Duo's Security Blog

OCTOBER 4, 2023

Updating software Cisco Duo is all about cybersecurity, so every week we’re going to publish a blog focused on those respective topics. No matter how many letters, numbers, or special characters you give them and no matter how many times you change them, passwords are still @N0T_FUN! Using strong passwords and a password manager 2.

Password Management 113

Password Management Passwords Authentication Social Engineering 113

The Last Watchdog

JANUARY 24, 2022

Using supervised learning, this finds relationships between input and output variables; for example a person’s weight based on known height. The companies deploying AI in order to free-up their employees are reaping short-term productivity gains. Bottom-up has machines learning how to make ethical decisions by observing human behavior.

Cybersecurity 250

Cybersecurity Artificial Intelligence Marketing 250

The Last Watchdog

MAY 2, 2023

The rising complexity and prevalence of cybersecurity threats are making experts anxious. Automation could alleviate the burden on IT teams and cybersecurity professionals by shouldering some monotonous, time-consuming tasks. These feelings are a side effect of cybersecurity burnout. Classify threat data.

Cybersecurity 202

Cybersecurity Firewall Risk Cyber Risk 202

Thales Cloud Protection & Licensing

OCTOBER 2, 2018

This October marks the 15 th annual National Cybersecurity Awareness Month (NCSAM) – an initiative to raise awareness around the importance of cybersecurity. 8-12): Millions of Rewarding Jobs: Educating for a Career in Cybersecurity. Please feel free to leave me a comment below. Week 2 (Oct. Week 3 (Oct.

Cybersecurity 70

Cybersecurity Education Risk 70

Centraleyes

MAY 13, 2024

Decision-makers often grapple with the challenge of seeing cybersecurity not merely as a protective measure but as a revenue-generating asset. The intangible nature of cybersecurity measures adds complexity to this perception, making it challenging to quantify the immediate financial returns.

Cyber threats 52

Cyber threats Cybersecurity Risk Technology 52

BH Consulting

APRIL 18, 2024

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Cybersecurity so often involves reacting to what’s happened, but it’s always worth keeping one eye on what’s coming next. ENISA, the EU’s cybersecurity agency, forecasts that supply chain attacks are the top emerging threat.

Artificial Intelligence 69

Artificial Intelligence CISO Cybersecurity Data breaches 69

Centraleyes

JANUARY 1, 2024

The application of Artificial Intelligence in GRC integration and cybersecurity holds immense promise. The Role of AI in Governance, Risk, and Compliance AI technologies, such as machine learning, natural language processing, and data analytics, are revolutionizing how organizations approach GRC and cybersecurity.

Artificial Intelligence 52

Artificial Intelligence Risk Government Technology 52

Centraleyes

JANUARY 21, 2024

The emergence of NIS2 alongside GDPR stems from the acknowledgment that while data protection is vital, it represents just one aspect of cybersecurity. As a global trailblazer in information security and data protection regulation, the EU continues to lead the way in comprehensive cybersecurity standards.

Cybersecurity 110

Cybersecurity Energy and Utilities Cyber threats Risk 110

Thales Cloud Protection & Licensing

OCTOBER 16, 2018

This October marks the 15 th year of Cybersecurity Awareness Month. While we in the industry know that cybersecurity is a 365 day a year commitment, I’m happy to use October as the platform to remind small and medium sized businesses (SMBs) what they could and should be doing to keep their company, employees and customer data safe.

Cybersecurity 76

Cybersecurity Banking Encryption Accountability 76

BH Consulting

MAY 15, 2024

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Verizon has a summary of the findings complete with at-a-glance graphics (free registration required). Microsoft followed this with a blog detailing six actions the company will take as part of its Secure Future Initiative.

Data breaches 52

Data breaches Phishing Ransomware Data privacy 52

Malwarebytes

JANUARY 31, 2024

From SpyCloud’s blog: “a small number of individual breaches totaling a large number of records – approximately 1.6 As Troy Hunt of HaveIBeenPwned pointed out on his blog, there is a data breach “personal stash” ecosystem. That leaves a lot of new records. But it does nothing to enforce that restriction.

Data breaches 117

Data breaches Identity Theft Passwords Internet 117

Centraleyes

MARCH 14, 2024

However, in response to recent developments in information technology, including the release of NIST’s AI Risk Management Framework (AI RMF) and the initiation of an update to NIST’s Cybersecurity Framework (CSF) to Version 2.0, The National Institute of Standards and Technology (NIST) plans to update the Privacy Framework to Version 1.1.

Government 52

Government Risk Artificial Intelligence Cybersecurity 52

Jane Frankland

APRIL 17, 2024

It’s about creating a digital stronghold where information is both free-flowing, frictionless, and secure. This makes sense, especially considering the relationship between trust, digital transformations and cybersecurity. Here’s the hard truth: Maintaining trust isn’t just an option; it’s a necessity.

