IT Security Guru

SEPTEMBER 25, 2023

The IT Security Guru caught up with Tarnveer Singh a CISO and finalist in the Security Serious Unsung Heroes Awards 2023 for his thoughts on how to get more professionals involved in the cybersecurity industry: There are many ways we can inspire new cybersecurity professionals to join our industry.

CISO 117

CISO Identity Theft Cybercrime Cybersecurity 117

Krebs on Security

DECEMBER 1, 2022

“Our team quickly triaged the report and determined the risk to partners to be minimal,” said Patrick Beggs , ConnectWise’s chief information security officer. “Nevertheless, the mitigation was simple and presented no risk to partner experience, so we put it into the then-stable 22.8

Phishing 239

Phishing Architecture Passwords Accountability 239

McAfee

NOVEMBER 3, 2020

Forrester also predicts that the number of women CISOs at Fortune 500 companies will rise to 20 percent in 2019 , compared with 13 percent in 2017. This is consistent with new research from Boardroom Insiders which states that 20 percent of Fortune 500 global chief information officers (CIOs) are now women — the largest percentage ever.

Cybersecurity 93

Cybersecurity Architecture Cloud Migration Retail 93

SC Magazine

APRIL 30, 2021

Gregory Touhill, former federal chief information security officer and deputy assistant Homeland Security secretary for cyber security operations, seen here at a House Foreign Affairs Committee hearing in 2015 in Washington, DC. chief information security officer. Photo by Mark Wilson/Getty Images).

CISO 109

CISO Cybersecurity Artificial Intelligence Government 109

Cisco Security

OCTOBER 18, 2021

About 15 years ago, the idiom began to be applied to cybersecurity, where the risk management continuum values the investment in protection to mitigate the negative consequences of a cyber incident. We can never eliminate risk entirely, but we can manage it effectively with “Left of Boom” processes and procedures.

Cybersecurity 114

Cybersecurity CISO Insurance Risk 114

SC Magazine

JANUARY 29, 2021

For example, companies with exposed IoT are more than 50% more likely to have email security issues, according to a new report and blog post from the Cyentia Institute and RiskRecon. But what does that correlation mean for chief information security officers? So, how can CISOs operationalize that kind of information?

IoT 98

IoT Internet Internet CISO 98

SecureWorld News

SEPTEMBER 7, 2023

As for the panel presentation at SecureWorld Denver , it features Edgar Acosta, Experienced Cybersecurity Professional (former CISO at DCP Midstream ); Craig Hurter, Sr. Director of Information Security, State of Colorado Governor's Office of Information Technology; and Toby Zimmerer, Sr.

Encryption 91

Encryption Technology Risk Architecture 91

Lenny Zeltser

OCTOBER 5, 2023

As the CISO at a tech company, my responsibilities include empowering our software engineering teams to maintain a strong security posture of our products. While everyone agrees that security is important, the different incentives of security and engineering teams can make it harder to collaborate.

Engineering 62

Engineering Software Risk CISO 62

SC Magazine

MAY 1, 2021

Cedric Leighton is founder and president of Cedric Leighton Associates, a strategic risk and leadership management consultancy. Since founding Cedric Leighton Associates, he has become an internationally known strategic risk expert. Leighton is also a founding partner of CYFORIX, specializing in the field of cyber risk.

Computers and Electronics 126

Computers and Electronics Technology Education Information Security 126

SecureWorld News

MAY 19, 2020

When David Sherry became Chief Information Security Officer at Princeton University, he says cybersecurity was done well. "I I don't want you to think security at Princeton was some sort of vast wasteland. In many ways, leading a security mission out of a university is like securing a city.

Cybersecurity 53

Cybersecurity CISO Risk Education 53

eSecurity Planet

MAY 12, 2023

This vulnerability management policy defines the requirements for the [eSecurity Planet] IT and security teams to protect company resources from unacceptable risk from unknown and known vulnerabilities. Broader is always better to control risks, but can be more costly.] Vulnerability Management Policy & Procedure A.

Penetration Testing 109

Penetration Testing Risk Firmware Software 109

Cisco Security

JUNE 29, 2022

Learn more about security resilience for the hybrid work era. In addition to unparalleled infrastructure and expertise, our open, cloud-native architecture allows you to integrate with a wide range of third-party security and technology solutions for more seamless threat defense. Safeguard your future with Cisco .

Technology 104

Technology CISO Architecture Internet 104

eSecurity Planet

JULY 23, 2021

The Linux file system interface is implemented as a layered architecture, separating the user interface layer from the file system implementation and from the drivers that manipulate the storage devices,” Bharat Jogi, senior manager of vulnerabilities and signatures for Qualys, wrote in a blog post.

