Troy Hunt

SEPTEMBER 8, 2022

The first time I ever wrote publicly about a company's security vulnerabilities, my boss came to have a word with me after seeing my name in the news headlines. Troy Hunt takes us on his life journey, ups and downs, explaining how haveIbeenpwned came to be, raising awareness of the world’s poor password and online security habits.

InfoSec 359

InfoSec Password Management Passwords IoT 359

Webroot

FEBRUARY 26, 2024

Welcome to the wild west of the digital world where cyber scammers lurk around every pixelated corner. So, hoist the sails as we cruise through the seven seas of cyber safety. Identifying scams Before we dive headfirst into the cyber safety tips, let’s equip ourselves with the ultimate weapon: knowledge.

Scams 99

Scams VPN Passwords Phishing 99

NetSpi Executives

OCTOBER 27, 2023

Since the launch of our Breach and Attack Simulation (BAS) enhancements in 2022 , we’ve helped companies spanning all sizes and sectors improve their threat detection capabilities and move away from a ‘secure by default’ mindset that has rendered ineffective against the evolving and complex threat landscape.

Penetration Testing 112

Penetration Testing InfoSec Threat Detection Cyber Attacks 112

Centraleyes

APRIL 16, 2024

Cyber Data loss can lead to severe consequences, including financial losses, damage to reputation, and legal repercussions. Beyond being a set of security protocols, data loss prevention policies are a strategic approach that involves identifying, monitoring, and protecting sensitive data throughout its lifecycle.

Encryption 52

Encryption Education Risk Healthcare 52

CyberSecurity Insiders

JUNE 30, 2021

Earlier this week, (ISC)² announced that the DoD approved both the HCISPP and CCSP certifications to its DoD 8570 Approved Baseline Certifications table on the DoD Cyber Exchange website. As last week’s #RansomwareWeek here on the (ISC)² Blog showed, the level of threat is only increasing as ransoms are paid and precedents are set.

Cybersecurity 122

Cybersecurity Healthcare Engineering Government 122

Security Boulevard

FEBRUARY 25, 2022

Microsoft on Multi-Cloud: It’s the New Imperative But Cyberattacks Present Challenges. With its new multi-cloud strategy, Microsoft is stressing security. It’s “the mother of all problems,” Microsoft’s new security chief Charlie Bell said to the Wall Street Journal in an interview. “If brooke.crothers.

Cyber Risk 131

Cyber Risk CISO Technology Software 131

Cisco Security

JUNE 29, 2022

What is it that customers truly want from their security? In today’s uncertain world where new challenges are being thrown at IT teams each day, security must meet many diverse needs. At the end of the day, it’s about keeping the entire business resilient despite the chaos of the cyber world. . Is it simplicity?

Technology 109

Technology CISO Architecture Internet 109

CyberSecurity Insiders

NOVEMBER 4, 2021

This blog was written by an independent guest blogger. Ensuring that customers stay safe from cyber criminals while completing online transactions is of utmost importance in today’s environment. Each year, more and more small businesses fall victim to cyber criminals, and that number is only expected to rise in the future.

Retail 111

Retail eCommerce Cyber Attacks Authentication 111

Anton on Security

DECEMBER 21, 2021

As we discussed in “Achieving Autonomic Security Operations: Reducing toil” (or it’s early version “Kill SOC Toil, Do SOC Eng” ), your Security Operations Center (SOC) can learn a lot from what IT operations learned during the SRE revolution. However, both security operations center practitioners and SREs agree?—?consistency

Engineering 338

Engineering Phishing Technology Ransomware 338

Security Affairs

APRIL 7, 2023

The Microsoft DCU secured a court order in the U.S. Microsoft observed more than 68 ransomware attacks, involving the use of cracked copies of Cobalt Strike, against healthcare organizations in more than 19 countries around the world. Our action is therefore not one and done.” ” concludes the report.

Penetration Testing 82

Penetration Testing Ransomware Malware Hacking 82

Anton on Security

SEPTEMBER 3, 2021

For this, we need to imagine the world without SIEM. Anybody would be free to invent a technology to analyze security telemetry (logs, endpoint traces, traffic) and call it whatever they want. Then you want to analyze the data, come up with conclusions, guide humans to proper security outcomes and occasionally automate the responses.

Technology 214

Technology Threat Detection Marketing Cybersecurity 214

The Last Watchdog

APRIL 5, 2022

Like many organizations and industries, NewsCorp migrated its digital estate to make greater use of the cloud, including leveraging SaaS providers like Google Workspaces to host email infrastructure. Migrating from on-premises infrastructure to the cloud has substantial benefits, including increased efficiency, capabilities, and cost-savings.

