Reveals Top 5 Most Dangerous Cyberattacks For 2023
SEO-aided attacks, developer targeting, and malicious use of AI top the list for 2023
more → Cloud Security Alliance (CSA), Thursday, April 27,2023
DOWNLOAD: Security Implications of ChatGPT
This position paper provides analysis across four dimensions: How it can benefit cybersecurity, how it can benefit malicious attackers, how ChatGPT might be attacked directly, and guidelines for responsible usage
more →
Forrester, Thursday, April 27,2023
Decoding The New Zero Trust Terminology
Over the last year, I've been scared of two things. Our research teams have been planning and publishing a ton of research around Zero Trust, and since we're analysts, new terminology, and comorbid acronyms, have emerged.
more →
DARKReading, Thursday, April 27,2023
CISO Survival Guide For Cyberattacks
CISOs who have survived major cyber incidents recommend letting company ethos guide incident response.
more → CSO Online, Thursday, April 27,2023
5 Most Dangerous New Attack Techniques
Adversarial AI, ChatGPT-powered social engineering, and paid advertising attacks are among the most dangerous emerging attack methods, according to SANS Institute analysts.
more → Fortra, Wednesday, April 26,2023
What Is A WAF? (Web Application Firewall)
A Comprehensive Guide to Understanding WAFs: How it Works, Types, and Security Models
more → SearchSecurity, Wednesday, April 26,2023
The Complete Guide To Ransomware
Organizations in every industry can be targets of cybercrime for profit. Get expert advice on ransomware prevention, detection and recovery in our comprehensive guide.
more → DARKReading, Wednesday, April 26,2023
CISOs Rethink Data Security With Info-Centric Framework
The Data Security Maturity Model ditches application, network, and device silos when it comes to architecting a data security strategy.
more → HelpNet Security, Wednesday, April 26,2023
Attackers Are Logging In Instead Of Breaking In
Cyberattackers leveraged more than 500 unique tools and tactics in 2022, according to Sophos.
more → Security Boulevard, Tuesday, April 25,2023
Why App Security Teams Need To Understand GDPR Compliance
If you are part of an app and security team, or work with sensitive data, especially those in the tech industries, or have a global consumer base, then GDPR compliance needs to be on your radar.
more → Security Intelligence, Tuesday, April 25,2023
Leveraging SaaS Data Security And Compliance Tools
Data breaches are a risk that every business has to prepare for. To mitigate potential risks like the loss of sensitive information, financial impact and reputational damage, organizations need to take a proactive approach to protect their data and comply with industry regulations.
more →
Enterprise Storage Forum, Tuesday, April 25,2023
How To Scan For Vulnerabilities With Nmap: Steps & Definition
When it comes to ensuring the security of your network, performing regular vulnerability scans is essential. This is the process of combing through the network for weaknesses, gaps, or loopholes in the network's software code or architecture.
more →
SearchSecurity, Tuesday, April 25,2023
Google, Mandiant Highlight Top Threats, Evolving Adversaries
Enterprises are struggling to keep up as adversary groups improve tactics. But one of the most difficult groups to defend against, according to Google and Mandiant, was a surprise.
more → SearchSecurity, Tuesday, April 25,2023
Cloud-Native Security Metrics For CISOs
Author and chief risk officer Rich Seiersen talks about the challenges of securing cloud-native applications and how to use metrics to improve their effectiveness.
more → Security Boulevard, Tuesday, April 25,2023
Practical Ways To Optimize Your Security Tech Stack
While CISOs and other security leaders have never been blessed with unlimited budgets, many have recently felt the pinch as companies work to weather recent economic constraints.
more → Help Net Security, Monday, April 24,2023
Unlocking The Passwordless Era
Although interest in passwordless technology, which aims to eliminate the need for passwords, is relatively low, 65% of consumers are receptive to using new technology that simplifies their lives, according to 1Password.
more → RiskLens, Monday, April 24,2023
The CISO's Ultimate Budget Retention Playbook for 2023
This comprehensive resource guide was compiled for cybersecurity leaders who want to secure or improve their budgets through the rest of this year and next.
more →
Help Net Security, Monday, April 24,2023
Study Of Past Cyber Attacks Can Improve Organizations' Defense Strategies
Ransomware operators have been increasingly launching frequent attacks, demanding higher ransoms, and publicly exposing victims, leading to the emergence of an ecosystem that involves access brokers, ransomware service providers, insurance providers, and ransom negotiators, according to Deepwatch.
more → Security Boulevard, Monday, April 24,2023
Getting Ready for the Next Generation of PCI DSS: Version 4.0
The Payment Card Industry Data Security Standard (PCI DSS) is a widely recognized set of security standards that organizations must comply with when handling credit card information.
more → The Enterprisers Project, Monday, April 24,2023
Artificial Intelligence: 6 Ways It Improves Decision-Making
Thinking about an AI strategy for your organization? Here are 6 real-world examples of how this powerful technology can boost business.
more →
VentureBeat, April 22nd, 2023
ChatGPT May Hinder The Cybersecurity Industry
Since its launch in November 2022, ChatGPT, an artificial intelligence (AI) chatbot, has been causing quite a stir because of the software's surprisingly human and accurate responses.
more → DARKReading, April 21st, 2023
Shadow IT, SaaS Pose Security Liability for Enterprises
Software written or acquired outside of IT's purview is software that IT can't evaluate for security or compliance.
more → Techradar.pro, April 20th, 2023
There Were More Ransomware Attacks Last Month Than Any Other On Record
Clop has certainly left its mark on the ransomware world
more →
DARK Reading, April 20th, 2023
Newer Authentication Tech A Priority For 2023
Organizations are planning on newer multifactor authentication methods, such as invisible MFA and passwordless, says SecureAuth in its "State of Authentication" report.
more → AiTHORITY, April 19th, 2023
Mandiant Unveils M-Trends 2023 Report, Delivering Critical Threat Intelligence Directly From The Frontlines
Mandiant Inc., now part of Google Cloud, released the findings of its M-Trends 2023 report. Now in its 14th year, this annual report provides timely data and expert analysis on the ever-evolving threat landscape based on Mandiant frontline investigations and remediations of high-impact cyber attacks worldwide.
more →
CXOtoday.com, April 18th, 2023
Top Cybersecurity Trends For 2023
In recent years, the world of cybersecurity has seen its fair share of headline-grabbing happenings: the post-pandemic shift to remote work, a former social media exec whistleblowing, the AI-driven ChatGPT phenomenon, and much more.
more → Security Intelligence, April 18th, 2023
Securing Your Remote Workforce: How To Reduce Cyber Threat
The debates have (mostly) stopped about whether remote work is here to stay. For many people, it's just the way we work today. However, even three years later, cybersecurity around remote work is still a top concern.
more →