Security Boulevard

JANUARY 2, 2024

This adoption brings us to the flip side of the generative AI coin: attackers are leveraging AI tools to elevate and automate phishing campaigns, craft extremely evasive malware, and reduce the development time of threats across the board. Let’s explore five predictions that should be top of mind for security leaders and organizations.

CISO 104

CISO Social Engineering Architecture Ransomware 104

SecureWorld News

APRIL 15, 2025

It's not just a policy problemit's an architectural one. Empower privileged users (including non-technical ones) with training on secure behaviors, phishing resilience, and data handling. For CISOs and cybersecurity leaders, this is the moment to align access strategy with actual threat postureand finally close the privilege gap.

Risk 69

Risk CISO Architecture Data breaches 69

The Last Watchdog

JANUARY 8, 2023

When it comes down to it, C-level goals and CISO initiatives are not all that misaligned. The need for reset and oversight is so great that a new class of technology is emerging to give organizations a better grip on the digital sprawl that’s come to define modern-day enterprise architecture.

Risk 214

Risk Cybersecurity Technology CISO 214

Security Boulevard

OCTOBER 18, 2024

Chris Clements, VP of Solutions Architecture Because of the frequency of phishing attacks landing in user mailboxes and the severity of the consequences of a user falling for a lure, any improvement at all can make the difference between an organization suffering a breach. appeared first on CISO Global. Spoiler Alert: It’s Not!

Cybersecurity 72

Cybersecurity CISO Architecture Phishing 72

IT Security Guru

SEPTEMBER 25, 2023

The IT Security Guru caught up with Tarnveer Singh a CISO and finalist in the Security Serious Unsung Heroes Awards 2023 for his thoughts on how to get more professionals involved in the cybersecurity industry: There are many ways we can inspire new cybersecurity professionals to join our industry. We must reduce barriers to entry.

CISO 133

CISO Identity Theft Cybercrime Cybersecurity 133

The Last Watchdog

JULY 30, 2018

The painful impact of cyber attacks on businesses is worsening despite advances in technology aimed at protecting enterprises from malicious network traffic, insider threats, malware, denial of service attacks and phishing campaigns. This has left many CISOs questioning if today’s incumbent cybersecurity solutions are enough.

CISO 140

CISO Cyber Attacks Data collection Cybersecurity 140

SC Magazine

MAY 19, 2021

With its tailored controls, micro-perimeters and trust-nothing approach to access, Zero Trust gives CISOs confidence that their security program can secure their remote workforce and meet regulatory compliance requirements. Thanks to a rapid shift to remote work, Zero Trust is finally garnering the attention it deserves. What is Zero Trust?

CISO 134

CISO CSO Architecture IoT 134

CyberSecurity Insiders

DECEMBER 18, 2022

A look ahead to 2023 we can expect to see changes in MFA, continued Hactivism from non-state actors, CISOs lean in on more proactive security and crypto-jackers will get more savvy. 5 – Recession requires CISOs to get frank with the board about proactive security. By Marcus Fowler, CEO of Darktrace Federal.

Cybersecurity 125

Cybersecurity CISO Insurance Ransomware 125

CyberSecurity Insiders

JANUARY 17, 2022

By Tyler Farrar, CISO, Exabeam. Seeing the opportunity presented by the near overnight closure of office spaces, for example, the volume of targeted phishing attacks skyrocketed. It makes sense that security budgets should follow to help protect these increasingly diverse and flexible architectures. Leaving The Legacy.

Threat Detection 142

Threat Detection CISO Digital transformation Technology 142

Security Boulevard

JANUARY 9, 2025

Organizations have respondedand must continue toby adopting AI-powered cybersecurity tools and implementing zero trust architecture as a critical countermeasure. An evolution in MiTM, adversary-in-the-middle (AiTM) attacks, was also observed by ThreatLabz, as detailed in the ThreatLabz 2024 Phishing Report.

Social Engineering 99

Social Engineering Architecture Phishing Risk 99

The Last Watchdog

AUGUST 19, 2021

Chris Clements, VP of Solutions Architecture, Cerberus Sentinel. Could be phished credentials. Sascha Fahrbach , cybersecurity evangelist, Fudo Security : Our personal data has immense value to cyber criminals; it is very likely that hackers will now weaponize this data to create advanced phishing attacks. Could be a bad actor.

Mobile 235

Mobile Data breaches Authentication Accountability 235

SecureWorld News

OCTOBER 19, 2023

Additionally, cybercriminals may be able to use inflation to their advantage, such as by sending phishing emails that appear to be from legitimate companies offering discounts or assistance. I think it requires taking a step back and assessing what you can do with less," said Chris Roberts, CISO and Senior Director at Boom Supersonic.

