The Last Watchdog

OCTOBER 4, 2023

In a keynote address, Omdia’s Eric Parizo, managing prinicipal analyst, and Andrew Braunberg, principal analyst, unveiled an approach they coined as “proactive security.” RBVM solutions don’t merely identify vulnerabilities, it quantifies and prioritizes them, making risk management more strategic.

Risk 198

Risk Marketing Software Network Security 198

Anton on Security

SEPTEMBER 13, 2023

Notice, for example, that I was asking every guest on these podcast episodes about their view of this topic. So you have a whole bunch of elements of your AI system, that you have to manage their provenance, you have to manage their secure build, you have to manage the lifecycle, you have to manage the testing and the regression testing.

Artificial Intelligence 130

Artificial Intelligence CISO Software Government 130

Anton on Security

NOVEMBER 7, 2022

Why Is Threat Detection Hard?” No, DETECTION AS COOKING” ”On Trust and Transparency in Detection” Now, fun posts by topic. A SOC Tried To Detect Threats in the Cloud … You Won’t Believe What Happened Next” ”Top 10 SIEM Log Sources in Real Life?” Is Your Fate In the Cloud?”

Threat Detection 223

Threat Detection Cloud Migration Encryption CISO 223

Joseph Steinberg

DECEMBER 11, 2023

He will also review relevant materials and initiate topical recommendations. Through timely research, programming, and unparalleled training opportunities, the IACP is preparing current and emerging police leaders—and the agencies and communities they serve—to succeed in addressing the most pressing issues, threats, and challenges of the day.

Cybersecurity 243

Cybersecurity Artificial Intelligence CISO Technology 243

Anton on Security

FEBRUARY 26, 2021

We’ll question threat models and determine whether security tactics are deployed for the data subject’s benefit or just for organizational benefit. If you have topics you’re interested in hearing about, please reach out and let us know. Topics covered: What is confidential computing? vulnerabilities and threats in the cloud?

Cloud Migration 100

Cloud Migration Network Security Banking Media 100

Anton on Security

DECEMBER 15, 2022

[this question is related to the fact that at Google, there is no team called “SOC” ] A: The discussion about naming the security operation center comes from the longer debate about whether SOC includes just the analysts watching the screens or the infrastructure and processes for producing the alerts, threat research, detection creation, etc.

Engineering 312

Engineering Risk Technology Information Security 312

CyberSecurity Insiders

DECEMBER 29, 2021

It is imperative to stay up to date on the most important topics. Register now for our upcoming 2022 webinars on topics including cloud security, market trends, and Zero Trust so you stay current on trending topics. Countering Threat Evasion: You Cannot Stop What You Cannot See! Ransomware Deep Dive: To Pay or Not to Pay?

Cybersecurity 84

Cybersecurity Password Management Ransomware Education 84

Security Boulevard

OCTOBER 4, 2021

Information security practitioners have published a lot of articles around topics like how to build and run a security operations center (SOC) and specific SOC functions such as incident response and threat hunting. The post Running Robust Managed Detection and Response Services appeared first on Security Boulevard.

Information Security 52

Information Security CISO Risk Government 52

Anton on Security

MAY 15, 2023

Why Is Threat Detection Hard?” Changes in 2022 and Beyond in Cloud Security” EP8 Zero Trust: Fast Forward from 2010 to 2021 Now, fun posts by topic. How to think about threat detection in the cloud” [GCP blog] “Who Does What In Cloud Threat Detection?” “A What Does This Even Mean?!” “How

Threat Detection 147

Threat Detection Cloud Migration Encryption CISO 147

CyberSecurity Insiders

DECEMBER 24, 2021

We have several predictions and topics of concern for the cybersecurity industry in the coming year, from overarching fundamentals to those that will be of more concern to entry-level professionals and small and medium-sized businesses. We suggest that all cybersecurity professionals be informed on these topics as they evolve.

Cybersecurity 98

Cybersecurity Ransomware VPN Architecture 98

Anton on Security

AUGUST 9, 2023

“New Paper: “Future of the SOC: SOC People — Skills, Not Tiers” ” “Revisiting the Visibility Triad for 2020” “A SOC Tried To Detect Threats in the Cloud … You Won’t Believe What Happened Next” “Why is Threat Detection Hard?” Why Is Threat Detection Hard?” What Does This Even Mean?!” “How Is Your Fate In the Cloud?”

Threat Detection 130

Threat Detection Cloud Migration Encryption CISO 130

The Last Watchdog

SEPTEMBER 26, 2022

In fact, the 2022 Verizon Data Breach Investigation Report revealed an alarming 13 percent increase in ransomware attacks overall – greater than past five years combined – and the inability to properly manage identities and privileges across the enterprise is often the root cause. and digital identities (apps, devices, machines, etc.).

