Krebs on Security

DECEMBER 1, 2022

“Our team quickly triaged the report and determined the risk to partners to be minimal,” said Patrick Beggs , ConnectWise’s chief information security officer. “Nevertheless, the mitigation was simple and presented no risk to partner experience, so we put it into the then-stable 22.8 Update, 7:25 p.m.

Phishing 312

Phishing Architecture Passwords Accountability 312

SecureWorld News

JUNE 20, 2024

As defenders of digital assets, Chief Information Security Officers (CISOs) and cybersecurity professionals face immense pressure, often leading to burnout. It also cites the emergence of recent technologies, and the proliferation of criminal groups, as issues increasing pressure on staff.

CISO 124

CISO Cybersecurity Technology Digital transformation 124

eSecurity Planet

SEPTEMBER 1, 2021

Consumers and organizations are enthused about the operational benefits of more robust mobile connectivity, but the shift to 5G networks doesn’t come without risks. Here we’ll discuss the most significant risks posed by 5G, how U.S. Table of Contents What Are the Cybersecurity Risks of 5G? How is 5G Different?

Risk 137

Risk Cybersecurity IoT Wireless 137

Lenny Zeltser

FEBRUARY 13, 2020

As of this writing, I’ve spent six months in the role of Chief Information Security Officer (CISO) at Axonius , a rapidly growing technology company. Our IT infrastructure is consistent zero-trust architecture principles , so it made sense to treat identity as the focal point of many security decisions.

CISO 84

CISO Information Security Architecture Technology 84

CyberSecurity Insiders

JUNE 11, 2023

Zero Trust is a cybersecurity framework that can greatly support Chief Information Security Officers (CISOs) and Chief Technology Officers (CTOs) in their roles of securing organizational systems and data. This approach significantly reduces the risk of lateral movement and unauthorized access within the network.

CISO 116

CISO Technology Architecture Risk 116

SecureWorld News

AUGUST 25, 2021

Chief Information Security Officers (CISO) have the luxury of being an incredibly hot commodity, so they can pretty much pick and choose where they work, as they are almost guaranteed to have a job waiting for them somewhere. And this is increasing cyber risk. Cybersecurity officials struggle in Florida.

CISO 98

CISO Cybersecurity Government Information Security 98

Security Boulevard

MARCH 24, 2022

Identity credentials and source code are critical assets that can create major risks for your organization when exposed by breaches of third-party cloud service companies that provide identity management and software composition analysis. Know the risks of pushing your crown jewels into other services running in the cloud.

Risk 122

Risk Software Engineering Passwords 122

SecureWorld News

OCTOBER 5, 2023

Michael Gregg, the CISO for the State of North Dakota, speaks across the country, including keynoting at SecureWorld Detroit on Sep. A recent blog by Frank Domizio titled " The CISO Role: Beyond Technology " explores exactly what I am talking about. That's a soft skill that even the most adept CISOs are still trying to master.

CISO 113

CISO Risk Government Architecture 113

Cisco Security

JANUARY 12, 2022

One of the five main findings in our newly published Security Outcomes Study, Volume 2 , was the clear benefit in having a proactive strategy of refreshing business-critical technologies. How often should a technology refresh take place? As you could guess, this level of technology debt is a drag on security teams.

Architecture 127

Architecture Technology CISO Marketing 127

Jane Frankland

OCTOBER 31, 2023

However, new research from e2e-assure has revealed that few organisations are taking full advantage of security technologies available today. Instead, they’ve become complacent in their defence practices and may be exposing themselves to increased risks without even realising it. You know about tech complexities and optimisation.

CISO 147

CISO Threat Detection Cyber threats Cybercrime 147

CyberSecurity Insiders

AUGUST 28, 2022

A few years ago, very few CISOs thought that storage & backups were important. This has driven CISOs to look again at potential holes in their safety nets, by reviewing their storage, backup and recovery strategies. “In So, storage houses critical high-risk data that feeds your applications and devices. Recommendations.

Backups 128

Backups Ransomware CISO Risk 128

CyberSecurity Insiders

FEBRUARY 28, 2023

This is why governments and organizations around the world are implementing a zero trust security framework to reduce the risk of attacks while protecting resources and data. You also have to navigate reputational damage, lost revenue, and the potential for fines and sanctions from regulatory agencies.

Architecture 132

Architecture Authentication Technology CISO 132

NetSpi Executives

MARCH 25, 2025

In a world that pushes the limits with technology comes an increase in the relentless persistence of cyberattacks and we need to be prepared. Meet the Agent of Influence Host, Nabil Hannan Nabil Hannan hosts the Agent of Influence podcast and is the Field CISO at NetSPI. Interested in becoming a guest on Agent of Influence?