Cybersecurity 101

Cybersecurity CISO Phishing Education 101

IT Security Guru

APRIL 12, 2022

CISOs and security professionals work to limit this burgeoning threat landscape, however, it’s a work in progress. . OAuth enables consent phishing in O365. You can’t get around it, COVID-19 accelerated the already exploding SaaS market and caused industries not planning on making a switch to embrace SaaS.

CISO 113

CISO Passwords Marketing System Administration 113

Security Boulevard

SEPTEMBER 19, 2022

A critical part of achieving balanced security is for the organization to execute an architecture optimization. By breaking out the various architecture domains of the organization relating to risk and cybersecurity, including: SecOps Processes aligning to current adaptive control capabilities.

Cybersecurity 98

Cybersecurity Architecture Risk Insurance 98

Security Boulevard

MAY 2, 2025

Specifically, CISA and USCG assessors had the most success gaining initial access, attaining network permanence, evading defenses and moving laterally by using valid accounts, phishing schemes and default credentials all simple attack methods. Separately, the red team also breached the networks Windows environment via a phishing attack.

Cybersecurity 52

Cybersecurity Software Cyber Risk Risk 52

Duo's Security Blog

JANUARY 8, 2021

With the world’s attention shifting, phishing emails preying on people reading the latest headlines led to nearly 200% increase in overall phishing attacks in 2020. User and entity behavior analytics (UEBA) made significant strides as one way of determining trust in a zero-trust architecture. Well, it was. But then it wasn’t.

Digital transformation 77

Digital transformation Phishing DDOS Authentication 77

SecureWorld News

OCTOBER 12, 2022

It was apropos that Ray Yepes, newly appointed CISO for the State of Colorado, opened the 2022 SecureWorld Denver conference on October 6th. Ray Yepes, CISO for the State of Colorado, presents the opening keynote. Down the hall, Brenden Smith, CISO at FirstBank, presented "Revisiting Deception Systems: Enterprise Use Cases."

CISO 97

CISO Healthcare Government Cybersecurity 97

Security Boulevard

JANUARY 24, 2023

Cybersecurity attacks, including phishing, vishing, smishing, and everything else “ishing,” continues to rise and become even more of a problem for organizations and individuals. decentralized #DLP #dataloss #phishing #regulated #SecOps The post Why Will CyberSecurity Become the Least of your Concern?

Cybersecurity 75

Cybersecurity Artificial Intelligence Digital transformation Phishing 75

Security Boulevard

JUNE 29, 2024

AI-Powered Email Phishing 91% of all cyberattacks start with email phishing. Hackers continue to strengthen their email phishing by enabling AI to help better adjust their various attack vectors based on real-time analysis of the current campaign. Some become enhanced because of AI, and others become new.

Artificial Intelligence 72

Artificial Intelligence Engineering Cyber Insurance Phishing 72

NetSpi Executives

DECEMBER 3, 2024

This will drive a greater shift towards fewer, more comprehensive solutions that reduce management complexity and enhance team productivity. With cyber threats growing more complex and frequent, CISOs are under immense pressure to ensure that their teams can respond rapidly and decisively.

Cybersecurity 59

Cybersecurity CISO Social Engineering Accountability 59

SecureWorld News

JUNE 3, 2024

Brad Jones, CISO at Snowflake, issued a Joint Statement regarding Preliminary Findings in Snowflake Cybersecurity Investigation on its Snowflake Forums. Credential phishing, keyloggers, and weak passwords make accounts vulnerable. In this case, it appears that the security of cloud-hosted data is only as strong as the users' passwords.

Data breaches 103

Data breaches Authentication Accountability Passwords 103

SecureWorld News

MAY 19, 2020

Sherry brought to Princeton his 25 years of technology experience, 12 of which was in higher education as the former CISO at Brown University. Sherry explained that he (the CISO) would have no operational responsibilities in the beginning to focus solely on the execution of the mission.

Cybersecurity 58

Cybersecurity CISO Risk Education 58

Security Boulevard

MAY 12, 2025

This year wasnt just about what vendors were saying on the show floor it was about what CISOs were quietly discussing off of it. Suddenly, everyone can phish with polished pretexting. Plenty of CISOs nodded along. What AI has done, in Kurtzs words, is collapse the triangle. Everyone can scale lateral movement.

CISO 52

CISO Risk Authentication Architecture 52

Security Boulevard

FEBRUARY 7, 2024

But in the wake of the attack, manychief information security officers (CISOs) realized that PDNS was the answer to early detection and resiliency against similar attacks simply because log4j was surprisingly easy to detect at a DNS level. Consider: The log4j attack was difficult to detect and stop based on traditional log-file analysis.

