Security Boulevard

NOVEMBER 10, 2022

Welcome to the latest edition of The Week in Security , which brings you the newest headlines from both the world and our team across the full stack of security: application security, cybersecurity, and beyond. This week: Former Uber CSO is convicted for his attempted cover-up of a 2016 hack of the company.

CSO 69

CSO Media Hacking Software 69

CSO Magazine

SEPTEMBER 21, 2021

It doesn’t communicate enough to other executives,” says Marinkovic, who provides virtual CISO services through Tiro Security and serves on the Emerging Trends Working Group with the IT governance association ISACA. Learn 12 tips for effectively presenting cybersecurity to the board and 6 steps for building a robust incident response plan.

Cybersecurity 137

Cybersecurity CSO CISO Government 137

CSO Magazine

AUGUST 3, 2021

The US General Accountability Office (GAO) issued the 19-page report , “Cybersecurity and Information Technology: Federal Agencies need to Strengthen Efforts to Address High-Risk Areas” on July 29. Both pointed out shortcomings in the cyber readiness of the United States government. Sign up for CSO newsletters. ].

CSO 142

CSO Cybersecurity Government Accountability 142

CSO Magazine

JUNE 8, 2021

In December 2020, the US Government Accounting Office (GAO) made 145 recommendations to 23 federal agencies relating to supply chain risks. In May 2021, the GAO’s director of information technology and cybersecurity, Vijay A. Get the latest from CSO by signing up for our newsletters. ].

Government 121

Government CSO Risk Accountability 121

CSO Magazine

MARCH 24, 2023

The commissions of the House of Commons and House of Lords have followed the UK government by banning social media app TikTok over cybersecurity concerns. To read this article in full, please click here

Government 80

Government Cybersecurity Media Risk 80

CSO Magazine

SEPTEMBER 13, 2022

Offensive cyber operations are best known as acts of digital harm, mainly in the context of cyber “warfare,” with nation-states, particularly intelligence organizations, serving as the primary actors.

Government 82

Government Cybersecurity Ransomware 82

CSO Magazine

MARCH 29, 2023

For the first time, over a dozen cybersecurity companies have come together to produce an agnostic study titled LATAM CISO Report 2023: Insights from Industry Leaders. The 2023 LATAM CISO Report offers different cybersecurity perspectives of industry leaders in Latin America. Duke University conducted the survey.

Government 108

Government Cybersecurity CISO Banking 108

CSO Magazine

MARCH 27, 2023

The French government has banned TikTok and all other “recreational apps” from phones issued to its employees. The Minister of Transformation and the Public Service Stanislas Guerini, said in a statement that recreational applications do not have sufficient levels of cybersecurity and data protection to be deployed on government equipment.

Government 123

Government Media Cybersecurity 123

CSO Magazine

SEPTEMBER 2, 2021

Learn 12 tips for effectively presenting cybersecurity to the board and 6 steps for building a robust incident response plan. Sign up for CSO newsletters. ]. The guide, quietly published in late July, is in essence a primer on how to create an insider risk/insider threat program. NCSC and CDSE insider threat program guidance.

CSO 117

CSO Government Risk Cybersecurity 117

CSO Magazine

MARCH 30, 2023

An APT group known in the security industry as Winter Vivern has been exploiting a vulnerability in the Zimbra Collaboration software to gain access to mailboxes from government agencies in several European countries.

Government 111

Government Telecommunications Cybersecurity Software 111

CSO Magazine

JANUARY 4, 2023

The number of attacks targeting the government sector increased by 95% worldwide in the second half of 2022 compared to the same period in 2021, according to a new report by AI-based cybersecurity company CloudSek. There is also a risk that national security and military data can be used by terrorist organizations.

Government 126

Government Risk Cybersecurity 126

CSO Magazine

OCTOBER 4, 2022

Local governments continue to grapple with ransomware and other cyberattacks that have crippled their school systems and halted other civic functions. The latest crisis in a long string of local government cyber incidents involves the Los Angeles Unified School District.

Government 90

Government Cybersecurity Ransomware 90

CSO Magazine

MARCH 29, 2021

While sophisticated ransomware and nation-state threat actors target US critical infrastructure, the only protection most organizations have against these attacks is tight and effective cybersecurity. These attacks have drawn government attention and sparked calls for liability protection against malicious intrusions.