Cybersecurity 52

Cybersecurity CISO Penetration Testing Financial Services 52

Cisco Security

AUGUST 26, 2021

Only by integrating these tools into your larger security reporting and analytics infrastructure, and by leveraging actionable responses, can one reduce the threat risk to an organization. An integration with Cigent Technology is now available for Secure Endpoint customers to integrate with. New Cisco Cloud Security Integrations.

Technology 145

Technology Firewall VPN Authentication 145

SC Magazine

MAY 18, 2021

A visitor photographs a symbol of a cloud at the Deutsche Telekom stand the day before the CeBIT technology trade fair. It’s about how you can do your business mission” in a different environment, with its own requirements for protecting data, Vickers said during his talk at the RSA Show’s Cloud Security Alliance CISO Summit.

Cloud Migration 87

Cloud Migration CISO Firewall Risk 87

SC Magazine

APRIL 30, 2021

But ultimately, what we’re trying to do is to reduce the risks to national security and national prosperity by hardening and strengthening that cyber ecosystem. We’ve been trying to do that for years and as new technologies come into play, that modernization and optimization is critically important. I lived it.

CISO 109

CISO Cybersecurity Artificial Intelligence Government 109

Notice Bored

AUGUST 5, 2022

Generally, though, the risk management and security arrangements quietly support and enable the business from the inside, as it were, rather than being exposed externally - unless they fail anyway! including security-relevant aspects ( e.g. being a trusted partner). Security Response : the example metrics suggest the classical (outdated!)

CISO 63

CISO Risk Artificial Intelligence Marketing 63

McAfee

NOVEMBER 3, 2020

Forrester also predicts that the number of women CISOs at Fortune 500 companies will rise to 20 percent in 2019 , compared with 13 percent in 2017. Her work centered on helping aerospace manufacturers manage the convergence of cyber risk across their increasingly complex business ecosystem, including IT, OT and connected products.

Cybersecurity 93

Cybersecurity Architecture Cloud Migration Retail 93

Cisco Security

OCTOBER 18, 2021

About 15 years ago, the idiom began to be applied to cybersecurity, where the risk management continuum values the investment in protection to mitigate the negative consequences of a cyber incident. We can never eliminate risk entirely, but we can manage it effectively with “Left of Boom” processes and procedures. Right of Boom”.

Cybersecurity 143

Cybersecurity CISO Insurance Risk 143

eSecurity Planet

NOVEMBER 4, 2022

The two are addressing major issues like sprawling cloud and software supply chain risks, showing that good companies addressing real needs are having little trouble finding investors. Keep in mind that the typical CISO manages about 75 security tools and applications. Versa’s SASE Story. Customers certainly want more simplicity.

Cybersecurity 130

Cybersecurity Marketing Risk Architecture 130

Security Boulevard

MAY 2, 2025

1 - How to choose cyber secure OT products If your organization is shopping around for operational technology (OT) products, CISA published a guide in January 2025 aimed at helping OT operators choose OT products designed with strong cybersecurity features. In case you missed it, heres CISAs advice on six cybersecurity areas.

Cybersecurity 52

Cybersecurity Software Cyber Risk Risk 52

IT Security Guru

SEPTEMBER 25, 2023

The IT Security Guru caught up with Tarnveer Singh a CISO and finalist in the Security Serious Unsung Heroes Awards 2023 for his thoughts on how to get more professionals involved in the cybersecurity industry: There are many ways we can inspire new cybersecurity professionals to join our industry. We must reduce barriers to entry.

CISO 133

CISO Identity Theft Cybercrime Cybersecurity 133

SecureWorld News

MAY 29, 2024

The manufacturing sector faces an increasingly daunting cyber threat landscape that puts production operations, intellectual property, and entire supply chains at risk. The risk is too great, and key business partnerships are required," said Amy Bogac , former CISO at The Clorox Company. trillion annually. "

Manufacturing 109

Manufacturing CISO Cyber threats Artificial Intelligence 109

NetSpi Executives

FEBRUARY 21, 2024

Artificial Intelligence (AI) and Machine Learning (ML) present limitless possibilities for enhancing business processes, but they also expand the potential for malicious actors to exploit security risks. Like many technologies that came before it, AI is advancing faster than security standards can keep up with.

Artificial Intelligence 111

Artificial Intelligence Cybersecurity Penetration Testing Architecture 111

Security Boulevard

SEPTEMBER 19, 2022

Most organizations develop three to five-year phasing plans for most IT and cyber products to align with the manufacturer’s end-of-development, end-of-support, and end-of-life product life cycles and keep up with the latest security risks. Live patching systems outdated technologies. Separating Product Sunsetting from Process.