Ransomware 179

Ransomware Passwords Data breaches Accountability 179

Security Affairs

JUNE 27, 2022

The malspam messages have the topic “Free primary legal aid” use a password-protected attachment “Algorithm of actions of members of the family of a missing serviceman LegalAid.rar.” The report also includes indicators of compromise for this threat. ” states the alert published by CERT-UA.

Telecommunications 128

Telecommunications Malware Media Passwords 128

The Last Watchdog

JANUARY 23, 2024

Empower yourself by adopting repeatable behaviors to actively manage your data. While you can’t control every bit of collected data, it’s crucial to assert your right to data privacy. Give Data Brokers the Slip! ” They will delve into best practices for data protection and navigating the landscape of data brokers.

Data privacy 100

Data privacy Education Artificial Intelligence Cybersecurity 100

IT Security Guru

DECEMBER 1, 2022

After all, cybersecurity is a matter of proper human risk management. Instead, what they need to do is to manage human risk. With continuous improved training, it manages to keep the awareness level of the military personnel high, and combat-ready. If trained properly, training humans effectively can be a game changer.

Cyber threats 110

Cyber threats Cybersecurity Education Risk 110

Anton on Security

MARCH 3, 2022

Why Is Threat Detection Hard?” “A Episode 17 “Modern Threat Detection at Google” Random fun new posts: “Anton and The Great XDR Debate, Part 3” “Left of SIEM? Kill SOC Toil, Do SOC Eng” Now, top posts by topic. Right of SIEM? Get It Right!”

Threat Detection 189

Threat Detection Cloud Migration Encryption Engineering 189

CyberSecurity Insiders

MARCH 21, 2021

This post was originally published by (ISC)² Management. The security practitioner, on the other hand, is the sleuth who hunts down and neutralizes the threats, remediating the vulnerabilities. Red and Blue Team exercises, threat hunting, and pen testing also add to the allure of the exciting security practitioner profession.

Healthcare 118

Healthcare Technology Cybersecurity Engineering 118

CyberSecurity Insiders

JULY 23, 2021

Through analyst-to-analyst sharing of threat and vulnerability information, CISCP helps partners manage cybersecurity risks and enhances the collective ability to proactively detect, prevent, mitigate, respond to and recover from cybersecurity incidents. About Trustwave.

Government 118

Government Cybersecurity Digital transformation Technology 118

Anton on Security

MAY 27, 2021

A SOC Tried To Detect Threats in the Cloud … Your Won’t Believe What Happened Next Now, we all agree that various cloud technologies such as SaaS SIEM help your Security Operations Center (SOC). However, there’s also a need to talk about how traditional SOCs are challenged by the need to monitor cloud computing environments for threats.

Cloud Migration 170

Cloud Migration Architecture Technology Government 170

Troy Hunt

JUNE 11, 2020

The IoT topic got some good engagement as did the fact that we "magically" dropped over a hundred active cases of COVID-19 in Australia today (sounds like the gov just reclassifying what's still considered to be an active case). Oh - and I finally managed to buy my lift tickets for the snow too so happy days all round ??

IoT 164

IoT Data breaches Phishing Hacking 164

Malwarebytes

AUGUST 30, 2023

Given the existence of so many successful attacks in the past year, the question remains: How can organizations best protect themselves in a rapidly evolving threat landscape? A 5-year Malwarebytes veteran, he possesses in-depth technical expertise to help organizations navigate the complex threat landscape.

Marketing 74

Marketing Retail Healthcare Manufacturing 74

Anton on Security

FEBRUARY 10, 2021

SOC Threat Coverage Analysis?—?Why/How? As I mentioned in Detection Coverage and Detection-in-Depth , the topic of threat detection coverage has long fascinated me. Is there a way to assess the net threat coverage represented by the aggregate detection coverage inside each tool and then all tools?

Threat Detection 113

Threat Detection Engineering 113

Security Boulevard

DECEMBER 22, 2022

So we went and explored SaaS security in “EP99 Google Workspace Security: from Threats to Zero Trust” and “EP76 Powering Secure SaaS … But Not with CASB? And then “EP84 How to Secure Artificial Intelligence (AI): Threats, Approaches, Lessons So Far ” really did. and a curious episode on our approach to vulnerability management.

Cloud Migration 135

Cloud Migration CISO Artificial Intelligence Architecture 135

SecureWorld News

NOVEMBER 14, 2023

These amendments, which represent the most substantial revisions since the initial implementation of Part 500 in 2017, aim to address the evolving cybersecurity landscape and equip regulated entities with the necessary tools to combat cyber threats.

Financial Services 91

Financial Services Cybersecurity CISO Risk 91

Anton on Security

JANUARY 10, 2024

Here are AI our episodes aired in 2023 (we had AI episodes before , but only 3 of them): EP150 Taming the AI Beast: Threat Modeling for Modern AI Systems with Gary McGraw EP146 AI Security: Solving the Problems of the AI Era: A VC’s Insights EP144 LLMs: A Double-Edged Sword for Cloud Security? Subscribe at Apple Podcasts.

