Centraleyes

JUNE 9, 2025

Have you ever had a client ask, “How much risk are we facing?” They want risk explained in clear, unambiguous terms—and most of all, they want numbers. Cyber Risk Quantification (CRQ) helps MSSPs turn security work into real business value. What Is Cyber Risk Quantification?

Cyber Risk

Jane Frankland

JUNE 24, 2025

The UK Government’s refreshed Cyber Governance Code of Practice sets a clear direction with guidance, and is holding boards accountable for human cyber risk. I’m approaching this from my role with OutThink , the Cybersecurity Human Risk Management platform I proudly represent as an advisor and brand ambassador.

Cyber Risk

SecureWorld News

FEBRUARY 25, 2025

Deepfake phishing, AI-generated malware, and automated spear-phishing campaigns are already on the rise. From the report: "Generative AI is being used to create highly convincing phishing emails, fake voices, and even deepfake videosmaking social engineering attacks more difficult to detect.

Cybersecurity

Jane Frankland

JULY 22, 2025

Could this mean that large enterprises are actually more at risk than smaller ones? The irony is stark: choosing a partner based on who’s safest to blame—not who’s best at protection—can increase the risk of a breach in the first place. Challenge Procurement-Driven Security Decisions Cyber risk leaders (CIOs, CISOs, CTOs etc.)

Risk

The Last Watchdog

DECEMBER 18, 2024

This shift is expected to place significant pressure on organizations that haven’t yet developed trusted data to manage risk effectively. To mitigate risks, businesses will invest in modern, privacy-enhancing technologies (PETs), such as trusted execution environments (TEEs) and fully homomorphic encryption (FHE).

Cybersecurity

Jane Frankland

APRIL 15, 2025

Instead of focusing on accessible, impactful solutions like human risk management, we gravitate toward shiny new technologiestools and systems that feel exciting, measurable, and comfortably within our domain of expertise. The hard truth is that technology alone cant fix the root causes of cyber risk.

Risk

SecureWorld News

JUNE 9, 2025

Additionally, a distributed workforce, ranging from remote maintenance technicians to cabin crews, multiplies entry points for social-engineering tactics like phishing. Comprehensive risk assessments across information and operational technology (OT) systems lay the groundwork for targeted defenses.

Cybersecurity

Security Boulevard

JUNE 18, 2025

Whether it’s stolen data, ransomware, or phishing, attacks are becoming more frequent and severe. The post Cyber Risk Management Strategy: How to Plan appeared first on Security Boulevard. Online threats are everywhere, and no organization is safe from them. That’s why having a clear.

Cyber Risk

SecureWorld News

JANUARY 16, 2025

Regularly updating and patching systems, including antivirus software, firewalls, and SCADA networks, can mitigate this risk. This significantly reduces the risk of unauthorized access. Sophisticated adversaries: Nation-state actors, cybercriminals, and hacktivists are leveraging advanced tactics to target this sector.

Energy and Utilities

SecureWorld News

FEBRUARY 17, 2025

We have moved beyond traditional compliance-driven security models to risk-based approaches, integrating cybersecurity into enterprise risk management (ERM) frameworks. This led to a reactive approach where organizations were more focused on regulatory adherence than on actual security risk management.

Government

SecureWorld News

FEBRUARY 14, 2025

Avoid phishing emails and messages You may receive emails or texts with fake Valentine's Day deals, electronic greeting cards (e-cards), or delivery notifications. Charity phishing often involves a personal plea for help from an individual, but it can be more sophisticated.

Scams

Malwarebytes

JULY 2, 2025

The breach at a third party provider is extra painful since Qantas concluded an uplift of third and fourth-party cyber-risk governance processes in 2024. They target large corporations and their third-party IT providers, which means anyone in the airline ecosystem, including trusted vendors and contractors, could be at risk.

Social Engineering

Trend Micro

JUNE 26, 2025

Move faster than your adversaries with powerful purpose-built XDR, cyber risk exposure management, and zero trust capabilities Learn more Extend Your Team Extend Your Team.

Security Awareness

Cisco Security

JULY 7, 2025

During his time with Cisco and at Robust Intelligence before that, Hyrum has been on a self-proclaimed crusade to get people to understand the cybersecurity risks from AI/ML. Nguyen also praised Hyrum for his contribution in “one of the fastest-emerging areas of cyber risk.

Cyber Risk

Security Boulevard

MARCH 21, 2025

Check out key findings and insights from the Tenable Cloud AI Risk Report 2025. In addition, find out how AI is radically transforming cyber crime. And get the latest on open source software security; cyber scams; and IoT security. Plus, get fresh guidance on how to transition to quantum-resistant cryptography.

Risk

SecureWorld News

JULY 17, 2025

This trend reflects increasing awareness of OT cyber risk and the need for executive-level accountability," Fortinet notes. Alarmingly, AI-powered cybercrime is accelerating, with adversaries using it to scale phishing and evade detection.

CISO

The Last Watchdog

APRIL 22, 2025

security professionals, highlighting a few worrisome findings: Deepfake risks increasingly target vulnerable board members and executives. Case in point: 59% of respondents said it is very difficult to detect deepfake attacks, and the majority have low confidence in their executives ability to recognize a deepfake risk.

Authentication

SecureList

DECEMBER 9, 2024

This incident serves as a stark reminder of the critical risks posed by global IT disruptions and supply chain weaknesses. This case underscores the serious risk that social engineering and supply chain attacks pose to open-source projects. The issue serves as a reminder of the potential risks inherent in widely used software.