Accountability 145

Accountability Big data CISO Architecture 145

SC Magazine

FEBRUARY 8, 2021

He referenced an insurer’s role in designing pressure relief valves for the steam engines powering Philadelphia in the 1800s: “They said if you wanted to have insurance, you have to have this piece of architecture on your system.” In so doing, “they drove security or solutions to avoid large insurance claims.”. billion in premium.

Insurance 126

Insurance Cyber Insurance Cybersecurity Government 126

SecureWorld News

AUGUST 25, 2021

Chief Information Security Officers (CISO) have the luxury of being an incredibly hot commodity, so they can pretty much pick and choose where they work, as they are almost guaranteed to have a job waiting for them somewhere. And this is increasing cyber risk. Cybersecurity officials struggle in Florida.

CISO 98

CISO Cybersecurity Government Technology 98

SC Magazine

JULY 1, 2021

But even advanced tools can’t tell you who owns it – or what it means to the organization in terms of risk.”. In 2019, the College of Healthcare Information Management Executives (CHIME) outlined the biggest health IT security gaps facing provider organizations, in response to Sen. The goal is to secure the patient journey.

Security Awareness 68

Security Awareness IoT Risk Healthcare 68

eSecurity Planet

JULY 22, 2021

It also feeds into the larger argument for adopting a zero-trust architecture , a methodology that essentially assumes that no user or devices trying to connect to the network can be trusted until they’re authenticated and verified. IoT device security has also been the target of a broad federal effort in recent months.

IoT 145

IoT Risk Architecture Manufacturing 145

Security Affairs

JULY 24, 2018

.” These are very powerful functions for debugging tools, and also useful for executing malicious code without being trapped by the usual security controls. As long as the adb tools is being used in a secured environment, it presents little risk. He is currently Global CISO for the ATCO Group of companies.

Cryptocurrency 49

Cryptocurrency IoT Mobile Advertising 49

SC Magazine

FEBRUARY 2, 2021

The attack also demonstrates not only the critical importance of securing sensitive data on the move, but also the potential risks of using legacy applications that are nearing end of life. Our latest release of FTA has addressed all known vulnerabilities at this time,” said Frank Balonis, Accellion’s CISO, in a statement.

Government 96

Government CISO Media Encryption 96

Spinone

OCTOBER 19, 2018

The average US salary for a cybersecurity specialist is currently $82,000 and salaries for top chief information security officers (CISOs) have reached as high as $420,000 , and are expected to continue to grow.

Cybersecurity 61

Cybersecurity Engineering CISO Architecture 61

McAfee

OCTOBER 8, 2019

The biggest challenge is information security extension in a multi-cloud world. Yet few security operations teams are prepared for that. Machine learning will be throughout the information security technology stack soon. The harder thing here is that information security teams must adjust to ALL of this at ONCE.

Digital transformation 40

Digital transformation Cybersecurity IoT Technology 40

Lenny Zeltser

FEBRUARY 13, 2020

As of this writing, I’ve spent six months in the role of Chief Information Security Officer (CISO) at Axonius , a rapidly growing technology company. Our IT infrastructure is consistent zero-trust architecture principles , so it made sense to treat identity as the focal point of many security decisions.

CISO 79

CISO Information Security Architecture Technology 79

Security Boulevard

SEPTEMBER 9, 2023

Many thanks to BSides Buffalo for publishing their presenter’s outstanding BSides Buffalo security content on the organizations’ YouTube channel. Permalink The post BSides Buffalo 2023 – Brent Patterson – Creative Hacking With Blender appeared first on Security Boulevard.

Hacking 64

Hacking Architecture CISO Education 64

Security Boulevard

SEPTEMBER 1, 2023

Many thanks to BSides Cheltenham for publishing their presenter’s outstanding BSides Cheltenham 2023 security content on the organizations’ YouTube channel. Permalink The post BSides Cheltenham 2023 – Sadi Zane – Attacking And Defending On-Premises And Cloud-Based Kubernetes Services appeared first on Security Boulevard.

Architecture 64

Architecture CISO Education Risk 64

Security Boulevard

SEPTEMBER 14, 2023

Many thanks to BSides Buffalo for publishing their presenter’s outstanding BSides Buffalo security content on the organizations’ YouTube channel. Permalink The post BSides Buffalo 2023 – Magno Logan – Hacking GitHub Actions – Abusing GitHub And Azure For Fun And Profit appeared first on Security Boulevard.