Cloud Migration 130

Cloud Migration Government Network Security Risk 130

Cisco Security

MAY 21, 2021

Joining myself, Ben Nahoney and Sana Yousef, are Matt Watchinski, Vice President of Talos, Matt Olney, Talos’ Head of Threat Intelligence and Interdiction, and Mitch Neff, who leads Talos’ communication strategy and hosts the Beers with Talos podcast. There’s also some advice for managers of managers too.

117

117

Anton on Security

MAY 24, 2023

EP84 How to Secure Artificial Intelligence (AI): Threats, Approaches, Lessons So Far Based on these episodes, you can see things that interest me the most as we asked them of every guest: What is different about securing AI vs securing another data-intensive, complex, enterprise application? Learn More at Our RSA Panel! More questions?

Artificial Intelligence 130

Artificial Intelligence CISO Risk Marketing 130

Anton on Security

NOVEMBER 20, 2020

The posts below are ranked by lifetime views and topic. Why is Threat Detection Hard?” Sometimes great old blog posts are hard to find (especially on Medium ), so I decided to do a periodic (who am I kidding, occasional?—?not not periodic ) list blog with my favorite posts of the past quarter or so. Here is my first.

Threat Detection 100

Threat Detection Encryption Government Cybersecurity 100

Anton on Security

MAY 5, 2023

Stop Glorifying Threat Actors, People! :-) In my traditional post-RSA manner, let’s go through the topic areas I care about (translation: not pre/post/in/on/through/over quantum) Security operations Let’s look at my favorite topic: security operations / detection and response. BTW, Managed XDR (MXDR) is the same as MDR.

Artificial Intelligence 130

Artificial Intelligence Threat Detection Marketing Cybersecurity 130

NopSec

AUGUST 25, 2022

The Future of Vulnerability Management podcast is dedicated to helping security professionals tackle real issues in the vulnerability management space. Lisa Xu, our CEO, interviews industry experts and leading practitioners about what can be done to prepare for the future of vulnerability management.

Penetration Testing 52

Penetration Testing Cyber threats Technology Government 52

CyberSecurity Insiders

AUGUST 5, 2022

The Team Cymru State of Attack Surface Management Report covers a broad spectrum of topics. That 49% of teams have plans to stop working with their ASM vendor in the next 12 months begs the question, what do these disaffected ASM users plan to do to manage their attack surface? Conclusion.

Risk 111

Risk Cybersecurity 111

SecureWorld News

JULY 22, 2021

Managing your hybrid infrastructure can be an overwhelming, complex task. It's almost like there should be some kind of playbook that maps out how to manage your hybrid infrastructure and overcome these hurdles. Cedric Leighton, is an incredibly relevant topic with the ransomware attacks we have seen this year.

Digital transformation 81

Digital transformation CISO Ransomware Mobile 81

The Last Watchdog

JUNE 2, 2022

Related: Managed security services catch on. Companies now reach for SaaS apps for clerical chores, conferencing, customer relationship management, human resources, salesforce automation, supply chain management, web content creation and much more, even security. Threat actors, of course, didn’t miss their opportunity.

Cloud Migration 201

Cloud Migration CISO Technology Security Awareness 201

The Last Watchdog

DECEMBER 6, 2019

Although, the topic has gained popularity amongst CIOs and CISOs, most companies are still overlooking important security blind spots when it comes to securing their digital assets outside the enterprise firewalls—domains, DNS, digital certificates. I like to think of this topic like the electricity that powers our homes.

DNS 135

DNS Firewall Social Engineering Risk 135

Malwarebytes

DECEMBER 15, 2022

Uber is facing a new cybersecurity incident after threat actors stole some of its data from Teqtivity, a third-party vendor that provides asset management and tracking services. "We We don’t just report on threats—we remove them. Keep threats off your devices by downloading Malwarebytes today.

Data breaches 90

Data breaches CSO Backups Mobile 90

Duo's Security Blog

MARCH 4, 2024

In Duo’s new eBook Attack Vectors Decoded: Securing Organizations Against Identity-Based Threats , we summarize the top attack vectors targeting users and what organizations can do fortify their defenses. So, what can organizations do to better protect themselves?

Authentication 75

Authentication Social Engineering Passwords Risk 75

Thales Cloud Protection & Licensing

MAY 23, 2022

Access Management is Essential for Strengthening OT Security. These systems are connected to and managed from the cloud to fine-tune performance, provide data analytics, and ensure the integrity of critical infrastructure across all sectors. The threat landscape. Access management is an essential mitigation strategy.

Healthcare 126

Healthcare Ransomware Authentication Threat Reports 126