Internet

Jane Frankland

MAY 3, 2025

Allegedly orchestrated by the same group known as Scattered Spider, these attacks highlight the significant challenges even the most respected and established brands face in defending against modern cyber threats. Cybersecurity isnt just an IT problem; its central to risk management, operational continuity, and customer trust.

Cyber Attacks

The Last Watchdog

MAY 13, 2025

AI Risk Management Becomes Business-Critical AI security solutions dominated RSAC this year, signaling that as organizations adopt advanced response technologies, comprehensive training must keep pace. This gap highlights a growing disconnect between perceived and actual risk in cloud deployments.

Architecture

SecureWorld News

APRIL 13, 2025

It helps identify anomalies and potential third-party risks in real-time. These platforms can automatically recognize and classify threatening behavior such as suspicious network activity, phishing attacks, and transmission of malware. Here's an example that shows how Google performs phishing detection.

Cybersecurity

Jane Frankland

FEBRUARY 7, 2025

When data breaches escalate, cyber-attacks grow more sophisticated, nation states ramp up their digital warfare, and regulations tighten the noose, staying ahead isnt just an optionits your only line of defence. Amid a backdrop of increasingly sophisticated and frequent cyberattacks, APTs are a growing concern for CISOs and cyber risk owners.

CISO

Trend Micro

JUNE 10, 2025

Move faster than your adversaries with powerful purpose-built XDR, cyber risk exposure management, and zero trust capabilities Learn more Extend Your Team Extend Your Team.

Cybersecurity

Security Boulevard

MAY 2, 2025

Back in September 2024, CISA sounded the alarm on critical infrastructure organizations susceptibility to common, well-known attack methods in its CISA Analysis: Fiscal Year 2023 Risk and Vulnerability Assessments report. Coast Guard conducted in 2023. Enforce multi-factor authentication across all software development environments.

Cybersecurity

SecureWorld News

JULY 1, 2025

Generative AI sustains sophisticated, multi-channel social engineering for phishing campaigns to gain access privileges to critical infrastructure. Supply chain weaknesses compound the risk. A decade after the Ukraine blackout began with a spear-phishing email, social engineering remains potent. allies are taking.

Social Engineering

SecureWorld News

APRIL 29, 2025

Whether it was caused by a sophisticated cyberattack or an ordinary technical failure, the outcome remains the same: millions disrupted, critical services compromised, and economic damage," said Kip Boyle , Instructor and vCISO at Cyber Risk Opportunities LLC.

Cyber Attacks

Trend Micro

JUNE 10, 2025

Move faster than your adversaries with powerful purpose-built XDR, cyber risk exposure management, and zero trust capabilities Learn more Extend Your Team Extend Your Team.

Cyber Risk

IT Security Guru

MARCH 18, 2025

Deepfakes join classic phishing and spear phishing as significant cyber risks for online daters. We have to rely on tech to spot this as human capabilities are diminishing, said Newman. The answer? In this case, fraudsters are one step ahead. So, what should people do to protect themselves?

Scams

Jane Frankland

MAY 18, 2025

This platform offers a comprehensive solution for risk assessment, recovery testing, and rapid business restoration post-breach, all while maintaining full compliance. Without deep forensic analysis and clean recovery orchestration, you risk reinfecting your environment during recovery.

Cybersecurity

Centraleyes

MARCH 20, 2025

Vulnerability Management Heat Maps: Highlighting areas of a system with the highest risk, helping prioritize patching efforts. Supply Chain Risk Monitoring: A financial services firm tracked vendor vulnerabilities through a visualization platform, flagging suppliers with outdated software.

Cyber Attacks

Digital Shadows

NOVEMBER 26, 2024

Key Points Phishing incidents rose during the reporting period (August 1 to October 31, 2024), accounting for 46% of all customer incidents. This increase is likely driven by high employee turnover and easy access to phishing kits. Meanwhile, “RansomHub” is rising rapidly due to its attractive ransomware-as-a-service (RaaS) model.

Cyber Attacks

IT Security Guru

MARCH 26, 2025

Our adversaries are equipped with AI but are not constrained by budget, legal, and ethical factors and will use it against us far beyond phishing and deep fake scenarios for ID compromise led attacks. However, AI is a double-edged sword.

Cybersecurity

Centraleyes

MARCH 13, 2025

Enacted in 2017, this regulation is all about minimizing risk in the financial services sector, which, lets face it, is prime real estate for cybercriminals. The program should be tailored to your specific business risks. Insight: Many businesses make the mistake of copying templates without understanding their unique risks.

Cybersecurity

SecureWorld News

FEBRUARY 24, 2025

While quantum power poses risks to traditional encryption, it also opens the door to revolutionary cybersecurity advancements that could redefine how we protect data, detect threats, and secure critical infrastructure.

Cybersecurity

Security Boulevard

MARCH 20, 2025

It examines the rising risks associated with AI, from cybercriminals weaponizing AI for more sophisticated attacks to the security implications of recent AI advancements like the open source model DeepSeek, while providing best practices for mitigating these risks.This blog post summarizes several highlights from the report.

Social Engineering

SecureWorld News

JULY 10, 2025

Manufacturing and logistics firms, increasingly digitized and AI-driven, are acutely at risk: state-aligned hackers are "infiltrating the digital arteries of commerce" from ports to payment systems. This IT service partner hasn't enabled multi-factor authentication, or an employee at a supplier who falls for a phishing email.

Manufacturing

SecureWorld News

APRIL 30, 2025

Strategic Advisor & vCISO, Sentinel Technologies; and moderator Dave Malcom , President & CEO, Malcom Risk Advisors. The cost and impact of cyber breaches Learn just how devastating a single cyber incident can be for a small or medium business, including real-world examples and financial impact analysis.

Small Business