DNS 69

DNS Architecture Marketing Cyber threats 69

SC Magazine

FEBRUARY 2, 2021

Mike Hamilton, president and chief information security officer at CI Security and former CISO of Seattle, told SC Media that the disparity in dates might simply be a matter of semantics. Our latest release of FTA has addressed all known vulnerabilities at this time,” said Frank Balonis, Accellion’s CISO, in a statement.

Government 96

Government CISO Media Encryption 96

eSecurity Planet

MAY 2, 2024

Compromised Credentials Compromised identities from phishing, info stealers, keyloggers, and bad password habits provide the entry point for most ransomware attacks and data breaches. Infrastructure Protection Defense against DDoS and DNS attacks starts with effective network security architecture.

Cybersecurity 121

Cybersecurity DDOS Penetration Testing Ransomware 121

Cisco Security

AUGUST 26, 2021

Cyber Observer’s partnership with Cisco enables CISOs to manage and monitor their cybersecurity eco-system posture. Playbooks allow you to respond to events within your environment such as notifications from a SIEM, suspected phishing emails, or alerts from asset monitoring. More details on the integration available here.

Technology 143

Technology Firewall VPN Authentication 143

SC Magazine

JULY 1, 2021

The CIOs and CISOs suggested that while real-time patch status may be known for certain devices, it does not exist for many.”. The cause is often system vulnerabilities or insiders, such as clicking on a malicious link in a phishing email or the exploit of a bad application.

Security Awareness 68

Security Awareness IoT Risk Healthcare 68

Security Boulevard

JUNE 5, 2025

This isn't merely industry speculation; it is the daily reality confronting Chief Information Security Officers (CISOs) and business leaders globally. The rise of AI-powered threats fundamentally necessitates security architectures that are inherently more difficult to target and compromise.

Cybersecurity 52

Cybersecurity Technology Encryption VPN 52

The Falcon's View

AUGUST 6, 2018

However, listing out specific technologies can become cumbersome, plus it doesn't necessarily lend itself well to thinking about security architecture and strategy. Applications. - However, what this means within the context of optimal security can vary substantially, not the least being due to staffing challenges.

InfoSec 40

InfoSec Risk Architecture Security Awareness 40

The Falcon's View

JANUARY 3, 2019

Those "better decisions" might equate to not falling for (spear)phishing attacks, choosing hardened environments over default installs, or following reasonable secure coding practices in the development process (to name a few). Consider, if you will, that fundamentally we in infosec want people to make better decisions.

InfoSec 40

InfoSec Engineering Digital transformation CISO 40

The Last Watchdog

DECEMBER 14, 2023

CISOs will have to get quantum resilient encryption on their cyber roadmap. Nick Mistry , SVP, CISO, Lineaje Mistry The software landscape is poised for significant changes, with a growing emphasis on Software Bill of Materials (SBOM.) In 2024 I encourage leadership to dedicate more attention to discussing the risks of spear phishing.

Cybersecurity 234

Cybersecurity Marketing Encryption CISO 234

The Last Watchdog

JULY 8, 2021

Here’s what they had to say, edited for clarity and length: Vikram Asnani, senior director – solution architecture, CyberGRX. Chris Clements, VP of solutions architecture, Cerberus Sentinel. Gary Phipps, VP of solution architecture, CyberGRX. Bill Lawrence, CISO, SecurityGate.io. Saumitra Das, CTO, Blue Hexagon.

Ransomware 257

Ransomware Hacking Software Architecture 257

ForAllSecure

APRIL 30, 2020

You need user education; you need to make sure that you recognize phishing and all that sort of stuff. There's a lot an IT person can do to prevent being hacked: they can make sure they use strong passwords, or they can make sure that they have proper network architecture. There's the people who are doing social engineering attacks.

Software 52

Software IoT Manufacturing Hacking 52

ForAllSecure

APRIL 30, 2020

You need user education; you need to make sure that you recognize phishing and all that sort of stuff. There's a lot an IT person can do to prevent being hacked: they can make sure they use strong passwords, or they can make sure that they have proper network architecture. There's the people who are doing social engineering attacks.

Software 52

Software IoT Manufacturing Hacking 52

ForAllSecure

APRIL 30, 2020

You need user education; you need to make sure that you recognize phishing and all that sort of stuff. There's a lot an IT person can do to prevent being hacked: they can make sure they use strong passwords, or they can make sure that they have proper network architecture. There's the people who are doing social engineering attacks.

Software 52

Software IoT Manufacturing Hacking 52

SecureWorld News

DECEMBER 27, 2024

Zero Trust Architecture Becomes the Norm: Organizations will fully embrace Zero Trust principles, leading to better segmentation and control over data, even in hybrid and remote work environments. Expect to see AI-enabled phishing campaigns, deepfake scams, and automated attacks grow in complexity.

Cybersecurity 122

Cybersecurity Risk CISO Government 122