2024 and CSO - Cyber Security Informer

Exposure Management Works When the CIO and CSO Are in Sync

Security Boulevard

APRIL 28, 2025

In this post, Tenable CIO Patricia Grant looks at how the CIO/CSO relationship is key to a successful exposure management program. When I first joined Tenable, one of the first things I did was sit down with our CSO, Robert Huber , to align on how we were going to work together. So, my advice to fellow CIOs: Stay close to your CSO.

CSO

CSO Risk CISO Cyber Risk

DSPM & AI Are Booming: $17.87B and $4.8T Markets by 2033

Security Affairs

JULY 24, 2025

Later, in 2024 & 2025, GigaOm further characterized DSPM in its GigaOm Radar report as a system that gives insight into where sensitive data is stored, who has access to it, and how it is being utilized. What Is DSPM and Why Does It Matter Gartner first used DSPM in its 2022 Hype Cycle for Data Security study.

Marketing

Marketing Data privacy Cloud Migration Healthcare

Cybersecurity Snapshot: CISA Calls for Stamping Out Buffer Overflow Vulnerabilities, as Europol Tells Banks To Prep For Quantum Threat

Security Boulevard

FEBRUARY 14, 2025

CISA and the FBI also highlighted these buffer overflow vulnerabilities: CVE-2025-21333 CVE-2025-0282 CVE-2024-49138 CVE-2024-38812 CVE-2023-6549 CVE-2022-0185 For more information about buffer overflow attacks and vulnerabilities: Buffer Overflow (OWASP) What is Buffer Overflow? Kirsten Gillibrand (D-N.Y.)

Banking

Banking Cybercrime Cybersecurity Ransomware

The Relevance of Privacy-Preserving Techniques and Generative AI to DORA Legislation

Thales Cloud Protection & Licensing

OCTOBER 28, 2024

The Relevance of Privacy-Preserving Techniques and Generative AI to DORA Legislation madhav Tue, 10/29/2024 - 04:55 The increasing reliance on digital technologies has created a complex landscape of risks, especially in critical sectors like finance. The world has changed.

Encryption

Encryption Risk Data privacy Technology

Cybersecurity Snapshot: CISA’s Best Cyber Advice on Securing Cloud, OT, Apps and More

Security Boulevard

MAY 2, 2025

Back in September 2024, CISA sounded the alarm on critical infrastructure organizations susceptibility to common, well-known attack methods in its CISA Analysis: Fiscal Year 2023 Risk and Vulnerability Assessments report. and international agencies.

Cybersecurity

Cybersecurity Software Cyber Risk Risk

Cybersecurity Snapshot: CSA Outlines Data Security Challenges and Best Practices, While ISACA Offers Tips To Retain IT Pros

Security Boulevard

MARCH 7, 2025

(Source: ISACAs Tech Workplace and Culture 2025 report, March 2025) For more information about recruiting and retaining cybersecurity professionals: 10 Ways to Boost Cybersecurity Talent Retention (InformationWeek) 60% of cybersecurity pros looking to change employers (CSO) The cybersecurity industry has an urgent talent shortage.

Cybersecurity

Cybersecurity Scams CSO Risk

Cybersecurity Snapshot: Apply Zero Trust to Critical Infrastructure’s OT/ICS, CSA Advises, as Five Eyes Spotlight Tech Startups’ Security

Security Boulevard

NOVEMBER 1, 2024

Amid all the investment and adoption enthusiasm, many organisations are struggling for control and visibility over its use,” reads the firm’s “ AI Barometer: October 2024 ” publication. That’s according to the “ 2024 Deloitte-NASCIO Cybersecurity Study, ” which surveyed CISOs from all 50 states and the District of Columbia.

CISO

CISO Cybersecurity Authentication Government

Cybersecurity Snapshot: Experts Issue Best Practices for Migrating to Post-Quantum Cryptography and for Improving Orgs’ Cyber Culture

Security Boulevard

JUNE 6, 2025

National Institute of Standards and Technology (NIST) released three quantum-resistant algorithm standards in 2024 and expects to release a fourth in 2026. There’s another PQC standard called Covercrypt from the European Telecommunications Standards Institute (ETSI).

