Security Boulevard

NOVEMBER 17, 2021

Each week, Chloé provides answers to readers’ questions to help guide them as they navigate the technology industry. This week, Chloé offers advice on getting a talk accepted at an InfoSec conference. Dear Chloé, I’ve been trying to get my talk accepted at InfoSec conferences; however, I keep.

InfoSec 57

InfoSec Technology Security Awareness Cybersecurity 57

Thales Cloud Protection & Licensing

OCTOBER 24, 2019

In the spirit of National Cyber Security Awareness Month (NCSAM), my colleague Ashvin Kamaraju wrote about how organizations can use fundamental controls to secure their information technology. Effective digital security doesn’t end at “Secure IT,” however. Building a Robust Security Culture.

Security Awareness 83

Security Awareness InfoSec Passwords Accountability 83

SecureWorld News

OCTOBER 19, 2023

Too many folks focus on the technology as opposed to the people or process. When budgets tighten and we're still responsible for moving the security forward, we should look to the policies, procedures, and controls and which ones can we shore up, what can we do to block/tackle those things we've been putting off, etc.

Cybersecurity 74

Cybersecurity CISO Education Phishing 74

Herjavec Group

MAY 19, 2022

Hackers are routinely attempting novel ways to infiltrate corporate networks so it’s important to ensure that your employees are aware of how their online behavior can make them – and you – more vulnerable. Build security awareness training modules to educate your employees on how to spot phishing emails or business-related scams.

Penetration Testing 98

Penetration Testing Social Engineering Cybercrime InfoSec 98

SC Magazine

MAY 1, 2021

Brian Levine is senior director of product security at Axway, a global security engineering organization delivering training, tools, processes and DevSecOps practices for secure applications and cloud services to the enterprise market. In government, Brooks served under President George W.

Computers and Electronics 126

Computers and Electronics Technology Education Information Security 126

Security Boulevard

NOVEMBER 26, 2023

In this episode, Tom shows off AI generated images of a “Lonely and Sad Security Awareness Manager in a Dog Pound” and the humorous outcomes. The conversation shifts to Apple’s upcoming support for Rich Communication Services (RCS) and the potential security implications.

Scams 57

Scams Security Awareness Social Engineering Data privacy 57

Security Boulevard

MARCH 18, 2024

Zero-trust encompasses a variety of technologies, from strong identity systems to microsegmentation. The post Zero-Trust Network Access: Why so Many Teams Get it Wrong appeared first on Security Boulevard. Why are so many organizations getting it wrong?

Technology 76

Technology Data privacy Security Awareness InfoSec 76

Notice Bored

JULY 21, 2022

The customer is apparently seeking guidance on integrating infosec into the development process, which begs the question "Which development process?". Reducing the problem to its fundamentals, there is a desire to end up with software/systems that are 'adequately secure', meaning no unacceptable information risks remain.

Software 72

Software Risk InfoSec Security Awareness 72

The Falcon's View

AUGUST 6, 2018

There's no shortage of guidance available today about how to structure, build, and run a security program. Most guidance comes from a standpoint of inherent bias, whether it be to promote a product class, specific framework/standard, or to best align with specific technologies (legacy/traditional infrastructure, cloud, etc.).

InfoSec 40

InfoSec Risk Architecture Security Awareness 40

Notice Bored

JULY 4, 2022

That's a heady mix of laws and regs that apply to the organisation, its officers and workers, its property and finances, its technologies, its contracts, agreements and relationships with employees and third parties including the authorities, owners, suppliers, partners, prospects and customers, and society at large. All requirements?!

Risk 72

Risk Accountability InfoSec CISO 72

SC Magazine

FEBRUARY 18, 2021

Officials from the National Institute of Standards and Technology (NIST) this week teased future improvements to the agency’s recently introduced “Phish Scale” measurement system, which helps companies determine whether phishing emails are hard or easy for their employees to detect.

Phishing 114

Phishing Mobile Security Awareness Media 114

SecureWorld News

MAY 16, 2023

The city has a more established IT setup, including a full-time IT director, which many of the smaller towns lack, according to this Government Technology article. We use this type of model for our 'Whole of State' approach to security in North Dakota," says Michael Gregg, CISO for the State of North Dakota. This is a great approach.

Cybersecurity 72

Cybersecurity Insurance Cyber Risk CISO 72

Security Boulevard

MAY 14, 2021

Welcome to the Ask Chloé column on Security Boulevard! Each week, Chloé provides advice to readers’ questions to help guide them as they navigate the technology industry. Dear Chloé, I.

Technology 86

Technology Marketing CISO Security Awareness 86

Security Boulevard

AUGUST 8, 2021

Welcome to the Ask Chloé column on Security Boulevard! Each week, Chloé provides answers to readers’ questions to help guide them as they navigate the technology industry. The post Ask Chloé: Reducing Biased Language in Job Descriptions appeared first on Security Boulevard. Dear Chloé, I’ve been told.

