CSO Magazine

JUNE 8, 2021

In December 2020, the US Government Accounting Office (GAO) made 145 recommendations to 23 federal agencies relating to supply chain risks. In May 2021, the GAO’s director of information technology and cybersecurity, Vijay A. Get the latest from CSO by signing up for our newsletters. ].

Government 121

Government CSO Risk Accountability 121

CSO Magazine

JANUARY 23, 2023

Nvidia today announced that a digital lab playground for its latest security offering is now available, letting users try out an AI-powered system designed to monitor individual user accounts for potentially hazardous behavior.

Technology 72

Technology Accountability Risk 72

SecureWorld News

AUGUST 12, 2020

Your questions about deception technology in cybersecurity, answered. What exactly is deception technology and how can it play a vital part in your cyber defense? How do you define deception technology? The old word for deception technologies is honeypot. The old technology really no longer applies.

Technology 52

Technology Cybersecurity CSO IoT 52

The Last Watchdog

DECEMBER 14, 2023

“Kerberoasting” and “Golden Ticket” attacks were both introduced in 2014 and yet enterprises continue to have hundreds of accounts configured with unconstrained delegation. Michiel Prins , Co-Founder, HackerOne Prins Ethical hackers are consistently first to pressure-test emerging technology. In 2024 we’ll see more of the same.

Cybersecurity 235

Cybersecurity Risk Cyber threats CSO 235

CSO Magazine

JUNE 21, 2021

Asset disposal normally isn’t one of those burning topics that is top-of-mind for CISOs, yet every CISO must be able to address it when asked to describe their information technology asset disposal (ITAD) program. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ].

CISO 116

CISO Risk CSO Accountability 116

The Security Ledger

SEPTEMBER 25, 2018

SAP CSO Justin Somaini. For consumers, that means boning up on account security – maybe getting a password manager. Somaini has the distinction of being the first CSO at Yahoo and also at Symantec. October is Cybersecurity awareness month.

CSO 40

CSO Hacking Security Awareness Password Management 40

SecureWorld News

NOVEMBER 16, 2023

Conversely, if a CISO is to be held accountable in the same manner as a CFO or General Counsel concerning matters of investor confidence, the executive contours of the CISO role should be revisited to ensure that it has sufficient authority, agency, and institutional backing to defend data assets as a fiduciary."

CISO 87

CISO Cybersecurity CSO Risk 87

CSO Magazine

MAY 9, 2023

By Microsoft Security Across the global workforce, frontline workers account for 80% of most organizations, taking a pivotal role in providing essential services to the general public. However, despite their critical nature, frontline workers are often not equipped with the technology tools and resources they need for success.

Technology 96

Technology Accountability 96

The Last Watchdog

MAY 5, 2022

From there, it’s possible to find devices with privileged accounts and take the attack further. About the essayist: Den Jones, CSO at Banyan Security , which supplies s imple, least-privilege, multi-cloud application access technologies. This has gone unchecked for years and there’s no good reason to let it continue.

Ransomware 247

Ransomware Risk Internet Internet 247

SecureWorld News

JUNE 26, 2023

While these Wells Notices are official investigations, they are a sign of a potential intent to investigate the CISO and CFO. Barton Kalsu and CISO Tim Brown have both been with Austin, Texas-based SolarWinds since before the breach that impacted at least nine federal agencies and approximately 100 organizations.

CISO 89

CISO CSO Data privacy Cyber Risk 89

CSO Magazine

AUGUST 31, 2022

The larger and more international your corporation, the more alphabet soup of technology compliance regulations need to be followed: the European Union’s General Data Protection Regulation (GDPR), the American Health Insurance Portability and Accountability Act (HIPAA), the Payment Card Industry Data Security Standard (PCI DSS), the guidance by the (..)

Insurance 128

Insurance Internet Internet Technology 128

Security Boulevard

OCTOBER 16, 2022

Former Uber CSO Joe Sullivan was found guilty of obstructing a federal investigation in connection with the attempted cover-up of a 2016 hack at Uber, NIST and Microsoft say that mandatory password expiration is no longer needed but many organizations are still doing it, and how fake executive profiles are becoming a huge problem for […].

Passwords 52

Passwords CSO Hacking Accountability 52

CSO Magazine

FEBRUARY 15, 2023

Utilizing a technology called extended Berkeley Packet Filter (eBPF), it is able to provide agentless security coverage for open source code.

Cybersecurity 125

Cybersecurity Software Accountability Technology 125

SecureWorld News

DECEMBER 11, 2023

Invest in Cybersecurity Tools and Training: Implement robust cybersecurity tools and technologies, and provide ongoing training to your employees on cybersecurity best practices. Understanding the nature of the threat and how to appropriately mitigate that risk should be a shared responsibility, not solely the purview of the CISO or CSO.

CISO 89

CISO Risk Cybersecurity CSO 89

CyberSecurity Insiders

MAY 16, 2022

By Amanda Fennell, CSO and CIO, Relativity. Security programs must shoulder accountability for setting employees in different roles up for success. Effective learning management systems are available that take into account the human attention span. But tools and processes alone are two variables in an incomplete equation.

CSO 131

CSO Passwords Password Management Accountability 131

CSO Magazine

APRIL 5, 2023

Like many, I see the potential for AI to help bring about positive change, but also its potential as a threat vector. To some, recent AI developments are a laughing matter.

Artificial Intelligence 112

Artificial Intelligence Media Cybersecurity Accountability 112

CSO Magazine

DECEMBER 15, 2022

The US Government Accounting Office (GAO) continues to highlight shortcomings in the cybersecurity posture of government entities responsible for the protection of United States infrastructure when it comes to internet of things (IoT) and operational technology (OT) devices and systems.

