article thumbnail

Thinking About the Future of InfoSec (v2022)

Daniel Miessler

The ideas will cover multiple aspects of InfoSec, from organizational structure to technology. At the highest level, I think the big change to InfoSec will be a loss of magic compared to now. HT to Jeremiah Grossman to also being very early to seeing the role of insurance in InfoSec. Insurance companies.

InfoSec 180
article thumbnail

The CPRA: What You Should Know as an InfoSec Professional

SecureWorld News

Cyber insurance (critical). Training for employees (awareness). Privacy training, specifically. Well documented policies and standards for employees (data handling). Enterprise endpoint protection and remediation (anti-malware, anti-virus software). Endpoint encryption for all laptops. Intrusion detection and response.

InfoSec 74
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

The Top 5 Reasons to Use an API Management Platform

Security Affairs

Authentication and Security : APIs may require authentication for access control. Without proper authentication, authorization, and security measures, sensitive data can be exposed, leading to data breaches and privacy violations. Authentication and Authorization : APIs frequently employ token-based authentication (e.g.,

article thumbnail

CISA Order Highlights Persistent Risk at Network Edge

Krebs on Security

The directive applies to any networking devices — such as firewalls, routers and load balancers — that allow remote authentication or administration. “This is reachable pre-authentication, on every SSL VPN appliance,” French vulnerability researcher Charles Fol tweeted. “Patch your #Fortigate.”

Risk 221
article thumbnail

Seven Massachusetts Cities Join Forces to Bolster Cybersecurity Posture

SecureWorld News

Brennan is speaking at SecureWorld Chicago on June 8, tackling the topic of "I Can See Clearly Now, the Threats Are Gone: The State of InfoSec and Threat Intelligence Today." On the plus side, they did mention multi-factor authentication and EDR. This may result in cost savings and better terms of insurance for all participants."

article thumbnail

ROUNDTABLE: Experts react to President Biden’s exec order in the aftermath of Colonial Pipeline hack

The Last Watchdog

This very high-profile caper is part of an extended surge of ransomware attacks, which quintupled globally between the first quarter of 2018 and the fourth quarter of 2020, and is expected to rise 20 percent to 40 percent this year, according to insurance giant Aon. Keatron Evans, principal security researcher, Infosec Institute.

Hacking 205
article thumbnail

Happy 13th Birthday, KrebsOnSecurity!

Krebs on Security

I seem to be doing most of that activity now on Mastodon , which appears to have absorbed most of the infosec refugees from Twitter, and in any case is proving to be a far more useful, civil and constructive place to post such things. For a variety of reasons, I will no longer be sharing these updates on Twitter. A report commissioned by Sen.