Security Boulevard

MARCH 23, 2022

Using the Easy Button™ Last month, we posted our blog explaining the staffing shortage in the information security (InfoSec) industry. The post Fixing the Shortage of Information Security Professionals appeared first on Security Boulevard. It can often take three to six months to fill.

Information Security 52

Information Security InfoSec Social Engineering Engineering 52

Security Boulevard

JUNE 2, 2021

If organisations are to adequately protect their sensitive data, they need to understand the three core components of information security: threat, vulnerability and risk. Those unfamiliar with the technicalities of information security might assume that these terms are interchangeable, but that’s not true.

Information Security 71

Information Security Risk Software 71

Troy Hunt

MAY 31, 2018

At the gala dinner last night, without any warning beforehand, I somehow walked away with this: #AusCERT2018 Award for Information Security Excellence goes to @troyhunt @AusCERT 2018 Gala Dinner pic.twitter.com/9lxmwX0tdR — ValdemarJakobsen???? jamver) May 31, 2018. Yes, that guy is wearing a cape, it was a Star Wars thing.).

Information Security 138

Information Security Data breaches Hacking 138

Heimadal Security

APRIL 7, 2021

The post What Is Residual Risk in Information Security? appeared first on Heimdal Security Blog. Cyberattacks have been happening for decades, but as we have become more dependent on digital technology and infrastructure and therefore create more value in […].

Information Security 80

Information Security Risk Cyber Attacks Technology 80

Security Boulevard

JANUARY 10, 2022

The post Cybersecurity & information security resources I used in 2021 appeared first on Security Boulevard. This list includes virtual labs, hands-on training, and the potential to earn certificates. This thread includes free & paid resources.

Information Security 81

Information Security Cybersecurity 81

Heimadal Security

JULY 30, 2021

Nowadays most information is stored digitally on a network, computer, server, or in the cloud, allowing criminals to easily obtain access to important information, therefore it is important to understand what information security is and its importance. What Is Information Security (InfoSec)? What Is It?

InfoSec 45

InfoSec Information Security Cybersecurity 45

Security Boulevard

DECEMBER 9, 2021

Organisations that are looking to improve their information security posture are probably familiar with ISO 27001. It’s the international standard that describes best practice for an ISMS (information security management system), and it provides a framework for implementing appropriate processes and technologies.

Information Security 59

Information Security Risk Software Technology 59

Notice Bored

OCTOBER 10, 2021

of the forthcoming new 3rd edition of ISO/IEC 27002 recommends two complementary types of information security policies. Firstly: At the highest level, organizations should define an “information security policy” which is approved by top management and which sets out the organization’s approach to managing its information security.

Information Security 56

Information Security 56

Notice Bored

OCTOBER 18, 2021

I'm intrigued by the title of this topic-specific policy from the [draft] 3rd edition of ISO/IEC 27002 , being the only one of eleven example titles in the standard that explicitly states "information security". I ask myself why? Hmmmm, yes there are some specifics but I'm not entirely convinced of a need for a distinct, unique policy.

Information Security 56

Information Security InfoSec 56

SC Magazine

MAY 3, 2021

Yu has contributed to cybersecurity models in his own right, having developed the Cyber Defense Matrix that was described by one tech leader as the “must-have playbook in modern information security programs.” Yu said in a blog he penned upon joining JupiterOne that he actually didn’t want to become a CISO.

Information Security 91

Information Security CISO Financial Services Cybersecurity 91

Security Boulevard

NOVEMBER 2, 2022

Dear blog readers, Do you know a lot about information security cybercrime research OSINT and threat intelligence gathering including cyber threat actors research? Who is Dancho Danchev and what is Dancho Danchev's Blog? The post Who Wants to Become a Guest Blogger At This Blog? Stay tuned!

Cybercrime 52

Cybercrime InfoSec Cyber threats Accountability 52

Security Affairs

JUNE 22, 2022

I’m proud to announce that SecurityAffairs was awarded as the Best European Personal Cybersecurity Blog 2022 at European Cybersecurity Blogger Awards 2022. Security affairs has been voted for the third consecutive year as the Best European Personal Cybersecurity Blog 2022 at European Cybersecurity Blogger Awards 2022.

