Dark Reading

AUGUST 10, 2020

A security leader shares tips for adopting a CISO mindset, creating risk management strategies, and "selling infosec" to IT and executives.

CISO 101

CISO InfoSec Hacking Risk 101

Krebs on Security

JULY 21, 2023

A review of the executives pages published by the 2022 list of Fortune 100 companies found only four — BestBuy , Cigna , Coca-Cola , and Walmart — that listed a Chief Security Officer (CSO) or Chief Information Security Officer (CISO) in their highest corporate ranks. Nor is the average pay hugely different among all these roles.

CSO 243

CSO CISO Insurance Risk 243

SecureWorld News

JUNE 20, 2024

As defenders of digital assets, Chief Information Security Officers (CISOs) and cybersecurity professionals face immense pressure, often leading to burnout. Key findings from the report include: 90% of CISOs are concerned about stress, fatigue, or burnout affecting their team's well-being.

CISO 124

CISO Cybersecurity Technology Digital transformation 124

CSO Magazine

APRIL 6, 2022

The panel members’ engaging insights remain instructive to CISO s today as security leaders strive to hone their increasingly important board presentation approaches. Another board member stressed that she focused nearly all her attention during CISO presentations on the information pertaining to the security budget.

CISO 99

CISO Hacking Risk 99

Security Boulevard

MARCH 6, 2021

and podcast series during which cybersecurity experts discuss new zero-hour phishing attacks before a live audience of CISOs, CSOs and cybersecurity professionals. In Episode Two, Zero-Hour Attacks Hacking Humans Today, Patrick is joined by Chris Hadnagy, the Founder and CEO of The Social Engineer and host of the […].

Social Engineering 115

Social Engineering Engineering Hacking CISO 115

CSO Magazine

DECEMBER 16, 2021

Like CISOs everywhere, he has seen bad actors ratchet up their attacks and do increasingly more harm with successful hacks. Success is nonnegotiable for Rohrbaugh, who took over as chief information security officer at JetBlue Airways in 2019. To read this article in full, please click here

CISO 119

CISO Information Security Hacking 119

Security Affairs

OCTOBER 20, 2024

CISA adds Fortinet products and Ivanti CSA bugs to its Known Exploited Vulnerabilities catalog Nation-state actor exploited three Ivanti CSA zero-days Dutch police dismantled dual dark web market ‘Bohemia/Cannabia’ macOS HM Surf flaw in TCC allows bypass Safari privacy settings Iran-linked actors target critical infrastructure organizations (..)

Data breaches 117

Data breaches Cybercrime Cyber Insurance Marketing 117

CSO Magazine

FEBRUARY 23, 2023

Nearly half of CISOs will change jobs by 2025 due to stress caused by the risk of being breached while trying to retain staff, according to the Gartner report, Predicts 2023: Cybersecurity Industry Focuses on the Human Deal. This includes the knowledge that there are only two possible outcomes: get hacked or don’t.

CISO 100

CISO Data breaches Cybersecurity Hacking 100

SecureWorld News

SEPTEMBER 30, 2020

It is a common feeling in the cybersecurity community that CISOs do not sleep well at night. CISOs worry about the latest incident, end of life technology in their environment, breaches in the news, insecure users and vendors, penetration testing results, budget and resources, and the latest vulnerability report (to name a few).

CISO 102

CISO Penetration Testing Technology Antivirus 102

CSO Magazine

SEPTEMBER 22, 2022

The trial of former Uber CISO Joe Sullivan marks the first time a cybersecurity chief has faced potential criminal liability. Sullivan is charged with trying to conceal from federal investigators the details of a 2016 hack at Uber that exposed the email addresses and phone numbers of 57 million drivers and passengers.

CISO 117

CISO Insurance Hacking Cybersecurity 117

Malwarebytes

NOVEMBER 1, 2023

The Securities and Exchange Commission (SEC) has announced charges against software company SolarWinds Corporation and its chief information security officer (CISO), Timothy G. Brown, for “fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities.”

CISO 132

CISO Risk Software Cybersecurity 132

SecureWorld News

DECEMBER 12, 2024

The details of the Krispy Kreme hack are still emerging, but the companys Form 8-K filing brought the incident to light, offering a rare glimpse into the challenges businesses face when their systems are compromised. The Krispy Kreme hack is a sobering reminder that no industry is immune to cyber threats.