CSO 96

CSO Cybersecurity Government Ransomware 96

SecureWorld News

MAY 23, 2024

Securities and Exchange Commission (SEC) has issued new guidance aimed at clearing up confusion around how public companies should disclose cybersecurity incidents under the agency's recently adopted disclosure rules. disclosures regarding material cybersecurity incidents." of Form 8-K. Hopefully, this is a temporary and short phase!"

CISO 103

CISO CSO Cybersecurity Risk 103

CSO Magazine

MAY 31, 2022

federal government introduced a proposed five-step 5G Security Evaluation Process Investigation. “[It] Cybersecurity and Infrastructure Security Agency (CISA), said. Last week the U.S.

Government 123

Government Engineering Technology Cybersecurity 123

CSO Magazine

DECEMBER 15, 2022

The US Government Accounting Office (GAO) continues to highlight shortcomings in the cybersecurity posture of government entities responsible for the protection of United States infrastructure when it comes to internet of things (IoT) and operational technology (OT) devices and systems.

IoT 99

IoT Government Internet Internet 99

CyberSecurity Insiders

NOVEMBER 15, 2022

Cybersecurity teams continue to face ongoing challenges in safeguarding their networks. To realize, zero trust’s full potential, The Federal Government must bear the full scope of its authority and resources to ensure the protection and security of our national and economic assets. Cyber Defense team. The policy of the U.S.

Cybersecurity 97

Cybersecurity Architecture Energy and Utilities Encryption 97

CSO Magazine

MAY 18, 2021

Get the latest from CSO by signing up for our newsletters. ]. The new proposals could require MSPs to meet the current Cyber Assessment Framework , a set of 14 cybersecurity principles designed for organisations that play a vital role in the day-to-day life of the UK. Learn the 7 keys to better risk assessment. |

Risk 94

Risk CSO Government Cyber Risk 94

SecureWorld News

JANUARY 26, 2022

While sometimes controversial, whistleblowers have the potential to save an organization from millions of dollars in losses, public backlash, or government regulation—unless they are treated with disrespect and not taken seriously. After all, you never know who in your business might spot that something isn't quite right.".

Cybersecurity 82

Cybersecurity CSO Cyber Attacks Government 82

CSO Magazine

MARCH 2, 2023

The White House released its long-anticipated National Cybersecurity Strategy , a comprehensive document that offers fundamental changes in how the US allocates "roles, responsibilities, and resources in cyberspace." To read this article in full, please click here

Cybersecurity 109

Cybersecurity Internet Internet Government 109

CSO Magazine

APRIL 21, 2021

Competitive and adversarial relations with China, Russia, Iran, and North Korea percolate to the top, while global issues like the pandemic and economic migration will strain governments around the world, including the US. Sign up for CSO newsletters. ].

CSO 131

CSO Government Cybersecurity 131

CSO Magazine

FEBRUARY 21, 2023

Despite the billions of dollars poured annually into cybersecurity by investors, organizations, academia, and government, adequate and reliable cybersecurity remains an ever-elusive goal. Chief among the challenges for decision-makers and experts is simply identifying and comprehending society's cybersecurity risks.

Risk 108

Risk Cybersecurity Government Technology 108

CSO Magazine

JANUARY 25, 2022

federal government has been very active the past year, particularly with the cybersecurity executive order (EO) and associated tasks and goals that have come out of it. One framework and industry source that has been getting increased attention is the NIST Cybersecurity Framework (CSF).

Risk 130

Risk Cybersecurity Government 130

CSO Magazine

DECEMBER 15, 2022

Each year the NDAA contains a wealth of primarily military cybersecurity provisions, delivering hundreds of millions, if not billions, in new cybersecurity funding to the federal government. billion, over FY2022 NDAA’s topline with a good chunk of that amount going to cybersecurity efforts. Titled the James M.

Cybersecurity 120

Cybersecurity Government 120

CSO Magazine

JULY 27, 2021

A sophisticated, likely government-sponsored threat actor has been compromising major public and private organizations over the past year by exploiting deserialization flaws in public-facing ASP.NET applications to deploy fileless malware. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ].