Hacking 243

Hacking Passwords Firewall Internet 243

The Last Watchdog

AUGUST 8, 2022

Our technological world is advancing at dizzying speeds. Clearly, it is crucial that any digital twins (or other complex systems) are secured at the highest level. Access security challenges. Will they be able to gain control of all the monitors or other remote devices (in our Internet of Things world) tied to the digital twin?

Artificial Intelligence 214

Artificial Intelligence Cyber Insurance Risk Telecommunications 214

Malwarebytes

MARCH 10, 2021

In a press statement OVH promised “to communicate as transparently as possible on the progress of our analyses and the implementation of solutions” OVH is the largest hosting provider in Europe and the third largest in the world. Data and servers in the cloud. Pros and cons of the cloud.

Backups 128

Backups Cryptocurrency Cyber threats Encryption 128

CyberSecurity Insiders

NOVEMBER 9, 2022

New cloud platform strengthens organizations’ cyber resilience. by making real-world threat simulation easier and more accessible. San Francisco, US, 9 th November 2022 – Picus Security , the pioneer of Breach and Attack Simulation (BAS), today announced the availability of its next-generation security validation technology.

Marketing 91

Marketing Risk Cyber threats Cybersecurity 91

Webroot

MARCH 25, 2022

Backup enables you to keep your data accessible and secure. Our increased reliance on digital files, the rise in cyber attacks, human error and natural disasters are just a few examples of how your data remains highly vulnerable,” says Tyler Moffitt, senior security analyst at Carbonite + Webroot, OpenText Security Solutions.

Backups 105

Backups Small Business Phishing Malware 105

Thales Cloud Protection & Licensing

MAY 31, 2022

Regional privacy but global clouds. With the acceleration of digital transformation and growing cyber threats, one thing is clear: privacy compliance has never been so important, yet so complex to reach. Data are processed and need protection in multiple cloud systems, which each their specificities. Cloud Computing.

Data privacy 71

Data privacy Digital transformation Accountability Data collection 71

McAfee

SEPTEMBER 8, 2021

I’m back at it again with another round of our executive blog series. Q: What are the biggest cyber security issues shaping the public policy dialogue in Washington DC and other capitals around the world? Q: What is the true value cloud security has brought to the government contracting and federal sectors?

Government 64

Government Firewall Ransomware Technology 64

McAfee

NOVEMBER 8, 2021

McAfee Enterprise and FireEye recently conducted a global survey of IT professionals to better understand their cyber readiness, especially during peak times like the holiday season, and the impact the pandemic has had on their business. of the total detected cyber threats. 33% have had their technology and security budgets reduced.

Cyber threats 107

Cyber threats Retail Risk Architecture 107

Jane Frankland

AUGUST 18, 2023

Over the years I’ve attended hundreds of cybersecurity conferences all over the world, and participated as an attendee, speaker, chair, and advisor. In person cybersecurity conferences aren’t just gatherings for tech enthusiasts; they’re the heartbeat of the cybersecurity world. And that’s despite being an introvert!

Cybersecurity 130

Cybersecurity Risk Media Government 130

The Last Watchdog

MAY 2, 2023

An increasingly digitized world means analysts can’t rest. These are some of the most popular tools for automating the vast majority of cybersecurity work: •eXtended Detection and Response: Analyzes endpoints, clouds and other silos for sneaky threat actors that hide between perimeter and internal security.

Cybersecurity 202

Cybersecurity Firewall Risk Cyber Risk 202

CyberSecurity Insiders

MAY 30, 2023

Introduction Today you look at the Global/Multi-site Enterprise Security Architecture of an organization and see a myriad of concerns. Increased levels of complexity, difficulties managing multiple third parties, difficulties implementing consistent levels of security, and so on.

Architecture 108

Architecture Threat Detection Technology Internet 108

CyberSecurity Insiders

MARCH 20, 2023

This month, we asked women in the (ISC)² Blog Volunteers group to weigh in on a few questions from their perspective as a female working in cybersecurity. The fact that I am a woman security professional has not impeded my ability to do my job, and in fact, it's has been seen as a positive. Find your niche and keep at it.

Cybersecurity 98

Cybersecurity Education Architecture Marketing 98

Security Boulevard

JUNE 23, 2022

68% of IT and security professionals plan to use zero trust for device security; 42% actually do. Some risks specifically affecting IoT include : Built-in vulnerabilities : IoT devices are often shipped specifically for consumer use, without enterprise-grade encryption or security controls.

IoT 98

IoT Social Engineering Firmware Risk 98

Thales Cloud Protection & Licensing

JUNE 16, 2022

Advancing Trust in a Digital World. Considering the increased cybersecurity risks introduced by digital technologies, what should society do to prevent cyber-attacks, reduce damage, and strengthen trust? Furthermore, effective security necessitates skilled personnel, which is now impeded by a cybersecurity skillset deficit.