Password Management 109

Password Management Passwords CISO Cybersecurity 109

Schneier on Security

OCTOBER 3, 2018

Alex Stamos, former Facebook CISO now at Stanford University, points out how this can be a problem: Interesting impact of the GDPR 72-hour deadline: companies announcing breaches before investigations are complete. Last week's Facebook hack is his example. The EU's GDPR regulation requires companies to report a breach within 72 hours.

CISO 267

CISO Media Hacking 267

eSecurity Planet

OCTOBER 18, 2024

EC-Council : The International Council of E-Commerce Consultants, or EC-Council, offers several certifications for different career paths but is best known for its white-hat hacking program. Chief Information Security Officer (CISO) As Chief Information Security Officer, you’ve arrived at the C-Suite. Salary: $124,424, Cyberseek.

Cybersecurity 126

Cybersecurity Artificial Intelligence Penetration Testing Engineering 126

SecureWorld News

JUNE 26, 2023

In a LinkedIn post today, June 26th, Jamil Farshchi, EVP and CISO at Equifax, had this to say about the news: "This is a really big deal. It's unprecedented: this is likely the first time a CISO has ever received one of these. So it seems odd for a CISO to get one of these," he wrote. federal securities laws."

CISO 112

CISO CSO Data privacy Cyber Risk 112

SecureWorld News

JULY 30, 2024

and its Chief CISO, Timothy G. The case highlights the critical role of CISOs and other cybersecurity leaders in maintaining transparent and effective security practices. On July 18th, a significant ruling came from a New York federal judge who dismissed most of the claims brought by the U.S.

CISO 113

CISO Risk Cybersecurity Accountability 113

SecureWorld News

OCTOBER 23, 2024

Securities and Exchange Commission (SEC) announced Tuesday that it has fined four companies $7 million for misleading statements about their cybersecurity incidents, particularly concerning the high-profile 2019 SolarWinds hack. Unisys Corp., Avaya Holdings Corp., Check Point Software Technologies Ltd.,

Cybersecurity 113

Cybersecurity Risk Hacking Software 113

Security Boulevard

FEBRUARY 4, 2022

In one episode, they hack into the California traffic information network to change those digital bulletin boards that hang above the freeway. The post “Modern CTO” Podcast Features Avast CISO Jaya Baloo | Avast appeared first on Security Boulevard. Afterwards, she asked her parents for a computer, and they got her one.

CISO 98

CISO Hacking 98

IT Security Guru

FEBRUARY 28, 2022

As CISOs embark on their transformational journeys, identifying these areas of weakness should be the top priority. This has led to CISOs shifting how they approach protecting the corporate perimeter with additional controls and monitoring tools being used to scan any access to the network. Cloud dominance .

CISO 97

CISO Digital transformation Artificial Intelligence Risk 97

Jane Frankland

FEBRUARY 7, 2025

But as a CISO or cyber risk owner, it’s not just about locking down sensitive informationits about doing it without slowing down your people. Amid a backdrop of increasingly sophisticated and frequent cyberattacks, APTs are a growing concern for CISOs and cyber risk owners.

Cyber Risk 130

Cyber Risk CISO Risk Encryption 130

The Security Ledger

OCTOBER 7, 2021

Pondurance CISO Dustin Hutchison joins me to talk about how companies can operationalize MDR within their environment. The post Spotlight: Operationalizing MDR with Pondurance CISO Dustin Hutchison appeared first on The Security Ledger with Paul F. Dustin Hutchison is CISO at Pondurance. Click the icon below to listen.

CISO 98

CISO InfoSec Ransomware Backups 98

Threatpost

JUNE 22, 2022

Joseph Carson, Chief Security Scientist and Advisory CISO at Delinea, explores why gamified platforms and hacking esports are the future.

Hacking 81

Hacking CISO InfoSec 81

Security Boulevard

JUNE 17, 2021

Ira Winkler, CISO at Skyline Technology Solutions, recounts his amazing journey from wannabe astronaut to NSA intelligence analyst, social engineer, systems hacker and author, and some of the crazy things that happened along the way - check it out. The post CISO Stories Podcast: So You Want to be a Cyber Spy?

CISO 94

CISO Social Engineering Engineering Technology 94

The Security Ledger

OCTOBER 7, 2021

Pondurance CISO Dustin Hutchison joins me to talk about how companies can operationalize MDR within their environment. The post Spotlight: Operationalizing MDR with Pondurance CISO Dustin Hutchinson appeared first on The Security Ledger with Paul F. Dustin Hutchinson is CISO at Pondurance. Click the icon below to listen.

