Security Boulevard, Monday, September 23rd, 2024
Risks And Mitigation Of Insider Threats
Insider attacks are growing, whereby 60% of organizations in the past year alone have suffered employee-related data breaches. Surprised?
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Popular →
All sections ›
Archive
Security — Archive
2,513 articles · page 30 of 51
Security Boulevard, Monday, September 23rd, 2024
Safeguarding Corporate Social Presence In A SaaS World
In today's digital landscape, social media platforms stand at the heart of a brand's identity, reputation, and customer engagement. Despite this, many organizations overlook the security of their social media accounts when considering SaaS apps.
more → Security Boulevard, Monday, September 23rd, 2024
Take Advantage of FCC Funding with ManagedMethods
We recently hosted a live webinar that discussed what you need to know about the FCC Schools and Libraries Cybersecurity Pilot Program. This webinar outlines an overview of the new pilot program, demonstrates how ManagedMethods products align with funding criteria, and concludes with how our products enhance K-12 districts' Google Workspace, Microsoft 365, and online browsing security posture.
more → Security Boulevard, Monday, September 23rd, 2024
The Cybersecurity Maturity Model Certification (CMMC) Rule is Final!
Last week, the CMMC Final Rule (known as CFR 32) was released from OIRA, meaning no more changes can be made.
more → Security Boulevard, Monday, September 23rd, 2024
The Importance Of Cybersecurity Awareness And Insider Threat Management
Organizations are generating vast volumes of data at lightning speed and need to store that data in user-accessible ways to optimize business results.
more → SC Media, Monday, September 23rd, 2024
Why Threat Intelligence Is Essential To Consolidated Security
Threat intelligence is a vital part of cybersecurity. It gives defenders the information they need to prepare for and guard against potential attackers, mitigating the risks of intrusions and data loss. Real-time feeds of threat data can even help organizations thwart zero-day threats that would otherwise slip past network and endpoint protections.
more →
Security Boulevard, Friday, September 20th, 2024
What Is An Information Security Management System (ISMS)?
If you've spent any length of time reading about the internationally accepted security framework laid out in ISO 27001, you've likely come across the term ISMS or Information Security Management System. You may wonder, though; what is the ISMS specifically, how do you set one up, and what does it do for your business? Let's talk about it.
more → SecurityIntelligence, Friday, September 20th, 2024
New Cybersecurity Advisory Highlights Defense-In-Depth Strategies
In 2023, the Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team operation against an FCEB (Federal Civilian Executive Branch) organization. In July 2024, CISA released a new CSA that detailed the findings of this assessment along with key findings relevant to the security of the organization's network.
more →
Security Boulevard, Thursday, September 19th, 2024
Understanding Credential Stuffing Attacks
The firehose of security incidents - data breaches, ransomware, and supply chain attacks - often obscures the methods that attackers use to create these incidents. One of the most common is credential stuffing, which is a type of authentication-related attack that leads to account takeovers (ATO) and ultimately theft or fraud.
more → SearchSecurity, Thursday, September 19th, 2024
DNS Security Best Practices To Implement Now
DNS is a key component in any enterprise network. Auditing DNS servers and encrypting DNS traffic are just two of the steps to take to protect your organization's DNS deployment.
more →
Security Boulevard, Thursday, September 19th, 2024
Century-Long Innovation: A Legacy Of Outpacing Cyber Threats
Over the past century, international printing machinery manufacturers like Komori have had to innovate because of the internet. As a manufacturer, they rely on the distribution chain for the overall success of their companies.
more → DARKReading, Thursday, September 19th, 2024
An AI-Driven Approach To Risk-Scoring Systems In Cybersecurity
By enhancing threat detection, enabling real-time risk assessment, and providing predictive insights, AI is empowering organizations to build more robust defenses against cyber threats.
more →
Analytics Insight, Wednesday, September 18th, 2024
SecOps Explained: How It Differs From DevOps In Modern IT
SecOps vs. DevOps: Understanding the key differences in modern IT security practices
more →
Security Boulevard, Wednesday, September 18th, 2024
Rethinking Third-Party Risk Management (TPRM): Managing Third-Party SaaS Risks
You think you've nailed your third-party risk management (TPRM) strategy. You've assessed your vendors, reviewed their security postures, and your risk dashboard is looking pretty green.
more → Security Boulevard, Wednesday, September 18th, 2024
DMARC for PCI DSS: Your Practical Guide to 2025 Compliance Implementation
The Payment Card Industry Data Security Standard (PCI DSS) is a comprehensive set of security requirements that protect cardholder data from unauthorized access, misuse, and fraud. DMARC (Domain-based Message Authentication, Reporting, and Conformance) implementation will become mandatory for the payments industry by March 2025.
more → Security Boulevard, Tuesday, September 17th, 2024
The New Era Of SOCs: Simplifying Cybersecurity For SMBs
The cybersecurity landscape is undergoing a significant shift. Traditionally, security operations centers (SOCs) relied on a complex ecosystem of disparate tools from various vendors.
