CSO Magazine

JUNE 8, 2021

In December 2020, the US Government Accounting Office (GAO) made 145 recommendations to 23 federal agencies relating to supply chain risks. Get the latest from CSO by signing up for our newsletters. ]. Get the latest from CSO by signing up for our newsletters. ]. D’Souza, testified before Congress on supply chain risks.

Government 121

Government CSO Risk Accountability 121

CSO Magazine

OCTOBER 18, 2021

Interest in zero trust is surging, according to IDG’s 2020 Security Priorities Study, with 40% of survey respondents saying they are actively researching zero trust technologies, up from only 11% in 2019, and 18% of organizations indicating they already have zero trust solutions, more than double the 8% in 2018.

CSO 126

CSO Marketing Technology 126

CSO Magazine

MARCH 23, 2021

That's one of the big findings of IDG's 2020 Security Priorities Study : 61% of surveyed companies have a security pro in the top ranks, and that rate goes up to 80% for large enterprises.

CISO 125

CISO CSO 125

CSO Magazine

JANUARY 14, 2022

That’s up from 94 for the same period in 2020. Many of the 2021 transactions CSO reported were in the identity and cloud security markets, especially toward the end of the year. The first three quarters of the year saw 151 transactions in the industry, according to 451 Research. That trend is likely to continue in 2022.

CSO 122

CSO Cybersecurity Marketing Technology 122

CSO Magazine

JUNE 11, 2021

. | Sign up for CSO newsletters. ]. In each case the threat actor demanded bitcoin payment or else a small-scale denial-of-service attack would be launched with a more substantial attack mere days later,” Proofpoint researchers explained in a blog post.

DDOS 128

DDOS Energy and Utilities CSO Insurance 128

CSO Magazine

FEBRUARY 19, 2021

Sign up for CSO newsletters. ]. It arose in September 2020, at the same time the Maze ransomware gang announced its intention to shut down operations. Although descriptions of the malware vary from security firm to security firm, the consensus is that Egregor is a variant of the Sekhmet ransomware family.

Ransomware 119

Ransomware CSO Malware Cybersecurity 119

CSO Magazine

JUNE 23, 2021

Jason Lee joined Zoom in June 2020 to become the videoconferencing platform’s CISO. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ]. CSO had an opportunity to speak with Lee about his experience coming into the CISO role mid-crisis. To read this article in full, please click here

CISO 99

CISO CSO Cybersecurity 99

CSO Magazine

OCTOBER 21, 2021

in February 2020 with a mission to modernize. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ]. Ricardo Lafosse walked into the CISO post at Kraft Heinz Co. And he had a plan. When taken all together, this initiative sought to reinvent the way the company manages, operates, and perceives the security function.

CISO 117

CISO CSO 117

CSO Magazine

OCTOBER 7, 2021

He refined his plans through 2020 and then, this year, implemented its wide-reaching recommendations to ensure his institution could handle even better whatever emergency came next. Sign up for CSO newsletters. ]. Not the best time to roll this out,” he says.

CSO 106

CSO CISO Risk Cybersecurity 106

The Last Watchdog

MAY 5, 2022

Well, the stats are even scarier with over 50% increase in ransomware attacks in 2021, compared to 2020. About the essayist: Den Jones, CSO at Banyan Security , which supplies s imple, least-privilege, multi-cloud application access technologies. Ransomware? I think you may have heard of it, isn’t the news full of it?

Ransomware 247

Ransomware Risk Internet Internet 247

CSO Magazine

AUGUST 29, 2022

John Deskurakis had a green field opportunity when he stepped into the role of chief product security officer in April 2020 at Carrier Global Corp. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ]. “We United Technologies, which had spun off Carrier, took the existing product security function with it.

CSO 95

CSO Technology Cybersecurity 95

CSO Magazine

APRIL 20, 2021

Some of the flaws date from 2019 and 2020, but one was unknown until this month. Sign up for CSO newsletters. ]. Keep up with 8 hot cyber security trends (and 4 going cold). Give your career a boost with top security certifications: Who they're for, what they cost, and which you need.

VPN 98

VPN CSO Hacking Authentication 98

CSO Magazine

APRIL 21, 2021

Red Canary recently unveiled its 2021 Threat Detection Report. Included in the report is a mapping of many of the top cyberattack techniques to the MITRE ATT&CK framework. The findings presented by Red Canary researchers underscore the need to fully understand your network. Take the time to monitor what is normal in your firm.