CISO

CISO Cybersecurity Cyber threats Government

Security Roundup April 2025

BH Consulting

APRIL 30, 2025

Landed earlier than usual, the 2025 edition found that 30 per cent of breaches involved third-parties, doubling from 2024. Losses in 2024 exceeded an eye-watering $6.5 CSO Online marked the progress as 66 per cent done. MORE US consumers lost $470 million through phone scams in 2024. The company says 99.2

Data breaches

Data breaches Scams CSO Cybercrime

ISC2 Security Congress 2024: The Landscape of Nation-State Cyber Attacks

Tech Republic Security

OCTOBER 21, 2024

CISA advisor Nicole Perlroth closed out ISC2 Security Congress’ keynotes with a wake-up call for security teams to watch for nation-state-sponsored attacks.

Cyber Attacks

Cyber Attacks Big data CSO Healthcare

Judge Delays Enforcement of California Consumer Privacy Act to 2024

SecureWorld News

JULY 17, 2023

Enforcement of the California Privacy Rights Act (CPRA)—a stiffening of the existing privacy laws under the California Consumer Privacy Act (CCPA)—has been delayed until March 29, 2024. A California judge made the decision just as the original July 1, 2023, deadline was to hit.

CSO

CISA funding to top $3 billion under Biden's FY 2024 budget

CSO Magazine

MARCH 10, 2023

President Biden released his FY 2024 budget proposal that seeks a bigger budget for the Cybersecurity and Infrastructure Security Agency (CISA) and greater cyber investigative capabilities for the FBI.

Cybercrime

Cybercrime Government Cybersecurity

Financial losses to synthetic identity-based fraud to double by 2024

CSO Magazine

OCTOBER 20, 2022

billion by 2024 in the US, according to an analysis published Thursday by identity verification vendor Socure. Losses to imposter scams based on synthetic identities—identities that only exist as figments in a credit reporting bureau’s records—will rise from a reported $1.2 billion in 2020 to $2.48

Scams

Vulnerability Recap 9/9/24 – Exploited Vulnerabilities Persist

eSecurity Planet

SEPTEMBER 9, 2024

September 2, 2024 RansomHub Exploits Multiple Vulnerabilities to Attack Critical Sectors Type of vulnerability: Multiple security flaws from major organizations. September 3, 2024 D-Link Vulnerability Enables Remote Code Execution Type of vulnerability: Stack-based buffer overflow.

Firmware

Firmware Backups Firewall Risk

Spotlight on Cybersecurity Leaders: Dr. Fred Kwong

SecureWorld News

MAY 29, 2024

Fred serves on the Advisory Council for SecureWorld Chicago and will be presenting at our upcoming conference on June 6, 2024. Q: In honor of our 2024 conference theme, Legacies Untold: Revealing Cybersecurity's Hidden Figures , who is someone that you consider to be a Cyber Hero? A: Networking with my peers.

Cybersecurity

Cybersecurity CSO Telecommunications Technology

VulnRecap 1/29/24 – Apple, Apache & VMware Under Attack

eSecurity Planet

JANUARY 29, 2024

“The most significant risk for enterprises isn’t the speed at which they are applying critical patches; it comes from not applying the patches on every asset,” noted Brian Contos, CSO of Sevco Security. The problem: Apple addressed multiple vulnerabilities, but zero-day vulnerability CVE-2024-23222 leads the list.

Authentication

Authentication CSO Software Accountability

Cybersecurity Snapshot: Tenable Report Warns About Toxic Cloud Exposures, as PwC Study Urges C-Suite Collaboration for Stronger Cyber Resilience

Security Boulevard

OCTOBER 18, 2024

Check out invaluable cloud security insights and recommendations from the “Tenable Cloud Risk Report 2024.” That’s according to the new “ Tenable Cloud Risk Report 2024, ” which is based on an analysis of billions of cloud resources scanned through the Tenable Cloud Security platform.

Cybersecurity

Cybersecurity CISO CSO Risk

SEC Provides Clarity on Disclosing Material vs. Non-Material Cyber Incidents

SecureWorld News

MAY 23, 2024

In a May 21, 2024, announcement from Erik Gerding, Director of the SEC's Division of Corporation Finance, the agency clarified that only cybersecurity incidents determined by a company to be material should be disclosed via an 8-K filing under the new Item 1.05. "The

CISO

CISO CSO Risk Cybersecurity

Spotlight on Cybersecurity Leaders: Ryan Mostiller

SecureWorld News

AUGUST 21, 2024

Q: In honor of our 2024 conference theme, Legacies Untold: Revealing Cybersecurity's Hidden Figures , who is someone that you consider to be a Cyber Hero? I really respect Dave Kennedy, who is an extremely successful member of the security community having started two security companies after being a CSO himself.