more → HelpNet Security, Tuesday, September 17th, 2024
The Growing Danger Of Visual Hacking And How To Protect Against It
In this Help Net Security interview, Robert Ramsey, CEO at Rain Technology, discusses the growing threat of visual hacking, how it bypasses traditional cybersecurity measures, and the importance of physical barriers like switchable privacy screens.
more →
Security Boulevard, Tuesday, September 17th, 2024
Making The Complex Simple: Authorization For The Modern Enterprise
For decades, companies have struggled to modernize their legacy authorization systems, hindering security and user experience. These outdated approaches often lack the security features to protect sensitive data in today's digital world.
more → devops.com, Tuesday, September 17th, 2024
Embracing Devsecops: The Future Of Secure Software Delivery
Over a decade ago, development and security were separate worlds. Dev teams would build features at breakneck speed, while security was an afterthought - a final hurdle before release. It was inefficient, frustrating, and - as it turned out - extremely risky.
more →
ITProToday, Monday, September 16th, 2024
What Is IT Security? Essentials Of IT Security Explained
IT security is vital for protecting systems, data, and networks. Explore strategies, critical domains, and career opportunities in protecting information assets.
more →
Security Boulevard, Monday, September 16th, 2024
Five Tools That Can Help Organizations Combat AI-Powered Deception
The digital deception game is on track to becoming more intense. We're talking about artificial intelligence (AI) that mimics your boss's voice so well that it'll make you do a double-take; a deepfake that sends the stock market on a roller coaster, or a fake speech made by a world leader that misleads voters or instigates conflict between nations.
more → DataCenter Knowledge, Monday, September 16th, 2024
Best Data Center Security Practices In The Age Of Digital Transformation
Tina D'Agostin, CEO of Alcatraz AI, shares essential practices for securing your data center in 2024.
more →
Analytics Insight, Friday, September 13th, 2024
Top 5 Vulnerability Management Mistakes Companies Make (Plus A Bonus Mistake To Avoid)
Are you confident your vulnerability management is doing its job, or do you sometimes feel like it's falling short?
more → DARKReading, Friday, September 13th, 2024
Cybersecurity Compliance And Beyond: How Protocols Drive Innovation And Growth
In today's digital age, cybersecurity compliance is no longer just a legal necessity or a defensive measure; it has become a catalyst for innovation and growth.
more → HelpNet Security, Thursday, September 12th, 2024
Top Priorities For Federal Cybersecurity: Infrastructure, Zero Trust, And AI-Driven Defense
In this Help Net Security, Erica Banks, VP and a leader in Booz Allen's civilian services business, discusses the Federal Cybersecurity Strategy's role in safeguarding national assets.
more → Security Boulevard, Thursday, September 12th, 2024
The Importance Of IAM In Critical Infrastructure
Over the past year, the world's critical infrastructure (CI) - including energy, healthcare, finance, communications, manufacturing, and transport - has suffered a constant barrage of attacks.
more → Security Boulevard, Wednesday, September 11th, 2024
Navigating The Risks Of Namespace Collision: A Critical Security Challenge
In today's digital landscape, organizations face a multitude of cybersecurity threats, one of which is the often-overlooked issue of namespace collision.
more → HelpNet Security, Wednesday, September 11th, 2024
How AI And Zero Trust Are Transforming Resilience Strategies
In this Help Net Security interview, John Hernandez, President and General Manager at Quest Software, shares practical advice for enhancing cybersecurity resilience against advanced threats. He underscores the need to focus on on-premises and cloud environments, adapt to new regulations, and address supply chain vulnerabilities.
more → Security Boulevard, Wednesday, September 11th, 2024
Can AI Help Fix Security Vulnerabilities?
We get a lot of questions from our customers around the topic of artificial intelligence in combination with SAST (Static Application Security Testing). Everybody is looking for the next level of efficiency around DevSecOps.
more → DARKReading, Tuesday, September 10th, 2024
Platform Engineering Is Security Engineering
For modern applications built on Kubernetes and microservices, platform engineering is not just about building functional systems but also about embedding security into the fabric of those systems.
more → Security Boulevard, Tuesday, September 10th, 2024
Phishing Via Typosquatting And Brand Impersonation: Trends And Tactics
Introduction Following the 2024 ThreatLabz Phishing Report, Zscaler ThreatLabz has been closely tracking domains associated with typosquatting and brand impersonation - common techniques used by threat actors to proliferate phishing campaigns.
more → HelpNet Security, Tuesday, September 10th, 2024
How Human-Led Threat Hunting Complements Automation In Detecting Cyber Threats
In this Help Net Security interview, Shane Cox, Director, Cyber Fusion Center at MorganFranklin Consulting, discusses the evolving methodologies and strategies in threat hunting and explains how human-led approaches complement each other to form a robust defense.
