Security Boulevard

OCTOBER 31, 2022

In 2019, Boston-based online booze company Drizly had a data breach that exposed the personal data of about 1.2 The post Drizly FTC Breach Case May Put CISOs on the Hook for Civil Liability appeared first on Security Boulevard. million customers.

CISO 97

CISO Data breaches Passwords Risk 97

Thales Cloud Protection & Licensing

JANUARY 3, 2019

It’s 2019 and data is everywhere – and what you can do with what is at your fingertips is truly transformative. Unfortunately, with every possibility a new security risk appears, and as a CISO you are well-aware of the implications. As a result, many CISOs will need to put compliance high on the priority list in 2019.

CISO 72

CISO Big data Digital transformation Encryption 72

Dark Reading

DECEMBER 10, 2018

The ultimate to-do list for ambitious security leaders.

CISO 83

CISO 83

Krebs on Security

JUNE 18, 2021

In May 2019, KrebsOnSecurity broke the news that the website of mortgage settlement giant First American Financial Corp. “The [employee] did not request a waiver or risk acceptance from the CISO.” This week, the U.S. There’s no way to tell unless you can go back through all your logs all those years.”

Insurance 331

Insurance Risk Financial Services CISO 331

Duo's Security Blog

FEBRUARY 1, 2021

We are proud to announce the Duo has achieved ISO 27001:2013, 27017:2015, and 27018:2019 certification! What is ISO 27001:2013, 27017:2015 and 27018:2019? What’s the benefit of ISO 27001:2013, 27017:2015 and 27018:2019 certification to our customers? Josh Yavor, CISO, Duo Security, now part of Cisco.

Manufacturing 105

Manufacturing Surveillance Information Security CISO 105

Troy Hunt

AUGUST 10, 2019

pic.twitter.com/049DzhpePF — Troy Hunt (@troyhunt) August 5, 2019 The best afternoon ever. troyhunt & @Scott_Helme have a LOT to answer for pic.twitter.com/2oS70YsQbr — Ken Munro (@TheKenMunroShow) August 7, 2019 Look at who you can run into at the #LevelUp party — @kgosschalk @MarcoCiappelli @troyhunt @Scott_Helme !

CISO 180

CISO Data breaches Passwords 180

CSO Magazine

JUNE 14, 2022

Multiple breaches, including the massive 2017 data breach at the credit reporting agency Equifax , have been traced back to unpatched vulnerabilities—a 2019 Tripwire study found that 27% of all breaches were caused by unpatched vulnerabilities, while a 2018 Ponemon study put the number at a jaw-dropping 60%.

CISO 116

CISO Data breaches 116

Security Affairs

JANUARY 20, 2020

Citrix addressed the actively exploited CVE-2019-19781 flaw in Citrix Application Delivery Controller (ADC), Citrix Gateway, and Citrix SD-WAN WANOP appliances. In December Citrix disclosed the critical CVE-2019-19781 vulnerability and explained that it could be exploited by attackers to access company networks.

Advertising 95

Advertising CISO Hacking Technology 95

Troy Hunt

SEPTEMBER 1, 2019

pic.twitter.com/pN1dQ38cDr — Troy Hunt (@troyhunt) September 1, 2019 Back on business as usual, there's the SIM hijacking issue with Jack Dorsey's Twitter account, more data breaches and joyously, the HIBP API being back in full swing with the 500 subscription limit issue on Azure's APIM now being overcome.

CISO 172

CISO Data breaches Accountability 172

SecureWorld News

FEBRUARY 20, 2025

Their ransom demands range from tens to hundreds of thousands of dollars, often leveraging encrypted email services like ProtonMail, Tutanota, and Skiff for communication. This highlights the importance of least-privilege access models and Just-in-Time (JIT) access controls to limit attack surfaces.

Ransomware 112

Ransomware IoT Encryption Social Engineering 112

SecureWorld News

OCTOBER 23, 2024

Securities and Exchange Commission (SEC) announced Tuesday that it has fined four companies $7 million for misleading statements about their cybersecurity incidents, particularly concerning the high-profile 2019 SolarWinds hack. Unisys Corp., Avaya Holdings Corp., Check Point Software Technologies Ltd.,

Cybersecurity 112

Cybersecurity Risk Hacking Software 112

Thales Cloud Protection & Licensing

DECEMBER 18, 2018

In 2019, that attitude will finally, and permanently, change. The CISO will get a seat at the boardroom table in businesses across all sectors. The CISO will get a seat at the boardroom table in businesses across all sectors. Board-level ownership of information security will become the norm as we move through 2019.