IoT 99

IoT Government Internet Internet 99

CSO Magazine

MARCH 7, 2022

"The cyber kill chain was a great way to break down the classic steps in a breach," says Michael Salihoglu, cybersecurity managing consultant at Crowe, a public accounting, consulting, and technology firm. It was also a useful tool for defenders to help them come up with strategies to stop the attacks at each point in the chain.

Accountability 120

Accountability Technology Malware Cybersecurity 120

SC Magazine

MARCH 10, 2021

Making matters worse, the cameras employ facial recognition technology, which leads to questions as to whether an attacker could actually identify individuals caught on camera and then pursue them as targets for social engineering schemes or something even more nefarious. “For What did Verkada do wrong?

Surveillance 129

Surveillance IoT Accountability Passwords 129

CSO Magazine

MARCH 1, 2022

As phishing and account takeovers have blossomed under the pandemic, RBA can become a key technology to protect corporate assets, particularly as remote work is more the rule than the exception. What is risk-based authentication?

Authentication 93

Authentication Risk Phishing Accountability 93

CSO Magazine

MARCH 23, 2022

The tool uses NLP (natural language processing) technology, AI modeling and other advanced techniques to programmatically identify and validate secret code on GitHub, as well as identifying which developer accounts posted those secrets. To read this article in full, please click here

Accountability 73

Accountability Technology Software 73

CSO Magazine

OCTOBER 6, 2021

To carry out the alleged heist, the employee didn’t even use the type of sophisticated technology that you might expect. Our own data shows this type of exfiltration is shockingly common with removable media still accounting for 42% of data exfiltration as of March 2021. To read this article in full, please click here

Media 107

Media Marketing Accountability Technology 107

CSO Magazine

JUNE 7, 2023

At the company’s Cisco Live customer and partner conference in June, Cisco boldly connected the dots of a network- and cloud-based ecosystem that ties together innovative technologies to drive productivity, resiliency, and growths, while also showcasing its artificial intelligence (AI) capabilities. of the total market.

Network Security 55

Network Security Artificial Intelligence Marketing Accountability 55

The Security Ledger

FEBRUARY 19, 2019

And, in our second segment, Sam Bisbee the CSO of the firm ThreatStack joins us to talk about last month's hack of the PEAR open source package manager and why data deserialization attacks are a growing threat to projects that use open source components. They risk undermining a range of voice and image based authentication technologies.

Authentication 40

Authentication CSO Artificial Intelligence Social Engineering 40

CSO Magazine

APRIL 6, 2021

These days, information technology (IT) and information security professionals know this all too well, especially when it comes to configuration assessments. The 2020 Verizon Data Breach Investigations Report (DBIR) notes that vulnerabilities accounted for nearly 20% of hacking breaches.

Data breaches 87

Data breaches Cyber threats Accountability Technology 87

CSO Magazine

SEPTEMBER 13, 2022

The National Institute of Standards and Technology (NIST) zero-trust security framework presents a new way of solving an age-old problem of securing networks and information, and organizations of all sizes are rethinking their security architecture, processes, and procedures to adopt zero-trust principles.

Architecture 64

Architecture Accountability Technology Cybersecurity 64

SecureWorld News

MAY 30, 2023

For instance, users should only be given access to database content on a 'need to know basis'; giving general access to any 'trusted' users means that an attacker can seize control of those user accounts and run wild. There's a lot of folks who look for the 'silver bullet' or gravitate toward emerging technologies.

CISO 66

CISO CSO Data breaches Cybersecurity 66

McAfee

NOVEMBER 10, 2021

Under the guidance of Dan Meacham, VP of Global Security and Corporate Operations and CSO/CISO, the multi-billion dollar organization transitioned from on-premises data centers to the cloud in 2012. MVISION CNAPP helps me keep my system administrators and developers accountable for what they are doing. Unacceptable levels of risk.

Data breaches 93

Data breaches Risk CSO Media 93

CyberSecurity Insiders

MARCH 30, 2023

Developing a Clear Cybersecurity Strategy As a CISO/CSO, creating and presenting a clear cybersecurity strategy to the board of directors is crucial in fostering awareness of cyber risks and encouraging investment in cybersecurity defense.

Cybersecurity 119

Cybersecurity Cyber Risk CISO Risk 119

CyberSecurity Insiders

NOVEMBER 1, 2021

At Forter, we’ve seen a marked uptick in Account Takeovers (ATO); a form of identity fraud in which a third-party steals credentials and / or gains access to user accounts. Fraudsters have been opportunistic in taking over these accounts. ” Liron Damri, president/co-founder, Forter. “At How can that be?

Cybersecurity 52

Cybersecurity Backups Ransomware Passwords 52

Security Affairs

AUGUST 29, 2018

Once an account gets compromised finding pictures from chats such as those that may have been shared with an intimate friend is cake walk. Today, modern technology has made it much easier for hackers and other cybercriminals to hide their tracks. Most cyber stalkers are skilled hackers as well.

Identity Theft 81

Identity Theft Internet Internet Surveillance 81

Spinone

DECEMBER 26, 2018

The contemporary world has witnessed the rise of the Internet and global communication, and collaboration technologies, including mobile data use and the culture of bring your own device [BYOD]. Today, c yber security incidents lead to significant damage, alarming organizations of all types and sizes in different geographic locations.

Security Awareness 40

Security Awareness Risk Cyber threats Cyber Risk 40