Schneier on Security

JUNE 29, 2021

Over at Lawfare, Susan Landau has an excellent essay on the risks posed by software used to collect evidence (a Breathalyzer is probably the most obvious example). Bugs and vulnerabilities can lead to inaccurate evidence, but the proprietary nature of software makes it hard for defendants to examine it.

Software 308

Software Risk Government Engineering 308

The Last Watchdog

AUGUST 29, 2023

Here’s what you should know about the risks, what aviation is doing to address those risks, and how to overcome them. It is difficult to deny that cyberthreats are a risk to planes. Risks delineated Still, there have been many other incidents since. Fortunately, there are ways to address the risks.

Software 239

Software Risk Artificial Intelligence Engineering 239

InfoWorld on Security

FEBRUARY 28, 2024

Nearly three-quarters of codebases assessed for risk by Synopsis in 2023 contained open source components with high-risk vulnerabilities, according to a just-released report from the company, a provider of application security testing tools. To read this article in full, please click here

Risk 82

Risk 82

Security Boulevard

NOVEMBER 19, 2023

This Article Insider Risk Digest: Week 45-46 was first published on Signpost Six. | | [link] Introduction In this edition of our Insider Risk Digest for weeks 45-46, we highlight a disturbing case of workplace violence, and the role that organisational culture plays in mitigating and responding to insider risk.

Risk 62

Risk 62

CSO Magazine

MAY 19, 2022

Enterprises around the world are being barraged by risk events, according to a report released Wednesday by Forrester. Risk events, incidents and disruptions have become so frequent that the increased level of risk is the “new normal,” Forrester reported. To read this article in full, please click here

Risk 131

Risk 131

Schneier on Security

JUNE 24, 2020

This is all a prelude to saying that I have been paying a lot of attention to the COVID-related risks of flying. This article interviewed 511 endocrinologists, and the general consensus was that flying is riskier than getting a haircut but less risky than eating in a restaurant.

Risk 359

Risk 359

Schneier on Security

APRIL 24, 2024

Law professor Dan Solove has a new article on privacy regulation. In his email to me, he writes: “I’ve been pondering privacy consent for more than a decade, and I think I finally made a breakthrough with this article.” ” His mini-abstract: In this Article I argue that most of the time, privacy consent is fictitious.

Data collection 230

Data collection Risk 230

Security Boulevard

DECEMBER 1, 2023

This Article Insider Risk Digest: Week 47-48 was first published on Signpost Six. | | [link] Introduction Every two weeks, we bring you a round-up of cases and stories that caught our attention in the realm of Insider Risk. | [link] The post Insider Risk Digest: Week 47-48 appeared first on Security Boulevard.

Risk 57

Risk 57

Security Boulevard

JANUARY 10, 2024

This Article Enhancing Organisational Security: A Comprehensive Guide to Insider Risk Management Courses was first published on Signpost Six. | | [link] Introduction In a world increasingly aware of internal security threats, the necessity for comprehensive insider risk management courses has never been more crucial.

Risk 62

Risk 62

InfoWorld on Security

APRIL 9, 2024

Synopsys has introduced Black Duck Supply Chain Edition , a software composition analysis (SCA) package that helps organizations mitigate upstream risk in software supply chains, including from AI code. To read this article in full, please click here

Software 61

Software Risk Technology Malware 61

Security Boulevard

NOVEMBER 29, 2022

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post Managing Cyber Risk with Cyber Risk Quantification appeared first on Security Boulevard.

Cyber Risk 73

Cyber Risk Risk 73

CSO Magazine

MARCH 1, 2023

Known vulnerabilities, compromise of legitimate package, and name confusion attacks are expected to be among the top ten open source software risks in 2023, according to a report by Endor Labs. To read this article in full, please click here

Software 113

Software Risk 113

CSO Magazine

MAY 29, 2023

Today we call programs that help prevent or identify breaches of trust insider risk management (IRM). In 2019, a CSO article raised the question “ Insider risk management — who’s the boss ?” To read this article in full, please click here

Risk 109

Risk CSO Government 109

Security Boulevard

DECEMBER 12, 2022

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post The Whys and Hows of Cyber Risk Quantification appeared first on Security Boulevard.

Cyber Risk 104

Cyber Risk Risk 104

CSO Magazine

FEBRUARY 28, 2023

Companies rightly see much promise for future revenues and productivity by building and participating in emerging digital ecosystems — but most have not given enough consideration to the risks and threats inherent in such ecosystems.

Risk 106

Risk Cyber threats Cybersecurity 106

Schneier on Security

AUGUST 6, 2020

The NSA has issued an advisory on the risks of location data. Mitigations reduce, but do not eliminate, location tracking risks in mobile devices. Users should be aware of these risks and take action based on their specific situation and risk tolerance. News articles.

Risk 260

Risk Wireless Mobile Cybersecurity 260

GlobalSign

SEPTEMBER 22, 2023

This article provides the best practices for assessing potential vendors to minimize risk exposure.

Cyber Risk 104

Cyber Risk Risk 104

CSO Magazine

NOVEMBER 11, 2021

From a cybersecurity standpoint, organizations are operating in a high-risk world. The ability to assess and manage risk has perhaps never been more important. To read this article in full, please click here (Insider Story)

Risk 125

Risk Telecommunications CISO Data breaches 125

CSO Magazine

APRIL 5, 2022

I don’t know how many times I’ve heard cybersecurity professionals say something like, “Not having multi-factor authentication is a huge risk for our organization.” The real risk is the probability of a ransomware incident, for example, or the leak of personally identifiable information (PII) from a customer database.