Identity Theft 204

Identity Theft Digital transformation Technology Risk 204

Security Boulevard

JANUARY 10, 2022

2021 was a year of learning and productivity, and 2022 will be no different. I have improved my Twitter thread that focused on cybersecurity learning resources. This thread includes free & paid resources. This list includes virtual labs, hands-on training, and the potential to earn certificates.

Information Security 81

Information Security Cybersecurity 81

Centraleyes

MARCH 18, 2024

When the guys at the National Institute of Standards and Technology (NIST) released the inaugural Cybersecurity Framework in February 2014, it did not include a batch of questions that were almost certainly on their minds but not in the framework. It became the go-to framework for cybersecurity planning. The official NIST CSF 2.0

Cybersecurity 59

Cybersecurity Government Risk Technology 59

Centraleyes

MARCH 12, 2024

In cybersecurity, audit management involves assessing the effectiveness of security measures, identifying vulnerabilities, and ensuring compliance with industry standards and regulations. Compliance: Objective: Ensure that the organization adheres to relevant laws, regulations, and internal policies governing cybersecurity practices.

Risk 52

Risk Cybersecurity Government Firewall 52

Centraleyes

JANUARY 18, 2024

In the next section of this blog, we’ll examine the fundamental principles of effective risk management, providing a comprehensive third-party due diligence checklist to aid in recognizing, measuring, and mitigating the risks linked to external partnerships. Trust : Building trust is foundational in any successful partnership.

Risk 52

Risk Insurance Cyber Risk Technology 52

Webroot

JUNE 2, 2022

If you’re the parent of a gamer, or if you’re a gamer yourself, it’s important to learn about the risks. Unfortunately, hackers realize this and use the lure of free games to infect people with malware. Many gamers are unaware of the cybersecurity risks that they face. Cybersecurity tips for gamers. Account takeovers.

Cyber threats 99

Cyber threats Social Engineering Accountability Malware 99

Centraleyes

MAY 5, 2024

The Promise of Automated Risk Assessments Risk management automation uses automated risk assessment tools to orchestrate and automate the data collection process, analysis, and ongoing remediation of cybersecurity controls according to a selected risk framework during a risk assessment.

Risk 52

Risk Data collection Cyber Risk Cybersecurity 52

Centraleyes

MARCH 21, 2024

Unlike other industries, hackers know that healthcare firms are more susceptible to extortion tactics, given the urgent nature of patient care and the willingness of victims to pay ransomware charges to restore access to vital systems. But there’s more money for the hackers than the ransomware payments. What Should Keep You Up at Night?

Healthcare 52

Healthcare Risk Insurance Ransomware 52

Centraleyes

MARCH 25, 2024

Centraleyes stands out for its real-time risk management capabilities, making it a top choice for organizations seeking enhanced cybersecurity, efficient risk mitigation , and resilient business operations. It is a strong contender for organizations seeking continuous monitoring of vendor risk and cybersecurity tool effectiveness.

Risk 111

Risk Data collection Architecture Government 111

Centraleyes

FEBRUARY 12, 2024

This game-changing SEC cybersecurity disclosure rule now makes it mandatory for public companies to lay bare “material” cybersecurity incidents within four days of determining their materiality. In addition, details related to cybersecurity risk management, strategies, and governance must be disclosed.

Cybersecurity 52

Cybersecurity Risk Government Insurance 52

Herjavec Group

MARCH 7, 2022

In last year’s Cybersecurity Conversations Report , we discussed what the massive digital transformation resulting from 2020 meant for enterprise cybersecurity. Last year I went on record predicting 2021 to be the most profound year in cybersecurity history. We must learn to be effective and productive in the chaos.

InfoSec 98

InfoSec Digital transformation Cybersecurity Cyber Attacks 98

Centraleyes

FEBRUARY 13, 2024

Categorizing risks as high, medium, or low has been the go-to method for organizations seeking to prioritize their cybersecurity efforts. We’ll explore the CRQ method and illuminate its potential for enhancing cybersecurity postures. Let’s take this issue one step further. Ten Risks in a Bed Remember the nursery rhyme?

Risk 52

Risk Cyber Risk Cybersecurity Penetration Testing 52

Centraleyes

FEBRUARY 20, 2024

Engage with legal counsel experienced in cybersecurity and data privacy to navigate the legal complexities. Engage Cybersecurity Experts Seek the expertise of cybersecurity professionals to assess and remediate vulnerabilities. Understanding where organizations commonly falter is crucial for effective response and recovery.

