Adam Shostack

JUNE 16, 2025

Specifically, Article 13 states: “3. The cybersecurity risk assessment shall be documented and updated as appropriate during a support period to be determined in accordance with paragraph 8 of this Article. a description of the design.

Risk 130

Risk Architecture Manufacturing Cybersecurity 130

SecureList

OCTOBER 29, 2024

The primary objective of these services is risk reduction. In this article, we delve into the root causes of real-world cases from our practice, where despite having numerous security controls in place, the organizations still found themselves compromised. This is where compromise assessment enters the game.

Risk 111

Risk Antivirus Accountability Malware 111

Daniel Miessler

MAY 14, 2020

I wrote an article recently on how to secure your home network in three different tiers of protection. What follows is a set of basic security hygiene steps that will significantly reduce your risk online. The more fringe the site, the higher the risk of bad things happening while you’re there. Stay on reputable websites.

Risk 345

Risk Password Management Passwords Accountability 345

SecureWorld News

FEBRUARY 28, 2025

But amidst all these flashy, futuristic threats, the biggest cybersecurity risk remains the same as it's always beenhumans. Getting back to the article, let's first break down the findings, the implications, and why it's time for a revolution in how we think about security. This article appeared originally on LinkedIn here.

Cybersecurity 113

Cybersecurity Risk Social Engineering Phishing 113

The Last Watchdog

AUGUST 29, 2023

Here’s what you should know about the risks, what aviation is doing to address those risks, and how to overcome them. It is difficult to deny that cyberthreats are a risk to planes. Risks delineated Still, there have been many other incidents since. Fortunately, there are ways to address the risks.

Software 264

Software Risk Artificial Intelligence Cyber Attacks 264

Schneier on Security

NOVEMBER 16, 2020

While current election systems are far from perfect, Internet- and blockchain-based voting would greatly increase the risk of undetectable, nation-scale election failures.Online voting may seem appealing: voting from a computer or smart phone may seem convenient and accessible.

Computers and Electronics 361

Computers and Electronics Internet Internet Risk 361

Schneier on Security

APRIL 12, 2023

How much of a risk is this, really? News article. Bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices that access these ports. Carry your own charger and USB cord and use an electrical outlet instead.

Malware 352

Malware Software Risk 352

Tech Republic Security

JUNE 1, 2025

As cyber threats outpace traditional perimeter defenses, organizations face mounting risks in their digital transformation efforts.

Digital transformation 113

Digital transformation CISO Cyber threats Risk 113

Doctor Chaos

FEBRUARY 21, 2024

Everybody is racing to develop an AI strategy, and many do not understand the risks associated with AI. Microsoft recently posted an article speaking to this concern found HERE.

Technology 130

Technology Risk 130

Schneier on Security

MARCH 1, 2024

The CSF’s governance component emphasizes that cybersecurity is a major source of enterprise risk that senior leaders should consider alongside others such as finance and reputation. […] The framework’s core is now organized around six key functions: Identify, Protect, Detect, Respond and Recover, along with CSF 2.0’s

Cybersecurity 335

Cybersecurity Small Business Government Risk 335

Joseph Steinberg

JULY 8, 2021

Ironically, while many larger enterprises purchase insurance to protect themselves against catastrophic levels of hacker-inflicted damages, smaller businesses – whose cyber-risks are far greater than those of their larger counterparts – rarely have adequate (or even any) coverage.

Insurance 364

Insurance Cyber Insurance Cybersecurity Small Business 364

Heimadal Security

JANUARY 16, 2025

With its stringent requirements for managing cyber risks, securing supply chains, and reporting incidents, its essential for organizations to ensure compliance. The NIS2 Directive is a pivotal regulation aimed at enhancing cybersecurity within critical sectors across the European Union.

Cyber Risk 111

Cyber Risk Risk Cybersecurity 111

Schneier on Security

APRIL 24, 2024

Law professor Dan Solove has a new article on privacy regulation. In his email to me, he writes: “I’ve been pondering privacy consent for more than a decade, and I think I finally made a breakthrough with this article.” ” His mini-abstract: In this Article I argue that most of the time, privacy consent is fictitious.