Threat Detection 113

Threat Detection 113

Security Affairs

NOVEMBER 23, 2020

likely a pun ) and was published to npm registry around November 11, 2020. as Sonatype-2020-1096, Sonatype-2020-1097, and Sonatype-2020-1109. November 9th, 2020: npm team is notified the same day of malicious packages, and public disclosure is made via blog post. and ac-addon.

Malware 144

Malware Antivirus Engineering Software 144

CSO Magazine

DECEMBER 26, 2022

Approved by ballot measure as Proposition 24 in November 2020, it created a new consumer data privacy agency and put California another step ahead of other states in terms of privacy productions for consumers—and data security requirements for enterprises. It went into effect in January 2020, and enforcement officially began in July 2020.

Data privacy 133

Data privacy 133

CSO Magazine

APRIL 29, 2021

Ransomware, the " perfect crime " of the internet era, is spreading rapidly, growing according to some accounts by 150% or more in 2020. There are no signs of a slow-down in 2021.

Ransomware 138

Ransomware Internet Internet Accountability 138

CSO Magazine

JUNE 28, 2021

The 2H2020 Threat Intelligence Report correctly predicted that 2020’s record-breaking distributed denial of service (DDoS) attack activity would follow the COVID-19 pandemic into 2021. million DDoS attacks in the first quarter of 2021, a 31% increase from the same time in 2020.

DDOS 140

DDOS Engineering 140

The Last Watchdog

APRIL 1, 2020

Related: What we’ve learned from the massive breach of Capitol At RSA 2020 , I learned about how one of the routine daily chores all large organizations perform — data governance — has started to emerge as something of a cybersecurity multiplier.

Government 149

Government Cybersecurity CSO Banking 149

CSO Magazine

DECEMBER 20, 2021

CSO’s 2021 Security Priorities Study found that 44% of security leaders expect their budgets to increase in the upcoming 12 months; that’s a slight bump-up from the 41% who saw their budgets increase in 2021 over 2020. Fifty-four percent of respondents say they expect their budgets to remain the same over the next 12 months.

Cybersecurity 135

Cybersecurity CISO 135

CSO Magazine

APRIL 27, 2021

These include the continued evolution and impact of cyberthreats throughout 2020 and the early months of 2021, chiefly in the form of ransomware attacks and wide-ranging supply chain security issues. To read this article in full, please click here (Insider Story)

Cyber Insurance 142

Cyber Insurance Insurance Ransomware Risk 142

CSO Magazine

MARCH 22, 2022

I hate to do this but consider the following thought exercise: Transport yourself back to fall 2020 when literally the entire world was waiting for a COVID vaccine. Most of the world was elated to find out in early December 2020 that efficacy rates were 95%.

Cybersecurity 132

Cybersecurity 132

SecureWorld News

JUNE 26, 2023

SolarWinds Corporation, which suffered a major breach of its Orion software platform in December 2020, submitted a U.S. Securities and Exchange Commission (SEC) filing on June 23rd, saying the enforcement staff of the SEC provided the company with a Wells Notice related to its investigation into the cyber incident.

CISO 113

CISO CSO Data privacy Cyber Risk 113

CyberSecurity Insiders

MARCH 16, 2022

Founded in late 2020 by cybersecurity industry veterans, Guy Flechter and Daniel Krivelevich, Cider Security’s mission is to solve the most commonly encountered challenges CISOs and security engineers face today. You can access the full research report here. . About Cider Security .

Risk 109

Risk CISO Insurance Engineering 109

SecureWorld News

AUGUST 26, 2020

Aflac CSO Tim Callahan told us as much after his keynote at a SecureWorld conference last year. LISTEN: SecureWorld podcast with Aflac CSO Tim Callahan, "From Bombs to Cybersecurity.". If current trends continue, spending is expected to increase to over $3 billion annually by Fiscal Year 2026.". Asset management is difficult.