Information Security 76

Information Security CISO Risk Technology 76

SC Magazine

APRIL 21, 2021

The hack of Words with Friends in 2019 was high-profile, but today’s columnist, Yuval Elddad of CYE, says CISOs at all gaming companies have to take a closer look at the growing threats to online gaming platforms. The post Why CISOs at gaming companies need to reimagine security appeared first on SC Media.

CISO 94

CISO Marketing Accountability Passwords 94

Dark Reading

APRIL 15, 2019

The answer can lead to a scalable enterprise security solution for 2019 and beyond.

CISO 88

CISO Cybersecurity 88

Cisco Security

JULY 12, 2021

Chief Information Security Officers (CISOs) across the Global 2000 and Fortune 1000 are obsessed with protecting the workforce endpoints as critical vulnerabilities in the cybersecurity and risk management posture of their enterprises. These actions and their potential for disaster cause CISOs to greet every day with an anticipatory grimace.

Security Awareness 145

Security Awareness Risk CISO Cybersecurity 145

The Last Watchdog

MAY 1, 2024

At the close of 2019, API security was a concern, though not necessarily a top priority for many CISOs. We discussed how enterprises in 2019 were deep into making the transition from on-premises networks to cloud-centric, edge-oriented operations when the global pandemic hit.

CISO 130

CISO Internet Internet Risk 130

Anton on Security

SEPTEMBER 27, 2024

Dall-E via Copilot, prompt “security blog quarterly, steampunk” Top 7 posts with the most lifetime views (excluding paper announcement blogs): Security Correlation Then and Now: A Sad Truth About SIEM (2019!) How CISOs need to adapt their mental models for cloud security” “Who Does What In Cloud Threat Detection?”

Cloud Migration 130

Cloud Migration Threat Detection Digital transformation CISO 130

CSO Magazine

MARCH 21, 2022

Data that S&P Global Market Intelligence compiled last November showed there were 151 M&A cybersecurity deals in the first three quarters of 2021 alone compared to 94 over the same period in 2020, 88 in 2019, and 80 in 2018. Many companies secured massive venture capital (VC) investments from private equity firms.

CISO 84

CISO Cybersecurity Marketing Technology 84

The Last Watchdog

DECEMBER 8, 2020

One new approach that is showing a lot of promise cropped up in late 2019. For instance, SD-WAN solutions have generally lacked threat prevention capacities that CISOs today look for in cybersecurity solutions, Greenfield observes. It’s called Secure Access Service Edge, or SASE , as coined by research firm Gartner.

Firewall 213

Firewall Digital transformation Internet Internet 213

Security Affairs

JULY 10, 2020

Citrix CISO, Fermin J. And finally, these vulnerabilities are not related to CVE-2019-19781. Some of the addressed flaws could be exploited only if the attackers have access to the targeted system and request user interaction, or other conditions must be verified. We are not aware of any exploitation of these issues.

Advertising 144

Advertising CISO Technology Authentication 144

Duo's Security Blog

FEBRUARY 1, 2021

We are proud to announce the Duo has achieved ISO 27001:2013, 27017:2015, and 27018:2019 certification! What is ISO 27001:2013, 27017:2015 and 27018:2019? What’s the benefit of ISO 27001:2013, 27017:2015 and 27018:2019 certification to our customers? Josh Yavor, CISO, Duo Security, now part of Cisco.

Manufacturing 52

Manufacturing Surveillance Information Security CISO 52

McAfee

DECEMBER 2, 2019

Join our session to hear from McAfee Fellow, Sekhar Sarukkai and the CISO of Pacific Dental Services about a secure approach to cloud adoption. The post What to Expect at AWS re:Invent 2019 appeared first on McAfee Blogs. This will help you manage your time as well as navigate around and between the venues. What does that mean?

CISO 52

CISO 52

The Security Ledger

FEBRUARY 8, 2019

Rob Black of Fractional CISO shares four telltale signs to watch for. The post Four Signs You’re Ready for a Virtual CISO appeared first on The Security Ledger. But how do you know when your company is ready for one?

CISO 40

CISO Information Security 40

CyberSecurity Insiders

OCTOBER 19, 2022

We immediately knew that if we could create a solution that would disrupt data breach culture it would make a major impact on CISOs and data protection teams – and ultimately companies’ success overall. Once our product was built, we turned to the very group of people we were trying to help: CISOs and data security professionals.

Marketing 122

Marketing Data breaches CISO Engineering 122

Duo's Security Blog

NOVEMBER 1, 2022

—Dave Lewis, Global Advisory CISO, Cisco Security Five Key Findings Here are five top trends from the 2022 Duo Trusted Access Report. Passwordless Adoption Continues to Rise Our data shows a 50% increase in the percentage of accounts allowing WebAuthn authentication and a fivefold increase in WebAuthn usage since April 2019.