CISO 97

CISO InfoSec Ransomware Backups 97

Security Boulevard

FEBRUARY 20, 2023

The post GoDaddy Hosting Hacked — for FOURTH Time in 4 Years appeared first on Security Boulevard. GoDaddy’s web hosting service breached yet again. This time, the perps were redirecting legit websites to malware.

Hacking 143

Hacking Malware Social Engineering CISO 143

CSO Magazine

MAY 19, 2022

Truth, transparency and trust are the three T’s that all CISOs and CSOs should embrace as they march through their daily grind of keeping their enterprise and the data safe and secure. Failure to adhere to the three T’s can have serious consequences.

CISO 107

CISO CSO Data breaches Media 107

CSO Magazine

FEBRUARY 24, 2022

Department of Justice (DOJ) released information surrounding the guilty plea of Mexican businessman Carlos Guerrero and his conspiracy to sell and use hacking tools that were manufactured by companies in Italy, Israel, and elsewhere.

Spyware 128

Spyware CISO Wireless Manufacturing 128

Security Boulevard

APRIL 12, 2024

The post Sisense Hacked: CISA Warns Customers at Risk appeared first on Security Boulevard. A hard-coded credential catastrophe: The analytics firm kept big companies’ secrets in an insecure AWS bucket. Government says victims include the “critical infrastructure sector.”

Risk 139

Risk Hacking Government Digital transformation 139

Security Boulevard

APRIL 5, 2022

The post Mailchimp Hack Causes Theft of Trezor Crypto Wallet ‘Money’ appeared first on Security Boulevard. Hackers have stolen a mother lode of personal data from Intuit’s email marketing operation, Mailchimp.

Hacking 145

Hacking Marketing Social Engineering CISO 145

Security Boulevard

NOVEMBER 18, 2022

Facebook parent Meta has disciplined or fired at least 25 workers for allegedly hacking into user accounts. Meta Security Guards Hacked Facebook Users appeared first on Security Boulevard. The post Oops!

Hacking 128

Hacking Accountability Social Engineering CISO 128

Security Boulevard

AUGUST 28, 2024

The CISO Global Pen Testing Team Earlier this month, a group of our intrepid pen testers from our Readiness & Resilience team at CISO Global ventured into the heart of the hacking world at DEFCON 32 in Las Vegas. The post Badge Life: The CISO Team Takes on DEF CON appeared first on Security Boulevard.

CISO 64

CISO Hacking Cybersecurity 64

Security Boulevard

FEBRUARY 11, 2022

The post On the Irish Health Services Executive Hack appeared first on Security Boulevard. It had no documented cyber incident response runbooks or IT recovery plans (apart from documented AD recovery plans) for recovering from a wide-scale ransomware event. The antivirus server was later encrypted in the attack).

Hacking 98

Hacking Antivirus CISO Ransomware 98

The Last Watchdog

AUGUST 28, 2023

At Black Hat USA 2023 , I had a great discussion about API security with Data Theorem COO Doug Dooley and Applovin CISO Jeremiah Kung. Yes, AI is bolstering hacking techniques; but it can also strengthen defensive capabilities by security teams, programs, and products Dooley observes. The arms race is just warming up, folks.

CISO 187

CISO Mobile Internet Internet 187

CSO Magazine

JANUARY 18, 2022

Security exec Chad Kliewer had heard the initial reports of the SolarWinds attack as news about it broke in December 2020, sympathetic to those companies first named as victims of the hack. To read this article in full, please click here (Insider Story)

CISO 123

CISO Hacking 123

Threatpost

JANUARY 8, 2021

Threatpost editors discuss the SolarWinds hack, healthcare ransomware attacks and other threats that will plague enterprises in 2021.

CISO 113

CISO Healthcare Ransomware Hacking 113

SC Magazine

APRIL 21, 2021

The hack of Words with Friends in 2019 was high-profile, but today’s columnist, Yuval Elddad of CYE, says CISOs at all gaming companies have to take a closer look at the growing threats to online gaming platforms. The post Why CISOs at gaming companies need to reimagine security appeared first on SC Media.

CISO 94

CISO Marketing Accountability Passwords 94

Security Boulevard

OCTOBER 26, 2021

The post New Russian Hacks Revealed—but U.S. Microsoft has issued another of its “look how clever we are” writeups of detecting APT29 hackers. But the U.S. government sees it differently. Says it’s Microsoft’s Fault appeared first on Security Boulevard.

Hacking 128

Hacking Government Social Engineering CISO 128