Data breaches 52

Data breaches Risk Cybersecurity Education 52

BH Consulting

MARCH 21, 2024

Curated advice, guidance, learning and trends in cybersecurity and privacy, as chosen by our consultants. Creeping cyber risk grabbing global headlines Ransomware keeps reminding us of the strong connection between a cybersecurity incident and financial loss. A recurring theme throughout this year’s edition is collaboration.

Cyber threats 69

Cyber threats Ransomware Healthcare Risk 69

Centraleyes

APRIL 16, 2024

The Evolution of DLP: From Perimeter Defense to Comprehensive Strategy Traditionally, cybersecurity focused on building strong perimeter defenses. The stakes for safeguarding sensitive information have never been higher. Cyber Data loss can lead to severe consequences, including financial losses, damage to reputation, and legal repercussions.

Encryption 52

Encryption Education Risk Healthcare 52

eSecurity Planet

FEBRUARY 12, 2024

Orca Security published a blog post about the vulnerabilities — its researchers discovered and reported the issues in Fall 2023, and Microsoft quickly patched them. This week saw some repeat products from previous vulnerability recaps, such as Ivanti Policy Secure and JetBrains TeamCity servers. versions 7.4.0 through 7.4.2): 7.4.3

VPN 104

VPN Authentication Software Firewall 104

Centraleyes

MAY 6, 2024

Initiatives NAIC Model Bulletin In December 2023, the NAIC’s Innovation, Cybersecurity, and Technology (H) Committee adopted the Model Bulletin on the Use of Algorithms, Predictive Models, and Artificial Intelligence Systems by Insurers. Every few decades, the world experiences a technological disruption that changes our lives.

Insurance 52

Insurance Artificial Intelligence Cyber Insurance Marketing 52

Duo's Security Blog

AUGUST 8, 2022

We shine a light on this partnership in our latest La-Z-Boy case study , examining the features that set Duo apart from other cybersecurity solutions. And if you'd like to learn more about how Duo Security can help you on your MFA journey, sign up for a free trial today!

Retail 97

Retail Manufacturing Authentication Hacking 97

Centraleyes

APRIL 18, 2024

Audit evidence lies at the heart of cybersecurity audits and assessments, providing tangible proof of an organization’s adherence to cybersecurity measures. Understanding the Role of Audits Cybersecurity audits serve as a systematic examination of an organization’s information systems, policies, and practices.

Risk 52

Risk Penetration Testing Encryption Cybersecurity 52

Krebs on Security

APRIL 20, 2021

Mine was learning that KrebsOnSecurity is listed as a restricted competitor by Gartner Inc. Rather, KrebsOnSecurity has sought to spread cybersecurity awareness primarily by highlighting the “who” of cybercrime — stories told from the perspectives of both attackers and victims.

Marketing 226

Marketing Technology Software Cybercrime 226

CyberSecurity Insiders

JANUARY 5, 2022

This blog was written by an independent guest blogger. Experts predict that the healthcare industry will face two to three times more cyberattacks than other industries, making cybersecurity an essential aspect of modern medicine. Their tech uses machine learning algorithms paired with computer vision to compare imagery.

Healthcare 136

Healthcare Artificial Intelligence Computers and Electronics Technology 136

Pentester Academy

MARCH 29, 2023

Penetration testing is an integral part of cybersecurity, so it’s no surprise that it’s a rapidly growing role. How Does an eJPT Certification Help You A Junior Penetration Tester is an entry-level role on a cybersecurity team that searches for vulnerabilities and attempts to exploit them as a preventative cybersecurity measure.

Penetration Testing 52

Penetration Testing Cybersecurity Accountability Technology 52

Centraleyes

FEBRUARY 8, 2024

EDR solutions leverage threat intelligence, machine learning, and advanced file analysis for advanced threat detection. The Growing Importance of EDR in the Cybersecurity Landscape As cyber threats become more sophisticated and the number of endpoints connected to networks rises, the significance of EDR is amplified.

Antivirus 52

Antivirus Cyber threats Malware Threat Detection 52

Malwarebytes

SEPTEMBER 17, 2023

MGM made the hasty decision to shut down each and every one of their Okta Sync servers after learning that we had been lurking on their Okta Agent servers sniffing passwords of people whose passwords couldn't be cracked from their domain controller hash dumps. He is free to disclose it in a responsible manner if he so chooses.

Ransomware 121

Ransomware Social Engineering Passwords Backups 121

Centraleyes

APRIL 23, 2024

Moreover, according to a Harvard Business Review , 80% of cybersecurity breaches are due to human error, emphasizing the need for automated and digital systems. In navigating the digital terrain, businesses must carefully weigh the potential benefits against the challenges posed by emerging technologies.

Risk 52

Risk Technology Artificial Intelligence Data privacy 52