Authentication 144

Authentication Passwords CISO Accountability 144

The Last Watchdog

DECEMBER 6, 2019

In 2019, we’ve seen a surge in domain name service (DNS) hijacking attempts and have relayed warnings from the U.S. Cybersecurity and Infrastructure Agency, U.K.’s s Cybersecurity Centre, ICANN, and other notable security experts.

DNS 140

DNS Firewall Social Engineering Risk 140

Thales Cloud Protection & Licensing

FEBRUARY 25, 2020

The Verizon 2019 Data Breach Investigations Report advises organizations to deploy multifactor authentication throughout all systems and discourage password reuse. MFA awareness is not new to CISOs or IT teams. And yet, according to Norton , data breaches for 2019 included 3,800 publicly disclosed breaches, 4.1

Digital transformation 109

Digital transformation Authentication Identity Theft Passwords 109

Troy Hunt

SEPTEMBER 17, 2019

— Peter Ullrich (@PJUllrich) September 15, 2019 It feels wrong because 5 digits presents an extremely limited set of different possible combinations the password can be. Then there's the authentication process itself and it reminds me of a discussion I had with a bank's CISO during a recent workshop. Any thoughts?

Banking 269

Banking Passwords Accountability Authentication 269

Krebs on Security

JANUARY 6, 2020

In mid-November 2019, Wisconsin-based Virtual Care Provider Inc. The result of this oversight may offer attackers a way back into the affected organization, access to financial and healthcare accounts, or — worse yet — key tools for attacking the victim’s various business partners and clients. In our Dec.

Passwords 267

Passwords Ransomware Password Management Malware 267

SC Magazine

MARCH 2, 2021

It was Kumar who discovered the exposed password, which was accessible online since at least June 2018, up until SolarWinds corrected the issue in November 2019. However, no connection to the SolarWinds attack and the leaked password has been established so far. “The

Passwords 129

Passwords Password Management CISO InfoSec 129

Security Boulevard

OCTOBER 13, 2021

It’s no surprise that the number and severity of cyberattacks continue to increase, with ransomware more than doubling in North America since 2019. These breaches cost companies an average of $4.24 million per incident. Unfortunately, the current supply of experienced cybersecurity staff is not enough to meet the growing demand.

Cybersecurity 113

Cybersecurity Ransomware CISO 113

The Last Watchdog

APRIL 11, 2019

I had the chance to sit down at RSA 2019 with ExtraHop Networks , a Seattle-based supplier of NTA systems. ExtraHop’s CISO Jeff Costlow walked me through what’s different about the approach NTA vendors are taking to help companies detect and deter leading-edge threats. They have come into common, everyday use.

Digital transformation 133

Digital transformation Adware Technology Software 133

SC Magazine

MARCH 19, 2021

She said CopperStealer, which Proofpoint fully describes in a blog post , exhibits many of the same targeting and delivery methods as SilentFade, a Chinese-sourced malware family first reported by Facebook in 2019. Examples include the 2019 Hong Kong protests, which described the events as “riots funded by the CIA.”.

Malware 113

Malware Media Passwords Accountability 113

SecureWorld News

APRIL 7, 2022

Tammy is also a 2019 nominee for T.E.N Answer: In 2020, Versum Materials was acquired by Merck KGaA, and my CISO position was eliminated in April 2020. This can be extremely difficult depending on the culture of the organization, especially when the CISO is part of the IT organization. Information Security Executive of the Year.

Cybersecurity 98

Cybersecurity CISO Risk Information Security 98

Thales Cloud Protection & Licensing

MAY 1, 2019

Our 2019 federal report found that 78% of respondents were using sensitive data in a cloud environment. With New York’s CISO regulation, California’s Internet of Things (IoT) law and Europe’s General Data Protection Regulation (GDPR), the future of big data looks to be massively regulated. Regulations Stoke the Flames.

Digital transformation 105

Digital transformation Cybersecurity Data breaches Encryption 105

SC Magazine

FEBRUARY 10, 2021

CISOs, HR executives and C-suite leadership all share the responsibility of building a SOC p eople want to join and finding the right team to staff it. Many CISOs charged with leading a security team don’t take the time to build relationships with their staff. In 2019 alone, 768 million U.S. Encourage passion projects.

CISO 101

CISO Cybersecurity Media Network Security 101

SecureWorld News

MARCH 3, 2022

Last year, SecureWorld News covered a story detailing the turmoil surrounding the cybersecurity industry in Florida and why CISOs and tech leaders were frequently leaving their positions after only a few months on the job. billion since 2019. Current estimates say that 2.7

Cybersecurity 96

Cybersecurity Education CISO Technology 96