Cybersecurity 98

Cybersecurity Architecture Risk Insurance 98

CyberSecurity Insiders

JANUARY 17, 2022

By Tyler Farrar, CISO, Exabeam. In almost every case, technology has played a vital role in facilitating and supporting these changes. It makes sense that security budgets should follow to help protect these increasingly diverse and flexible architectures. Unfortunately, so were cyber adversaries. Leaving The Legacy.

Threat Detection 142

Threat Detection CISO Digital transformation Technology 142

SC Magazine

MAY 19, 2021

With its tailored controls, micro-perimeters and trust-nothing approach to access, Zero Trust gives CISOs confidence that their security program can secure their remote workforce and meet regulatory compliance requirements. Thanks to a rapid shift to remote work, Zero Trust is finally garnering the attention it deserves. What is Zero Trust?

CISO 134

CISO CSO Architecture IoT 134

The Last Watchdog

JULY 30, 2018

The painful impact of cyber attacks on businesses is worsening despite advances in technology aimed at protecting enterprises from malicious network traffic, insider threats, malware, denial of service attacks and phishing campaigns. This has left many CISOs questioning if today’s incumbent cybersecurity solutions are enough.

CISO 140

CISO Cyber Attacks Data collection Cybersecurity 140

Cisco Security

FEBRUARY 16, 2021

Topics such as tech refresh, risk management, and incident response were examined from the perspective of a roadmap for success in an information security program for organizations of all sizes. Having this data at our hands allows us to align our risk exposure to do some of the important work.”

Risk 126

Risk InfoSec Technology CISO 126

SecureWorld News

SEPTEMBER 7, 2023

As for the panel presentation at SecureWorld Denver , it features Edgar Acosta, Experienced Cybersecurity Professional (former CISO at DCP Midstream ); Craig Hurter, Sr. Director of Information Security, State of Colorado Governor's Office of Information Technology; and Toby Zimmerer, Sr. Demand and Delivery Director, Optiv.

Encryption 113

Encryption Technology Risk Architecture 113

SecureWorld News

JUNE 24, 2024

The potential loss of reputation from a privacy breach is a clarion call for business executives and CISOs. In addition, the risks of monetary and operational damage render it mission critical for enterprises to envision and enact the appropriate People, Process, and Technology safeguards to assure data protection and privacy.

IoT 109

IoT InfoSec Artificial Intelligence Risk 109

SecureWorld News

MAY 31, 2024

Blockchain Developer: Blockchain is a disruptive technology that has created new development roles in the last five years or so. Cloud Solution Architect: While not purely cybersecurity, this role is heavily focused on cloud security in addition to architecture.

Artificial Intelligence 108

Artificial Intelligence Cybersecurity Engineering Technology 108

Security Boulevard

JULY 29, 2024

Risk and Reward of APIs and Third-Party Connectors in the Cloud 7 min read · Just now -- A Security Operations (#SecOps) and Engineering Commentary from industry insider Rohan Bafna , SecOps Engineer. That is the risk. APIs are at risk of attack from injected malicious code, leading to data exposure, system compromise, or takeovers.

Risk 69

Risk Engineering Small Business Architecture 69

Security Boulevard

OCTOBER 7, 2024

Security leaders face the challenge of managing a vast, interconnected attack surface, where traditional approaches to managing cyber risk are no longer sufficient. Modern threats exploit vulnerabilities across domains, requiring a more holistic approach to avoid operational disruption, safety risks and financial losses.

Risk 69

Risk Cybersecurity IoT Internet 69

SC Magazine

MAY 1, 2021

With a career spanning two decades as a technology provider to businesses and government agencies, Levine brings a strategic and pragmatic approach to building secure software and cloud services without disrupting product velocity. Since founding Cedric Leighton Associates, he has become an internationally known strategic risk expert.

Computers and Electronics 126

Computers and Electronics Technology Information Security Education 126

CyberSecurity Insiders

JANUARY 19, 2022

Seven Cloud Security Predictions CISOs Can Use in 2022. Our goal is to help chief information security officers (CISOs) and their teams place the right bets on cloud data security. Security teams will evolve from gatekeepers to enablers: Recent events have forced CISOs and security teams to transform the way they work.

CISO 126

CISO Data breaches Artificial Intelligence Digital transformation 126

SC Magazine

JULY 13, 2021

Today’s columnist, Deborah Watson of Proofpoint, says with so much work conducted via virtual meetings, risk has increased and businesses have to pay more attention to an insider threat management program. Think of Insider Threat Management Programs (ITMPs) as a holistic focus on managing the risks that insiders pose to your corporate assets.

Risk 91

Risk InfoSec Media Technology 91