Risk 98

Risk Cybersecurity CSO Technology 98

The Security Ledger

AUGUST 28, 2020

In this Spotlight Podcast, sponsored by RSA, we take on the question of securing the 2020 Presidential election. In this Spotlight Podcast, sponsored by RSA, we take on the question of securing the 2020 Presidential election. Also joining us: Sam Curry, the CSO of Cybereason. Read the whole entry. »

Risk 52

Risk CSO CISO Digital transformation 52

CSO Magazine

AUGUST 24, 2021

The ransomware group has been active since at least November 2020 and has hit companies in the United States. Like many other high-profile ransomware groups, OnePercent both encrypts and steals corporate data, threatening victims to release or auction the information if the ransom is not paid.

Ransomware 143

Ransomware Banking Encryption 143

CSO Magazine

JUNE 8, 2021

Some are astounding in terms of severity, such as what happened in November 2020, when more than 10 million files containing travel-related data was exposed from an improperly configured AWS S3 bucket. Every week brings another report of someone leaving an unsecured online storage container filled with sensitive customer data.

133

133

CSO Magazine

JANUARY 18, 2022

Security exec Chad Kliewer had heard the initial reports of the SolarWinds attack as news about it broke in December 2020, sympathetic to those companies first named as victims of the hack. To read this article in full, please click here (Insider Story)

CISO 123

CISO Hacking 123

CSO Magazine

APRIL 15, 2021

Yes, tons of people still use “123456” as a password, according to NordPass's 200 most common passwords of the year for 2020, which is based on analysis of passwords exposed by data breaches. “Qwerty” is another contender for the dubious distinction, but the champion is the most basic, obvious password imaginable: “123456.”

Passwords 145

Passwords Data breaches 145

CSO Magazine

NOVEMBER 24, 2021

The data comes from research of over 700 attacker-victim negotiations between 2019 and 2020 and a paper that explores three main topics. Concepts were presented by Pepijn Hack and Zong-Yu Wu at Black Hat Europe 2021 and expanded upon in a detailed NCC Group blog posting shortly after.

Ransomware 134

Ransomware Hacking Cybersecurity 134

CSO Magazine

JULY 5, 2022

A targeted attack campaign has been compromising home and small-business routers since late 2020 with the goal of hijacking network communications and infecting local computers with stealthy and sophisticated backdoors.

Telecommunications 117

Telecommunications Small Business Risk Technology 117

SecureWorld News

JULY 17, 2023

In a blog post on JD Supra , Fisher Phillips breaks down "how we got here," including: In 2020, the California voters passed the CPRA by ballot initiative. Compliance with the original CCPA still applies and changes that took effect in January, such as the expiration of the employee data exemption, are still in play."

CSO 98

CSO 98

CSO Magazine

DECEMBER 3, 2021

Sophos reports that the average cost of a ransomware attack in 2020 was nearly $1.5 Today, it’s generating billions of dollars in revenue for the criminal groups behind it. Victims incur recovery costs even if they pay the ransom. million for victim organizations that paid ransoms and about $732,000 for those that didn’t.

Ransomware 129

Ransomware 129

CSO Magazine

MARCH 8, 2021

Meanwhile, miscreants bearing ransomware have made hospitals their favorite target; in October 2020, six US hospitals fell prey within 24 hours. But stupid also works: Last month in Florida, a water treatment plant’s cybersecurity was so lax, anyone could have been behind a clumsy attempt to poison the local water supply.

Cybersecurity 140

Cybersecurity Government Ransomware Hacking 140

CSO Magazine

FEBRUARY 1, 2021

A 2020 survey by the nonprofit certification organization ISC 2 puts the shortage at 3.12 Even as the frequency and types of cyberthreats continue to climb, companies across the globe are faced with another problem: not enough experienced security professionals to combat the threats.

Cybersecurity 128

Cybersecurity 128

CSO Magazine

MARCH 10, 2021

Not many organizations end up paying $67 million in ransomware related costs like United Health Services (UHS) did last year following a September 2020 attack that crippled its network. The organization is, however, an example of the increasingly heavy financial toll that these attacks have begun to exact from victims over the past two years.

Ransomware 125

Ransomware 125

CSO Magazine

DECEMBER 28, 2021

What most entities have experienced since early 2020 is the IT scramble to accommodate the migration by employees from onsite and in their seat, to off-site and sitting wherever they could find internet access. Just like that, CISOs found themselves having to formulate work-from-home (WFH) policies, implementation and procedures.

CISO 133

CISO Internet Internet 133