Data collection 319

Data collection Risk 319

Schneier on Security

JULY 3, 2024

It’s a serious one : The vulnerability, which is a signal handler race condition in OpenSSH’s server (sshd), allows unauthenticated remote code execution (RCE) as root on glibc-based Linux systems; that presents a significant security risk. News articles. The details. Slashdot thread.

Firewall 349

Firewall Data breaches Malware Risk 349

Malwarebytes

NOVEMBER 1, 2024

For the users it’s not just the payment for an article they’ll never receive and the disappointment about not getting that sought-after article, but there is also the risk of providing cybercriminals with their payment card information. On a legitimate web shop this should work and warn visitors about invalid entries.

Phishing 120

Phishing Advertising Engineering Risk 120

SecureWorld News

NOVEMBER 25, 2024

It’s a chance to take a high-level look at how well your organization is managing information security risks, meeting objectives, and staying aligned with regulatory and business needs. Whether it’s a gap in controls, a missed objective, or an emerging risk, this is your chance to catch it early and take action. Look at Clause 9.3

Cybersecurity 109

Cybersecurity Risk Information Security Accountability 109

Schneier on Security

AUGUST 2, 2023

There are two basic rules: Public companies must “disclose any cybersecurity incident they determine to be material” within four days, with potential delays if there is a national security risk. Continuous assessment of the risk reduction activities should be elevated within an enterprise risk management framework and process.

Cybersecurity 242

Cybersecurity Risk Government Accountability 242

Security Affairs

DECEMBER 18, 2024

Below are the findings of infringement of the GDPR reported by DPC: Decision 1 Article 33(3) GDPR – By not including in its breach notification all the information required by that provision that it could and should have included. ” said DPC Deputy Commissioner Graham Doyle.

Data breaches 106

Data breaches Accountability Risk Advertising 106

Schneier on Security

NOVEMBER 11, 2021

ArsTechnica’s Sean Gallagher has a two – part article on “securing your digital life.” ” It’s pretty good.

Risk 352

Risk Cybersecurity 352

Graham Cluley

MAY 27, 2025

Read more in my article on the Hot for Security blog. Lovers of Adidas clothes would be wise to be on their guard against phishing attacks, after the German sportswear giant revealed that a cyber attack had exposed the personal information of customers.

Data breaches 59

Data breaches Risk Cyber Attacks Phishing 59

Schneier on Security

SEPTEMBER 6, 2021

Yet another article on the privacy risks of static MAC addresses and always-on Bluetooth connections. This one is about wireless headphones.

Wireless 316

Wireless Marketing Manufacturing Risk 316

Schneier on Security

AUGUST 13, 2021

The real risk isn’t that AI-generated phishing emails are as good as human-generated ones, it’s that they can be generated at much greater scale. Another news article. Combine it with voice and video synthesis, and you have some pretty scary scenarios. Defcon presentation and slides.

Phishing 357

Phishing Risk Social Engineering Artificial Intelligence 357

Schneier on Security

JULY 1, 2021

It is important to remember that the primary purpose of cyber insurance is not to improve cyber security, but to transfer residual risk. As such, it should be one of many tools that governments and businesses can draw on to manage cyber risk more effectively. News article. Often, that’s paying the ransom.

Insurance 332

Insurance Cyber Insurance Ransomware Marketing 332

NetSpi Executives

DECEMBER 16, 2024

As a result, consumer-facing LLM capabilities introduce a new and less understood set of risks for organizations. TLDR; Large Language Models (LLMs) have become more integrated into critical systems, applications, and processes, posing a challenge for potential security risks. These vulnerabilities have significant implications.

Risk 107

Risk Software Cybersecurity 107

Security Affairs

MAY 18, 2025

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape PupkinStealer : A.NET-Based Info-Stealer Interlock ransomware evolving under the radar Technical Analysis of TransferLoader Sophisticated NPM Attack Leveraging Unicode Steganography and Google Calendar C2 Horabot Unleashed: (..)