Cybersecurity 71

Cybersecurity Hacking Information Security Malware 71

Spinone

OCTOBER 10, 2019

The best way to stay up-to-date with the recent trends is by reading the top cybersecurity blogs. Here’s our list of the best cybersecurity blogs to read and follow. Securing Tomorrow SecuringTomorrow is a blog by McAfee, one of the biggest security software providers.

Cybersecurity 56

Cybersecurity IoT Antivirus Education 56

Troy Hunt

JUNE 8, 2018

But somehow, I wiggled my way into The European Security Blogger Awards and before even having a chance to come down off the high that was last week's Award for Information Security Excellence at the AusCERT conference in Australia , this happened: @troyhunt hey mate, you just won the EU security blogger of the year.

Technology 135

Technology Information Security 135

Security Affairs

MAY 4, 2020

Hackers are conducting a mass-scanning the Internet for vulnerable Salt installs that could allow them to hack the organizations, the last victim is the Ghost blogging platform. A few hours later another security incident was reported by the media, ZDNet reported that the Node.js-based Pierluigi Paganini.

Internet 112

Internet Internet Hacking Advertising 112

Graham Cluley

MARCH 6, 2024

Ukraine claims its hackers have gained possession of "the information security and encryption software" used by Russia's Ministry of Defence , as well as secret documents, reports, and instructions exchanged between over 2,000 units of Russia's security services. Read more in my article on the Hot for Security blog.

Encryption 94

Encryption Hacking Information Security Software 94

Thales Cloud Protection & Licensing

DECEMBER 18, 2018

Many years ago, a board member said to me, “We’ve employed you to do information security, so why do we have to do anything?” Instead we will see organisations start proactively approaching information security experts for actionable advice and guidance. This was fairly typical.

Information Security 75

Information Security CISO Risk Technology 75

Security Boulevard

APRIL 11, 2024

In 2024, information security is a major concern that will never go away totally. ISO 27001 is a globally recognized standard for information security management systems (ISMS). It offers organizations a framework for implementing a systematic approach to controlling information security threats.

Information Security 64

Information Security Risk Government 64

Heimadal Security

APRIL 3, 2024

This document provides a structured approach to establishing and maintaining robust information security measures, tailored to meet the specific needs of each organization while complying with relevant legal and federal guidelines.

Information Security 98

Information Security 98

Heimadal Security

NOVEMBER 3, 2023

ISO 27001, sometimes referred to as ISO/IEC 27001 is an international standard that addresses organizational information security.

Data privacy 105

Data privacy Information Security Cybersecurity 105

Cisco Security

FEBRUARY 16, 2024

Since the European Union (EU) signed the second version of the Network and Information Security (NIS2) Directive in December 2022, there has been a real frenzy all around Europe about it. NIS2 is now… Read more on Cisco Blogs The European Union is mandating industrial organizations to implement stronger cybersecurity measures.

Information Security 82

Information Security Cybersecurity Engineering 82

Security Boulevard

APRIL 25, 2024

In this era of unparalleled agility and scalability, data-centric security can offer transformational opportunities for Chief Information Security Officers (CISOs) to improve data protection, compliance, and operational efficiencies, thereby strengthening customer trust.

CISO 64

CISO Information Security Data breaches 64

PCI perspectives

SEPTEMBER 5, 2023

Welcome PCI Pal, a new Principal Participating Organization (PPO) at the PCI Security Standards Council! In this special spotlight edition of our PCI Perspectives Blog, PCI Pal’s Chief Information Security Officer Geoff Forsyth introduces us to his company and how they are helping to shape the future of payment security.

Information Security 101

Information Security 101

Security Boulevard

NOVEMBER 2, 2022

In the rapidly evolving world of information security, attack vectors, and cyberattacks, there is a. The post Preventing Hyperjacking in a virtual environment appeared first on Entrust Blog. The post Preventing Hyperjacking in a virtual environment appeared first on Security Boulevard.

Information Security 124

Information Security Encryption 124

Security Boulevard

JULY 15, 2021

As DevOps are gaining more influence on security related decisions, the information security staff has to do more than block attacks. The post Five Common Pitfalls in Application Protection appeared first on Radware Blog. The post Five Common Pitfalls in Application Protection appeared first on Security Boulevard.