Malware 145

Malware CSO Internet Internet 145

eSecurity Planet

JUNE 21, 2022

” Also read: Cybersecurity Employment in 2022: Solving the Skills Gap. “Certifications range from penetration testers , government/industry regulatory compliance , ethical hacking , to industry knowledge,” he said. Also read: How to Get Started in a Cybersecurity Career. The Top Cybersecurity Certifications.

Cybersecurity 119

Cybersecurity Penetration Testing System Administration Cyber Attacks 119

SecureWorld News

DECEMBER 11, 2023

December 15, 2023, marks a significant shift in the cybersecurity landscape for publicly traded companies. Securities and Exchange Commission (SEC) has implemented new cyber incident disclosure rules, requiring companies to be more transparent and timely in their communication of cybersecurity breaches and vulnerabilities.

CISO 92

CISO Risk Cybersecurity CSO 92

SC Magazine

MARCH 25, 2021

Just a few months past the initial SolarWinds discovery, it is clear that standardized cybersecurity regulation is needed to outline best practices for companies to follow. Part of this preparedness means understanding how potential legislation could reshape cybersecurity efforts. In March 2021, President Biden signed the $1.9

CISO 96

CISO Cybersecurity CSO Government 96

CSO Magazine

MAY 28, 2021

Learn 12 tips for effectively presenting cybersecurity to the board and 6 steps for building a robust incident response plan. Sign up for CSO newsletters. ]. It has a long history of targeting governmental or government-tied organizations, sometimes using zero-day exploits to gain initial access.

CSO 105

CSO Government Marketing Hacking 105

CSO Magazine

FEBRUARY 11, 2022

A slow response to a data breach or other cybersecurity incident can cost companies time and money, as well as damage to their reputation. The new software is geared specifically for enterprises, allowing them to recover evidence of security incidents from corporate networks and remote endpoints.

Cybersecurity 127

Cybersecurity IoT Data breaches Mobile 127

Security Boulevard

APRIL 27, 2021

It is customary to begin an article on cybersecurity with statements about huge increases in threats and attacks and mounting cyberspace losses from fraud, identity theft, ransoms, data exfiltration, blackmail, etc. The post Inadequate Cybersecurity appeared first on Security Boulevard. But, when you delve into it, proving […].

Cybersecurity 124

Cybersecurity Identity Theft CSO CISO 124

CSO Magazine

AUGUST 30, 2022

One of the most pervasive challenges in the current cybersecurity environment is an overabundance of tooling vendors, all of which produce telemetry or data, often in their own native or nuanced schema or format. The problem isn’t going unnoticed.

Cybersecurity 105

Cybersecurity Risk Government 105

CSO Magazine

MAY 20, 2022

But John DeSimone has built an offensive line—and he says it’s time for more cybersecurity practitioners to take that approach. It’s the way the technology needs to move, and that’s the way the country has to move.” [ Learn 8 pitfalls that undermine security program success and 12 tips for effectively presenting cybersecurity to the board.

CSO 76

CSO Technology Cybersecurity Government 76

CSO Magazine

APRIL 3, 2023

The Chinese government is instituting a cybersecurity review of US-based memory chip maker Micron’s products being sold in the country, in the latest move in the ongoing semiconductor trade dispute that pits China against the US and its allies.

Cybersecurity 110

Cybersecurity Manufacturing Technology Government 110

CSO Magazine

FEBRUARY 3, 2022

Following President Biden’s cybersecurity executive order issued last May, the Department of Homeland Security (DHS) announced on February 3 the creation of the Cyber Safety Review Board (CSRB). This public-private initiative is charged with reviewing and assessing significant cybersecurity incidents across government and the private sector.

Cybersecurity 104

Cybersecurity Government 104

CSO Magazine

DECEMBER 14, 2022

When a company engages in business with a government, especially with the defense sector of that government, one should expect that security surrounding the engagement would be a serious endeavor. Which should give everyone pause, as the results are startling.

Cybersecurity 95

Cybersecurity Government 95

CSO Magazine

MARCH 8, 2021

The SolarWinds caper – the “largest and most sophisticated attack the world has ever seen” according to Microsoft president Brad Smith – gave its Russian perps months of free reign across untold US government agencies and private companies.

Cybersecurity 140

Cybersecurity Government Ransomware Software 140