SecureWorld News

JANUARY 26, 2021

Security researchers are some of the unsung heroes within the cybersecurity field. Google's Threat Analysis Group (TAG) has been working for several months to try to identify who is behind an ongoing campaign targeting security researchers, specifically those who work on vulnerability research and development at a variety of organizations.

Social Engineering 92

Social Engineering Engineering Accountability Malware 92

Notice Bored

OCTOBER 14, 2021

"Information transfer" is another ambiguous, potentially misleading title for a policy, even if it includes "information security". Transmission of information through broadcasting, training and awareness activities, reporting, policies, documentation, seminars, publications, blogs etc.,

Information Security 56

Information Security Risk Media Encryption 56

NopSec

JUNE 20, 2013

Yesterday, I published the first blog post on mapping SANS 20 critical security controls to Unified VRM. You can find the blog post here – Achieving SANS 20 Critical Security Controls with Unified VRM. This task can be performed using Unified VRM internal security assessment module.

Software 40

Software Social Engineering Engineering Phishing 40

Digital Shadows

AUGUST 17, 2021

We’re talking about the email attack variety. But, never mind the dozens of other reports and white papers about phishing that come out every year from security industry leaders, let’s take a look at the 2021 Verizon DBIR. What is Phish(ing)? No, not the band , unless you’re really into jam bands.

Phishing 52

Phishing Accountability Social Engineering Mobile 52

Pen Test Partners

SEPTEMBER 13, 2023

The Council stated that the changes represent their determination to “continue to meet the security needs of the payment industry, promote security as a continuous process, add flexibility for different methodologies, and enhance validation methods”. In March 2022, the PCI Council released the long-anticipated v4.0.

Authentication 52

Authentication Passwords Media Encryption 52

SecureList

FEBRUARY 25, 2021

Google TAG has recently published a post about a campaign by Lazarus targeting security researchers. The group made use of COVID-19 themes in its spear-phishing emails, embellishing them with personal information gathered using publicly available sources. Phishing email with links to malicious documents.

Malware 132

Malware Phishing Passwords Encryption 132

Privacy and Cybersecurity Law

JANUARY 18, 2021

Back then, major cyber and data security breaches were mentioned as prime candidates for mega fines approaching the 4% maximum. The Regulatory Action Policy (RAP) seen in action and ICO’s approach to fines and the calculation of quantum. Share via email. Receive our latest blog posts by email. Share on Facebook.

Data breaches 52

Data breaches Risk Cybersecurity 52

NopSec

JULY 18, 2017

CIS 20 Security Controls represent one of the reference frameworks of the most critical controls an organization can implement to establish a well balanced security program to safeguard confidentiality, integrity and availability of information. With that in mind, in this blog post we’re covering 13 out of the 20 controls.

Wireless 40

Wireless Penetration Testing Software Authentication 40

Jane Frankland

OCTOBER 17, 2023

In this blog, I’ll be sharing my insights on what you can do to ensure your employees protect themselves, their data, and your organisation’s network and reputation. I’ll be focusing on secure web browsing as it’s an important first step. So, let’s begin by examining what secure web browsing is and why it matters.

Security Awareness 124

Security Awareness Education Cybersecurity Data breaches 124

SecureList

DECEMBER 11, 2023

Over the past twelve months, this abbreviation has resonated across innumerable headlines, business surveys and tech reports, firmly securing a position as the Collins English Dictionary’s 2023 Word of the Year. As the fast-growing technology evolves, it has become a matter of policy making and regulation.

Cybersecurity 93

Cybersecurity Artificial Intelligence Technology Risk 93

Duo's Security Blog

AUGUST 15, 2023

At any given point in time, the Duo Care teams are having conversations with customers that span the spectrum of security topics. but as you read in previous blogs, Duo has been upping its game too. What have we been most excited to talk to our customers about recently?

Engineering 52

Engineering Social Engineering Accountability Authentication 52

Duo's Security Blog

MAY 17, 2023

Until then your company is missing out on many new security features, improved user experience, and various other features only available with Universal Prompt. Now, those environments can move to the Duo Universal Prompt and enjoy many security and experience benefits. What is Duo Universal Prompt?

Authentication 97

Authentication Engineering Education Phishing 97

Cisco Security

AUGUST 29, 2022

In part one of this issue of our Black Hat USA NOC (Network Operations Center) blog, you will find: Adapt and Overcome. Port Security, by Ryan MacLennan, Ian Redden and Paul Fiddler. I am proud of the Cisco Meraki and Secure team members and our NOC partners. Building the Hacker Summer Camp network, by Evan Basta. Full stop.

Engineering 84

Engineering Wireless Malware DNS 84

Notice Bored

JULY 9, 2022

I was wondering whether [the information security policies we have been customising for them] might be a little too in depth for our little start-up. Infosec is quite involved and - as you'll surely appreciate from this very blog - I tend to focus and elaborate on the complexities, writing profusely on topics that I enjoy.

Mobile 113

Mobile InfoSec Media Risk 113

ForAllSecure

JANUARY 27, 2021

Vamosi: Today, John has taken his juvenile curiosity in breaking things down to become a security researcher with Huntress Labs. Hammond: As a security researcher, I am hierarchically in their Threat OPs department. What’s a good entry point for starting CTFs or information security for that matter? Vamosi: Wait.

Computers and Electronics 52

Computers and Electronics InfoSec Hacking Education 52

ForAllSecure

JANUARY 27, 2021

Vamosi: Today, John has taken his juvenile curiosity in breaking things down to become a security researcher with Huntress Labs. Hammond: As a security researcher, I am hierarchically in their Threat OPs department. What’s a good entry point for starting CTFs or information security for that matter? Vamosi: Wait.

Computers and Electronics 52

Computers and Electronics InfoSec Hacking Education 52