Risk 143

Risk Cybersecurity Authentication Ransomware 143

The Hacker News

MAY 23, 2022

Containers revolutionized the development process, acting as a cornerstone for DevOps initiatives, but containers bring complex security risks that are not always obvious. Organizations that don’t mitigate these risks are vulnerable to attack.

Risk 121

Risk 121

CSO Magazine

APRIL 21, 2023

In fact, these changes have led to a CTI subcategory focused on digital risk protection. DRP is broadly defined as, “telemetry, analysis, processes, and technologies used to identify and mitigate risks associated with digital assets.” To read this article in full, please click here CISOs are investing here but challenges remain.

Cyber threats 124

Cyber threats Risk Digital transformation CISO 124

CSO Magazine

MARCH 22, 2022

Cybersecurity and risk expert David Wilkinson has heard some executives put off discussions about risk acceptance, saying they don’t have any appetite or tolerance for risk. Yet there are indicators that many CISOs aren’t having productive conversations around risk acceptance. Otherwise, they’d be unable to function.

Risk 120

Risk CISO Cybersecurity 120

CSO Magazine

SEPTEMBER 6, 2022

In-app browsers can pose significant security risks to businesses, with their tendency to track data a primary concern. This was highlighted in recent research which examined how browsers within apps like Facebook, Instagram and TikTok can be a data privacy risk for iOS users. To read this article in full, please click here

Risk 137

Risk Data privacy Passwords 137

CyberSecurity Insiders

JUNE 6, 2023

AT&T does not adopt or endorse any of the views, positions, or information provided by the author in this article. Numerous risks are inherent in the technologies that all organizations use. This discussion will focus on how GRC, or governance, risk, and compliance can help organizations face and manage the risks that they face.

Technology 85

Technology Risk Government Surveillance 85

Security Boulevard

DECEMBER 11, 2023

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post Moving Beyond the Risk Matrix With Verifiable, Objective CRQ Data | Kovrr blog appeared first on Security Boulevard.

Risk 62

Risk Cyber Risk 62

The Hacker News

NOVEMBER 30, 2023

Wing Security recently announced that basic third-party risk assessment is now available as a free product. But it raises the questions of how SaaS is connected to third-party risk management (TPRM) and what companies should do to ensure a proper SaaS-TPRM process is in place.

Risk 75

Risk 75

Graham Cluley

FEBRUARY 12, 2024

Read more in my article on the Hot for Security blog. A simple-to-avoid security flaw allowed unauthorised parties to track the location of anyone wearing Livall ski and biking helmets, and listen to group conversations.

Risk 113

Risk IoT 113

Security Boulevard

JANUARY 22, 2024

The 2023 data from Enzoic for Active Directory Lite (also known as Enzoic for AD Lite) data from 2023 offers a revealing glimpse into the current state of cybersecurity, highlighting a significant increase in risk factors that lead to data breaches.

Risk 62

Risk Data breaches Cybersecurity Passwords 62

The Hacker News

JULY 12, 2023

However, it also comes with legitimate concerns regarding unauthorized use, including data loss risks and legal consequences. In this article, we will explore the risks associated with AI implementation and discuss measures to minimize damages. Additionally, we will examine regulatory

Artificial Intelligence 92

Artificial Intelligence Risk 92

Security Boulevard

DECEMBER 18, 2023

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post A Journey to Financial Cyber Risk Quantification, Part 2 | Kovrr Blog appeared first on Security Boulevard.

Cyber Risk 57

Cyber Risk Risk 57

Security Boulevard

JANUARY 16, 2024

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post Top 9 Cyber Risk Scenarios That Can Lead to Financial Loss in 2024 | Kovrr Blog appeared first on Security Boulevard.

Cyber Risk 62

Cyber Risk Risk 62

Security Boulevard

DECEMBER 13, 2023

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. The post A Journey to Financial Cyber Risk Quantification, Part 1 | Kovrr Blog appeared first on Security Boulevard.

Cyber Risk 57

Cyber Risk Risk 57

CSO Magazine

APRIL 3, 2023

Mergers and acquisitions (M&A) have the potential to introduce significant cybersecurity risks for organizations. To read this article in full, please click here

Risk 125

Risk Cybersecurity Technology 125

CSO Magazine

APRIL 19, 2023

But the security risks posed by departing staff can be significant. Without secure off-boarding processes, organizations expose themselves to a variety of cybersecurity risks ranging from the innocuously accidental to the maliciously deliberate. To read this article in full, please click here

Risk 96

Risk CISO Cybersecurity 96

CSO Magazine

AUGUST 18, 2021

If you are like 80% of respondents to the Trend Micro’s biannual Cyber Risk Index (CRI) report, you expect to experience a data breach that compromises customer data in the next 12 months. Learn the 7 keys to better risk assessment. | To read this article in full, please click here

Cyber Risk 135

Cyber Risk Risk CSO Data breaches 135

CSO Magazine

FEBRUARY 1, 2023

The two biggest cloud security risks continue to be misconfigurations and vulnerabilities, which are being introduced in greater numbers through software supply chains, according to a report by Sysdig. To read this article in full, please click here

Risk 110

Risk Architecture Software 110

SecureWorld News

JANUARY 31, 2024

Cyber risk is an existential issue for companies of all sizes and in all industries. However, it also exposes companies to additional layers of risk. However, it also exposes companies to additional layers of risk. Real estate portfolios are uniquely exposed to cyber-physical damage risk?

Risk 80

Risk Cyber Insurance Insurance Data breaches 80