Malware 104

Malware Encryption Phishing Hacking 104

Malwarebytes

FEBRUARY 12, 2025

This article was researched and written by Stefan Dasic, manager, research and response for ThreatDown, powered by Malwarebytes. Browser Guard already blocks the domains in this article. As an online seller, youre already juggling product listings, customer service and marketingso the last thing you need is to be targeted by scammers.

Scams 129

Scams Accountability Marketing Account Security 129

SecureWorld News

FEBRUARY 17, 2025

We have moved beyond traditional compliance-driven security models to risk-based approaches, integrating cybersecurity into enterprise risk management (ERM) frameworks. This led to a reactive approach where organizations were more focused on regulatory adherence than on actual security risk management.

Government 87

Government Cybersecurity Risk CISO 87

Schneier on Security

DECEMBER 1, 2023

Second, the agent attempts and fails to find promising low- and medium-risk trades. More from the news article: Though wouldn’t it be funny if this was the limit of AI misalignment? First, it receives a email from its “manager” that the company is not doing well and needs better performance in the next quarter.

Marketing 343

Marketing Risk Artificial Intelligence 343

Adam Levin

JUNE 4, 2021

Upon publication of this article, the Exagrid website still touted seven industry awards for work in the area of ransomware recovery solution, but this attack will harm its reputation, proving once again that no one is immune from the scourge of a well-targeted attack. We are in the midst of an ongoing ransomware epidemic.

Ransomware 289

Ransomware Backups Insurance Healthcare 289

Security Affairs

FEBRUARY 28, 2025

Hackers reveal security flaws in smart solar systems, exposing risks to national power grids as global reliance on solar energy grows. DW investigated the risks of cyber attacks exploiting vulnerabilities in smart solar systems while the demand for solar energy grows. ” reads the article published by DW.

Hacking 101

Hacking Passwords Risk Cyber threats 101

Security Affairs

NOVEMBER 10, 2024

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Malware 113

Malware Cryptocurrency Banking Hacking 113

Security Affairs

JANUARY 17, 2025

The privacy non-profit organization requested the immediate suspension of data transfers to China due to the risk that the government of Beijing could access data of EU citizens. While some admit these transfers, others list “third countries,” raising concerns about compliance with EU data protection laws.

Surveillance 110

Surveillance Hacking Government Risk 110

Joseph Steinberg

DECEMBER 5, 2021

Additionally, humanity’s leveraging of AI-systems in general is already starting to generate many new, significant cybersecurity risks. To read the full interview, please see the article Q&A with Joseph Steinberg.

Artificial Intelligence 337

Artificial Intelligence Cybersecurity Media Risk 337

SecureWorld News

DECEMBER 9, 2024

Stress and burnout are leading contributors, with 60% citing stress and 53% citing burnout as risks that could prompt them to leave. Reducing burnout Organizations are beginning to share cybersecurity responsibilities across leadership roles, such as involving Chief Risk Officers (CROs) and Chief Data Officers (CDOs).

CISO 104

CISO Cyber threats Risk Cybersecurity 104

The Last Watchdog

JUNE 18, 2025

The platform combines attacker-like discovery methods with ongoing security monitoring, vulnerability scanning, and expert-led penetration testing services to help organizations of all sizes identify and remediate security risks before they can be exploited. Users can learn more at www.msptoday.com.

Penetration Testing 130

Penetration Testing Technology Media Marketing 130

Schneier on Security

JANUARY 15, 2020

The vulnerability places Windows endpoints at risk to a broad range of exploitation vectors. Ars Technica article. Wired article. EDITED TO ADD: Washington Post article. Assume that this vulnerability has already been weaponized, probably by criminals and certainly by major governments. CERT advisory.

Media 274

Media Government Software Risk 274

SecureWorld News

DECEMBER 8, 2024

It is essential to understand the risks posed by quantum computing, as future advancements could compromise today's encrypted data, opening new opportunities for threat actors. This article explores these threats, expected timelines, and steps organizations can take to prepare for a future where quantum decryption becomes a reality.

Encryption 119

Encryption Firewall Firmware Education 119