Cybersecurity

Cybersecurity Energy and Utilities CISO CSO

BrandPost: Edge Computing: The Security Imperative

CSO Magazine

JUNE 28, 2021

billion by 2024. Some of the industry’s biggest players are making significant investments in edge computing to help their customers implement digital transformation initiatives. In fact, IDC has predicted that the worldwide edge computing market will grow to $250.6

Digital transformation

Digital transformation Marketing Technology Cybersecurity

Battling Burnout: A Growing Concern for CISOs and Security Professionals

SecureWorld News

JUNE 20, 2024

The first sample was 1,001 full-time enterprise business leaders specialized in cybersecurity and infosecurity in medium and large enterprises between May 20, 2024, and May 24, 2024. between May 20, 2024, and May 24, 2024.

CISO

CISO Cybersecurity Technology Digital transformation

Cybersecurity Snapshot: What Looms on Cyberland’s Horizon? Here’s What Tenable Experts Predict for 2025

Security Boulevard

DECEMBER 27, 2024

According to IBM, the average cost of a data breach rose 10% to almost $5 million in 2024, but the true damage lies in downtime, reputational damages and regulatory fines, particularly in cloud-heavy industries.

Cybersecurity

Cybersecurity CISO CSO Data breaches

Deloitte-NASCIO Study: AI and Cyber Threats Reshape the Landscape

SecureWorld News

OCTOBER 2, 2024

Conducted in spring 2024, the study captures insights from Chief Information Security Officers of all 50 U.S. Th e 8th biennial Deloitte-NASCIO Cybersecurity Study reveals a rapidly evolving cybersecurity landscape, with artificial intelligence (AI) and generative AI (GenAI) introducing new challenges.

Cyber threats

Cyber threats CISO Digital transformation Artificial Intelligence

News alert: Simbian launches with $10M to build autonomous, GenAI-powered security platform

The Last Watchdog

APRIL 11, 2024

April 11, 2024 – Simbian today emerged from stealth mode with oversubscribed $10M seed funding to deliver on fully autonomous security. Mountain View, Calif.

CSO

CSO Marketing Risk Architecture

BrandPost: Optimize user experience and achieve faster IT resolutions using AI

CSO Magazine

MAY 16, 2023

And with workloads migrating to the cloud, by 2024, most enterprises aspire to have $8 out of every $10 for IT hosting go toward the cloud. Did you know organizations with 250+ employees typically use more than 100 SaaS apps?

Minnesota Passes Data Privacy Law, Joining Growing State Movement

SecureWorld News

MAY 21, 2024

On May 19, 2024, Minnesota officially joined the ranks of states enacting robust data privacy protections for consumers. RELATED: Uber CSO Found Guilty: The Sky Is Not Falling. The landmark legislation grants Minnesota residents a sweeping set of rights regarding how companies collect and use their personal data. Jaworski added.

Data privacy

Data privacy CISO Small Business CSO

Russia-Pushed UN Cybercrime Treaty Meets Free Speech, Privacy Resistance

SecureWorld News

JUNE 7, 2023

With the treaty likely not going to a vote until August 2024, there will be much more movement with the Russia-Ukraine war and other global events that will have an impact on any final draft and vote. The main challenge has been to define the scope of the new treaty, that is, the list of offences to be criminalised.

Cybercrime

Cybercrime CSO Technology Surveillance

Cisco to offer Webex air-gapped cloud system for security, defense work

CSO Magazine

APRIL 13, 2023

Beginning in 2024, the new Webex system — Air-Gapped Trusted Cloud — will provide an added layer of security for teams collaborating through the Webex App, Cisco said. An air gap is a security measure that involves isolating a computer or network and preventing it from establishing an external connection.

Security Defenses

Security Defenses Government Internet Internet

BrandPost: Securing Critical Applications Running in the Cloud

CSO Magazine

AUGUST 23, 2022

And that percentage is expected to increase to nearly 60% by 2024. As a result, according to the 2022 Cloud Security Report , 40% of enterprises now run more than half of their workloads in the cloud. To read this article in full, please click here

Cybersecurity Snapshot: CISA Warns of Global Spear-Phishing Threat, While OWASP Releases AI Security Resources

Security Boulevard

NOVEMBER 8, 2024

Unraveling the True Security Risks ” (SecurityWeek) “ How deepfakes threaten biometric security controls ” (TechTarget) “ Deepfakes break through as business threat ” (CSO) 3 - Fake update variants dominate list of top malware in Q3 Hackers are doubling down on fake software-update attacks.