Encryption 71

Encryption Artificial Intelligence Architecture Digital transformation 71

Centraleyes

FEBRUARY 8, 2024

EDR is a category of tools designed to continuously monitor the intricate web of cyber threats on endpoints across a network. These endpoints, from individual workstations to connected devices, became the frontlines in the battle against evolving cyber threats. Endpoint Detection and Response: An Overview What is EDR?

Antivirus 52

Antivirus Cyber threats Malware Threat Detection 52

Security Boulevard

JULY 6, 2022

Did the Cloud Provide Safe Haven in the Ukraine-Russia Cyber War? Microsoft begins the report by pointing out that it was one of the first to detect the start of the cyber war. But Russian cyber tactics in the war have differed from those in the NotPetya attack against Ukraine in 2017. Disperse to cloud. “We

Digital transformation 52

Digital transformation Government Artificial Intelligence Malware 52

CyberSecurity Insiders

SEPTEMBER 8, 2021

The file encrypting malware group that is suspected to be operating from Russia has reinstated its “Happy Blog” and started posting stolen data details that were siphoned from victims who did not pay the demanded ransom of $11 million. After going for a brief hiatus, REvil aka Sodinokibi Ransomware gang has re-appeared on the dark web.

Ransomware 128

Ransomware Encryption Education Cyber threats 128

Security Boulevard

FEBRUARY 21, 2024

Unfortunately, API attacks are increasing as vectors for security incidents. In this blog, we will explain the unique data security challenges for Telcos and three ways how both Thales and Red Hat can help them protect against future API attacks. These large subscriber bases in turn generate massive data volumes.

Encryption 64

Encryption Mobile Government Consumer Protection 64

Anton on Security

SEPTEMBER 7, 2023

Detection Engineering is Painful — and It Shouldn’t Be (Part 1) This blog series was written jointly with Amine Besson, Principal Cyber Engineer, Behemoth CyberDefence and one more anonymous collaborator. It is a challenging field that requires a deep understanding of both security and software engineering.

Engineering 113

Engineering Software Malware 113

Security Boulevard

AUGUST 30, 2021

<a href='/blog?tag=Endpoint tag=Endpoint Protection'>Endpoint Protection</a> <a href='/blog?tag=Data tag=Data Loss Prevention'>Data Loss Prevention</a> <a href='/blog?tag=File tag=File Transfers'>File Transfers</a> <a href='/blog?tag=Advanced

Social Engineering 101

Social Engineering Cybersecurity Unstructured Data Engineering 101

Security Boulevard

FEBRUARY 10, 2022

by securing their devices, keeping programs updated, and following good security practices. However, recent attacks by advanced persistent threat (APT) groups have shown these longstanding security practices are no longer sufficient. The Cloud Era. However, the shift to cloud computing was not entirely without drawbacks.

Malware 96

Malware Software Ransomware Adware 96

eSecurity Planet

AUGUST 5, 2021

Two of the largest government security agencies are laying out the key cyberthreats to Kubernetes, the popular platform for orchestrating and managing containers, and ways to harden the open-source tool against attacks. In addition to resource theft, cyber actors may also target Kubernetes to cause a denial of service.”

Risk 109

Risk Encryption Cybersecurity Engineering 109

eSecurity Planet

DECEMBER 10, 2021

A critical vulnerability in the open-source logging software Apache Log4j 2 is fueling a chaotic race in the cybersecurity world, with the Apache Software Foundation (ASF) issuing an emergency security update as bad actors searched for vulnerable servers. The Apache Foundation released an emergency patch as part of the 2.15.0

Risk 134

Risk Software Cybersecurity Firewall 134

Centraleyes

MARCH 25, 2024

Let’s discuss an acronym reshaping the business world: Vendor Risk Management , or VRM. In our interconnected world, our security is only as strong as our weakest link, and the third-party vendors we choose are essential links in our business chains.

Risk 111

Risk Data collection Architecture Government 111

CyberSecurity Insiders

OCTOBER 22, 2021

As the industry’s premier global cybersecurity intelligence event, Detect LIVE is where security executives, practitioners, threat analysts, and researchers from all over the world share their insights and expertise on how they use intelligence-driven detection and response to combat surging adversaries. Blog: [link].

Artificial Intelligence 59

Artificial Intelligence Big data Cyber threats Cybersecurity 59

Duo's Security Blog

FEBRUARY 25, 2021

In this report, we walk through a real-world case study of how a socially engineered phishing attack worked on a popular company, and show you some steps on how it could have been prevented. How can social engineering, targeted phishing and lateral movement lead to a security breach? Phishing has raised hell ever since.

Phishing 72

Phishing Social Engineering Engineering Authentication 72