Hacking 59

Hacking Architecture CISO Education 59

Security Boulevard

SEPTEMBER 8, 2023

Many thanks to BSides Buffalo for publishing their presenter’s outstanding BSides Buffalo security content on the organizations’ YouTube channel. Permalink The post BSides Buffalo 2023 – Dr. Catherine J Ullman – Defending Beyond Defense appeared first on Security Boulevard.

Architecture 59

Architecture CISO Education Risk 59

The Last Watchdog

FEBRUARY 26, 2023

Of the numerous security frameworks available to help companies protect against cyber-threats, many consider ISO 27001 to be the gold standard. These updates address the growing risk to application security (AppSec), and so they’re critically important for organizations to understand and implement in their IT systems ASAP.

Cyber threats 203

Cyber threats Software Risk CISO 203

Security Boulevard

AUGUST 27, 2023

Many thanks to BSides Cheltenham for publishing their presenter’s outstanding BSides Cheltenham 2023 security content on the organizations’ YouTube channel. appeared first on Security Boulevard. Permalink The post BSides Cheltenham 2023 – Simon Gurney – Making Your Own Cool Conference Badges!

Architecture 52

Architecture CISO Education Risk 52

Security Boulevard

AUGUST 25, 2023

Many thanks to BSides Cheltenham for publishing their presenter’s outstanding BSides Cheltenham 2023 security content on the organizations’ YouTube channel. Permalink The post BSides Cheltenham 2023 – Cristian Cornea – Bypassing Anti-Virus Using BadUSB appeared first on Security Boulevard.

Architecture 52

Architecture CISO Education Risk 52

CyberSecurity Insiders

JUNE 25, 2021

By Shay Siksik, VP Customer Operations and CISO, XM Cyber. We call these things “unknown unknowns” — and they are the most challenging to deal with from the perspective of risk management and cybersecurity. It’s easy, relatively speaking, to prepare defenses against risks that are well understood.

Cyber Risk 79

Cyber Risk Risk Penetration Testing Cybersecurity 79

Security Boulevard

SEPTEMBER 15, 2023

Many thanks to BSides Buffalo for publishing their presenter’s outstanding BSides Buffalo security content on the organizations’ YouTube channel. Permalink The post BSides Buffalo 2023 – Richard Smith – Enriching Your SOC Investigations With Insights From Active Directory appeared first on Security Boulevard.

Architecture 45

Architecture CISO Education Risk 45

Security Boulevard

SEPTEMBER 14, 2023

Many thanks to BSides Buffalo for publishing their presenter’s outstanding BSides Buffalo security content on the organizations’ YouTube channel. Plaza – I Spy With My Hacker Eye – How Hackers Use Public Info To Crack Your Creds appeared first on Security Boulevard.

Architecture 45

Architecture CISO Education Risk 45

Security Boulevard

SEPTEMBER 12, 2023

Many thanks to BSides Buffalo for publishing their presenter’s outstanding BSides Buffalo security content on the organizations’ YouTube channel. Permalink The post BSides Buffalo 2023 – Jeff Hoge – Mitigating (Radio)Active Directory appeared first on Security Boulevard.

Architecture 45

Architecture CISO Education Risk 45

Security Boulevard

SEPTEMBER 10, 2023

Many thanks to BSides Buffalo for publishing their presenter’s outstanding BSides Buffalo security content on the organizations’ YouTube channel. Lawrence – Digital Possibilities For Research And Communication In The Humanities appeared first on Security Boulevard. Permalink The post BSides Buffalo 2023 – Jonathan D.

Architecture 45

Architecture CISO Education Risk 45

Security Boulevard

SEPTEMBER 8, 2023

Many thanks to BSides Buffalo for publishing their presenter’s outstanding BSides Buffalo security content on the organizations’ YouTube channel. Permalink The post BSides Buffalo 2023 – Zack Glick – How to Read a Breach Notification appeared first on Security Boulevard.

Architecture 45

Architecture CISO Education Risk 45

Security Boulevard

SEPTEMBER 6, 2023

Many thanks to BSides Cheltenham for publishing their presenter’s outstanding BSides Cheltenham 2023 security content on the organizations’ YouTube channel. Permalink The post BSides Cheltenham 2023 – BSides Cheltenham Organizers – Closing Remarks appeared first on Security Boulevard.

Architecture 45

Architecture CISO Education Risk 45

Security Boulevard

SEPTEMBER 1, 2023

Many thanks to BSides Cheltenham for publishing their presenter’s outstanding BSides Cheltenham 2023 security content on the organizations’ YouTube channel. Permalink The post BSides Cheltenham 2023 – Stephen – All Your Firmwares Are Belong To Us: A Guide To Successful Acquisition appeared first on Security Boulevard.

Firmware 45

Firmware Architecture CISO Education 45