Phishing

Phishing Cybersecurity Cybercrime Ransomware

Security Roundup October 2023

BH Consulting

OCTOBER 15, 2023

MORE Cybersecurity and risk spending look set to increase in 2024, Gartner forecasts. MORE Joe Sullivan, Uber’s CSO during its data breach, shares his perspective. MORE Why organisations should think about adding a human security officer. MORE But are security professionals ‘quiet quitting’ due to their workload?

Ransomware

Ransomware Data breaches CSO Cyber Attacks

Walking the Walk: How Tenable Embraces Its “Secure by Design” Pledge to CISA

Security Boulevard

NOVEMBER 25, 2024

Tenable CSO Bob Huber signs CISA's Secure by Design pledge Default passwords The CISA pledge addresses default passwords next, calling on backers to reduce their use of default passwords across their products within one year of signing the pledge.

Passwords

Passwords CSO Software Authentication

LW ROUNDTABLE: Cybersecurity takeaways of 2023 — and what’s ahead in 2024 ( part 2)

The Last Watchdog

DECEMBER 14, 2023

•What should I be most concerned about – and focus on – in 2024? In 2024 we’ll see more of the same. In 2024, cloud-native SIEM solutions will continue to emerge as a strong alternative. Richard Bird , CSO, Traceable AI Bird The bad guys are showing no restraint in exploiting API security weakness to their advantage.

Cybersecurity

Cybersecurity Risk CSO Cyber threats

Cyber Security Informer

Exposure Management Works When the CIO and CSO Are in Sync

DSPM & AI Are Booming: $17.87B and $4.8T Markets by 2033

Trending Sources

Cybersecurity Snapshot: CISA Calls for Stamping Out Buffer Overflow Vulnerabilities, as Europol Tells Banks To Prep For Quantum Threat

The Relevance of Privacy-Preserving Techniques and Generative AI to DORA Legislation

Cybersecurity Snapshot: CISA’s Best Cyber Advice on Securing Cloud, OT, Apps and More

Cybersecurity Snapshot: CSA Outlines Data Security Challenges and Best Practices, While ISACA Offers Tips To Retain IT Pros

Cybersecurity Snapshot: Apply Zero Trust to Critical Infrastructure’s OT/ICS, CSA Advises, as Five Eyes Spotlight Tech Startups’ Security

Cybersecurity Snapshot: Experts Issue Best Practices for Migrating to Post-Quantum Cryptography and for Improving Orgs’ Cyber Culture

Security Roundup April 2025

ISC2 Security Congress 2024: The Landscape of Nation-State Cyber Attacks

Judge Delays Enforcement of California Consumer Privacy Act to 2024

CISA funding to top $3 billion under Biden's FY 2024 budget

Financial losses to synthetic identity-based fraud to double by 2024

Vulnerability Recap 9/9/24 – Exploited Vulnerabilities Persist

Spotlight on Cybersecurity Leaders: Dr. Fred Kwong

VulnRecap 1/29/24 – Apple, Apache & VMware Under Attack

Cybersecurity Snapshot: Tenable Report Warns About Toxic Cloud Exposures, as PwC Study Urges C-Suite Collaboration for Stronger Cyber Resilience

SEC Provides Clarity on Disclosing Material vs. Non-Material Cyber Incidents

Spotlight on Cybersecurity Leaders: Ryan Mostiller

BrandPost: Edge Computing: The Security Imperative

Battling Burnout: A Growing Concern for CISOs and Security Professionals

Cybersecurity Snapshot: What Looms on Cyberland’s Horizon? Here’s What Tenable Experts Predict for 2025

Deloitte-NASCIO Study: AI and Cyber Threats Reshape the Landscape

News alert: Simbian launches with $10M to build autonomous, GenAI-powered security platform

BrandPost: Optimize user experience and achieve faster IT resolutions using AI

Minnesota Passes Data Privacy Law, Joining Growing State Movement

Russia-Pushed UN Cybercrime Treaty Meets Free Speech, Privacy Resistance

Cisco to offer Webex air-gapped cloud system for security, defense work

BrandPost: Securing Critical Applications Running in the Cloud

Cybersecurity Snapshot: CISA Warns of Global Spear-Phishing Threat, While OWASP Releases AI Security Resources

Security Roundup October 2023

Walking the Walk: How Tenable Embraces Its “Secure by Design” Pledge to CISA

LW ROUNDTABLE: Cybersecurity takeaways of 2023 — and what’s ahead in 2024 ( part 2)

Stay Connected