Technology 62

Technology CISO Security Awareness InfoSec 62

Security Boulevard

APRIL 28, 2024

In episode 327 Tom, Scott, and Kevin discuss the findings from Mandiant’s M-Trends 2024 report, highlighting a significant rise in traditional vulnerability exploitation by attackers while observing a decline in phishing. Despite phishing’s decreased prevalence, it remains the second most popular method for gaining initial network access.

Phishing 62

Phishing Data privacy Passwords Technology 62

Security Through Education

NOVEMBER 30, 2022

At Social Engineer LLC, our purpose is to bring education and awareness to all users of technology. However, they will remember how you made them feel and that you treated them with empathy and compassion. Always remember, knowledge and skill have the best results when used ethically. Sources: [link]. Image: [link].

Social Engineering 105

Social Engineering Engineering Education Technology 105

SecureList

DECEMBER 11, 2023

In the whirlwind of technological advancements and societal transformations, the term “AI” has undoubtedly etched itself into the forefront of global discourse. As the fast-growing technology evolves, it has become a matter of policy making and regulation. Since the debut of GPT-3.5

Cybersecurity 94

Cybersecurity Artificial Intelligence Technology Risk 94

Notice Bored

AUGUST 23, 2020

on security awareness which is already in the plan anyway: maybe we should mention A.7.2.2 Ben Woelk, program manager for the Information Security Office at Rochester Institute of Technology, has published a detailed ISO comms plan - 16 pages laying out all the things they planned to communicate as part of their ISMS.

Information Security 52

Information Security Security Awareness Security Performance Risk 52

SC Magazine

APRIL 12, 2021

Despite their largely inherent familiarity with technology, employees aged 18-24 collectively performed the worst on the quiz, with only 16% passing. Users should approach any suspicious messages with extreme caution, or go straight to their IT and security teams to have them examine it first.”.

Cybersecurity 137

Cybersecurity InfoSec Phishing Security Awareness 137

Security Boulevard

MARCH 19, 2023

We cover how empathy relates to cybersecurity in the industry, the importance of being empathetic in our roles as […] The post Exploring the Role of Empathy in Cybersecurity with Andra Zaharia appeared first on The Shared Security Show.

Cybersecurity 95

Cybersecurity Data privacy Technology Security Awareness 95

Security Boulevard

SEPTEMBER 10, 2023

Finally, we […] The post The FBI’s Qakbot Takedown, QR Code Phishing Attacks, Dox Anyone in America for $15 appeared first on Shared Security Podcast. In this episode we discuss the FBI’s remarkable takedown of the Qakbot botnet, a saga involving ransomware, cryptocurrency, and the FBI pushing an uninstaller to thousands of victim PCs.

Phishing 73

Phishing Cryptocurrency Ransomware Social Engineering 73

Security Boulevard

DECEMBER 3, 2023

In this episode, noteworthy guest Tanya Janca returns to discuss her recent ventures and her vision for the future of Application Security. Tanya sheds light on her decision to partner […] The post Application Security Trends & Challenges with Tanya Janca appeared first on Shared Security Podcast.

Data privacy 57

Data privacy Technology Security Awareness InfoSec 57

Security Boulevard

APRIL 24, 2022

Award-winning security transformation manager and digital anthropologist Lianne Potter joins us to discuss the fascinating topic of digital anthropology and how we can rehumanize cybersecurity.

Cybersecurity 98

Cybersecurity Security Awareness Technology InfoSec 98

Security Boulevard

APRIL 10, 2022

The post Truths and Myths of Privacy, Fake Shopping Apps, Borat RAT Malware appeared first on The Shared Security Show. Scott and Tom explain why privacy isn’t dead, why should everyone should care about their privacy, and how you should respond to someone that says “I don’t care about privacy, I have nothing to hide!”.

Malware 98

Malware Social Engineering Scams Engineering 98

Security Boulevard

JULY 2, 2023

Several major organizations, including British Airways and the BBC, fell victim to the recent MOVEit cyberattack. We discuss the alarming trend of hackers targeting trusted suppliers to gain access to customer data, potentially holding companies and individuals for ransom.

Passwords 52

Passwords Data breaches Data privacy Technology 52

The Falcon's View

AUGUST 29, 2017

For those unfamiliar with Fogg's work, he started out doing research on Persuasive Technology back in the 90s, which has become the basis for most modern uses of technology to influence people (for example, use of Facebook user data to influence the 2016 US Presidential Election). Well, low-and-behold, it already exists!

Information Security 45

Information Security InfoSec Social Engineering Security Awareness 45

Security Boulevard

APRIL 30, 2023

In this episode we speak with Kai Roer, a renowned author, security culture coach, and CEO of Praxis Security Labs. Kai shares his career journey in cybersecurity and emphasizes the importance of building a strong security culture within organizations.

Cybersecurity 52

Cybersecurity Data privacy Technology Security Awareness 52

SC Magazine

MARCH 2, 2021

House Oversight and Homeland Security committees last week, SolarWinds’s former and current CEOs blamed an intern for creating a weak FTP server password and leaking it on GitHub – an act which may or may not have contributed to a supply chain hack that impacted users of the tech firm’s Orion IT performance monitoring platform.

Passwords 129

Passwords Password Management CISO InfoSec 129