Information Security 145

Information Security CISO 145

Krebs on Security

NOVEMBER 2, 2021

” In the first week of September, Groove posted on its darknet blog nearly 500,000 login credentials for customers of Fortinet VPN products, usernames and passwords that could be used to remotely connect to vulnerable systems. Sometime in the last week, Groove’s darknet blog disappeared. Maybe sell it? government interests.

Ransomware 256

Ransomware Cybercrime VPN Media 256

Heimadal Security

SEPTEMBER 11, 2023

Chief Information Security Officers (CISOs) bear the responsibility of safeguarding their organizations against an ever-evolving array of cyber threats. However, implementing PAM solutions involves navigating multifaceted risks and intricacies that demand the unwavering attention of these senior security executives.

CISO 105

CISO Risk Cyber threats Information Security 105

Security Boulevard

FEBRUARY 25, 2022

Information security is often considered in terms of cyber threats, such as criminal hacking and fraud, but it’s just as much about physical and environmental risks. ISO 27001, the international standard for information security, contains a framework for addressing these risks. Physical Security Perimeter Annex A.11

Cyber threats 104

Cyber threats Information Security Software Risk 104

Security Boulevard

DECEMBER 4, 2023

This study highlighted the difficulties Chief Information Security Officers (CISOs) encounter during cyber attacks. This blog […] The post 75% Organizations Struggle with Recurring Cyber Attacks appeared first on Kratikal Blogs.

Cyber Attacks 52

Cyber Attacks CISO Risk Technology 52

Heimadal Security

FEBRUARY 15, 2023

Originating in the military, OPSEC became a popular practice in the private sector as well, helping organizations to protect customer data, address cyberespionage, and information security. OPSEC […] The post What Is OPSEC: Operational Security Explained appeared first on Heimdal Security Blog.

Information Security 105

Information Security Risk Cybersecurity 105

Security Affairs

MAY 3, 2023

” said Meta Chief Information Security Officer Guy Rosen. The rapid evolution of generative AI space is attracting threat actors, for this reason, Meta recommends being vigilant on the evolution of the threat landscape. “ChatGPT is the new crypto.”

Malware 94

Malware Education Accountability Media 94

Heimadal Security

DECEMBER 22, 2021

Security experts, researchers, and cyber enthusiasts abound on Twitter, eager to share their ideas, news, and research on information security, industry best practices, and the most recent dangers. The post The Best Twitter Cybersecurity Accounts You Should Follow [Updated 2021] appeared first on Heimdal Security Blog.

Accountability 119

Accountability Cybersecurity Information Security 119

Heimadal Security

NOVEMBER 17, 2023

When it comes to information security, ISO 27001 is of paramount importance. As CISOs and IT administrators, you’re likely familiar with its significance. However, the journey from understanding to effectively implementing ISO 27001 controls is not without challenges.

CISO 75

CISO Information Security 75

PCI perspectives

JULY 6, 2021

Over time, she has been part of the diversification of her company’s Information Security department, which is now 40 percent women. In this edition of our blog, Lacey explains that while gender diversity and leadership has improved in recent years, there is still more to be done for true equality in the payments space.

Information Security 125

Information Security 125

Heimadal Security

JUNE 24, 2022

Nowadays, the majority of chief information security officers (CISOs) are most concerned about ransomware, which has emerged as one of the biggest security threats. appeared first on Heimdal Security Blog. Ransomware threat actors have […]. The post How to Mitigate Ransomware?

Ransomware 105

Ransomware CISO Information Security Cybersecurity 105

Krebs on Security

JANUARY 24, 2023

Inspired by that takedown, KrebsOnSecurity followed clues from the RSOCKS botnet master’s identity on the cybercrime forums to Emelyantsev’s personal blog , where he went by the name Denis Kloster. “Thanks to you, we are now developing in the field of information security and anonymity! . Kloster’s blog enthused. “We

Cybercrime 220

Cybercrime Advertising IoT Malware 220

Heimadal Security

FEBRUARY 18, 2022

In information security and programming, a buffer overflow, also known as a buffer overrun, is a software coding vulnerability or error that cybercriminals can abuse to obtain unauthorized access to a company’s system. appeared first on Heimdal Security Blog. The post What Is Buffer Overflow?

Software 105

Software Information Security Cybersecurity 105