Remove 2019 Remove CISO Remove Risk
article thumbnail

From Pest Control to Cybersecurity: What CISOs Can Learn from Pestie

SecureWorld News

As I was spraying Pestiea DIY pest spray subscription servicearound my home this weekend (sun's out, spray gun's out), I was thinking about the correlation of this home perimeter defense to what CISOs and their teams do to keep their organizations secure. CISO takeaway: Effective cybersecurity isn't a generic solution.

CISO 111
article thumbnail

First American Financial Pays Farcical $500K Fine

Krebs on Security

In May 2019, KrebsOnSecurity broke the news that the website of mortgage settlement giant First American Financial Corp. “The [employee] did not request a waiver or risk acceptance from the CISO.” ” Rasch said First American’s first problem was labeling the weakness as a medium risk.

Insurance 333
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Risk-Conscious, Security-Aware Culture: The Forgotten Critical Security Control

Cisco Security

Chief Information Security Officers (CISOs) across the Global 2000 and Fortune 1000 are obsessed with protecting the workforce endpoints as critical vulnerabilities in the cybersecurity and risk management posture of their enterprises. Should a risk-conscious, security-aware culture be considered a critical security control?

article thumbnail

SEC Fines Four Companies $7M for Misleading Cybersecurity Disclosures

SecureWorld News

Securities and Exchange Commission (SEC) announced Tuesday that it has fined four companies $7 million for misleading statements about their cybersecurity incidents, particularly concerning the high-profile 2019 SolarWinds hack. The SEC charged the companies with "materially misleading disclosures regarding cybersecurity risks and intrusions."

article thumbnail

Meta Scores $168M Legal Victory Over NSO Group for Spyware Abuse

SecureWorld News

Anatomy of the breach: technical exploitation of WhatsApp Meta ( then Facebook) filed a lawsuit in 2019, asserting that the NSO Group had exploited a vulnerability in WhatsApp's VoIP calling feature. Third- party software risks extend beyond the supply chain to nation- state surveillance contractors.

Spyware 104
article thumbnail

Is 2019 the Year of the CISO?

Dark Reading

The case for bringing the CISO to the C-suite's risk and business-strategy table.

CISO 82
article thumbnail

Ghost Ransomware a Persistent Global Threat to Critical Infrastructure

SecureWorld News

Tim Mackey, Head of Software Supply Chain Risk Strategy at Black Duck, explains: "Attacks on legacy cyber-physical, IoT, and IIoT devicesparticularly in an OT environmentare to be expected and must be planned for as part of the operational requirements for the device. For the latest updates and resources, visit StopRansomware.gov.