more → Security Boulevard, Tuesday, September 10th, 2024
3 Steps To Effective Threat Exposure Management
Do you really know how exposed your organization is?
more → Security Boulevard, Monday, September 9th, 2024
Sedexp Malware: The Stealthy Linux Threat Evading Detection
A new, sophisticated Linux malware named 'sedexp' has been discovered, quietly evading detection since 2022.
more → Security Boulevard, Monday, September 9th, 2024
How To Create A Comprehensive Cybersecurity Strategy Roadmap For Long-Term Protection
Cyber threats are becoming more frequent, sophisticated, and damaging in today's rapidly evolving digital landscape.
more → Security Boulevard, Monday, September 9th, 2024
Managing Certificate Chaos After Google's Entrust Distrust
When Google decided to stop trusting new TLS certificates from Entrust, it didn't just create a technical challenge-it unleashed an operational crisis for many organizations.
more → Security Boulevard, Monday, September 9th, 2024
Embracing Soren Kierkegaard's Philosophy In Cybersecurity
Let's talk about the cybersecurity life you lead. I bet you often find yourself trapped in a cycle of superficial solutions and temporary fixes.
more → SearchSecq, Friday, September 6th, 2024
What Is Identity Threat Detection And Response (ITDR)?
Identity threat detection and response (ITDR) is a collection of tools and best practices aimed at defending against cyberattacks that specifically target user identities or identity and access management (IAM) infrastructure.
more → Security Boulevard, Friday, September 6th, 2024
NIST CSF 2.0 Cyber Security Framework
NIST has released Version 2.0 of its widely used Cybersecurity Framework (CSF), a guidance document for mitigating cybersecurity risks. This update is not just a revision but a transformative approach to secure digital assets and infrastructures.
more → Security Boulevard, Monday, September 2nd, 2024
Is Cloud Security Ready For A Pivot To Behavioral Detection & Response
Signature-based threat detection has been a central figure in cybersecurity from the start. However, its history in endpoint and network security reveals that the inherent limitations of signature-based approaches have often driven practitioners and vendors to shift toward behavioral methods.
more → techradar.pro, Friday, September 6th, 2024
CTEM: The Next Frontier In Cybersecurity
Understanding the cybercrime ecosystem has never been more important than in 2024. Ransomware attacks and data breaches continue to proliferate, and it's imperative that executives understand what's driving the increase and more importantly how to prevent oneself from becoming a victim.
more →
Security Boulevard, Thursday, September 5th, 2024
Top 10 Benefits Of Outsourcing Your Data Protection Officer
Today, protecting sensitive data has become more critical than ever. Businesses need to follow data protection laws to avoid penalties and reduce the risk of data breaches, especially concerning the processing of personal data. One way to achieve this is through Data Protection Officer outsourcing (DPO outsourcing).
more → Cloudtech, Thursday, September 5th, 2024
The Achilles' Heel Of Enterprise Security: How Moving On From Microsoft Active Directory Strengthens Your Security Posture
High-profile, wide-ranging cybersecurity breaches-the SolarWinds supply chain attack, the Colonial Pipeline ransomware incident, Russian hacking of Microsoft-have brutally exposed the consequences of having inadequate identity security controls.
more →
Security Boulevard, Thursday, September 5th, 2024
Choosing The Best Cybersecurity Prioritization Method For Your Organization
As businesses digitally transform faster than ever, cyber threats are evolving equally rapidly.
more → Security Boulevard, Thursday, September 5th, 2024
An Introduction To Trackers And The Data They Collect
Trackers are everywhere and come in many different forms. Some tracking methods are more invasive than others; this post aims to explain what 'trackers' are, how they work, and give examples of the data they collect.
more → HelpNet Security, Friday, September 6th, 2024
Protecting National Interests: Balancing Cybersecurity And Operational Realities
With cyber threats becoming increasingly sophisticated and targeting critical infrastructure, in this Help Net Security interview, David Ferbrache, managing director of Beyond Blue, discusses the current state of cybersecurity readiness and resilience.
more → Security Boulevard, Wednesday, September 4th, 2024
Navigating Compliance: Password And Credential Security
In today's digital age, the threat of cyberattacks is growing at an alarming rate. The frequency and impact of these attacks are escalating, prompting governments and industry bodies to introduce a slew of regulations designed to protect sensitive data.
more → Security Boulevard, Tuesday, September 3rd, 2024
SaaS Security: Are You Moving Fast Enough?
Reflecting on the more than 500 companies we serve and several recent meetings with IT and security teams, I am surprised that so many organizations are ill-prepared to counter the growing threat of cybersecurity attacks and breaches.
more → HelpNet Security, Tuesday, September 3rd, 2024
How Ransomware Tactics Are Shifting, And What It Means For Your Business
In this Help Net Security interview, Tim West, Director of Threat Intelligence and Outreach at WithSecure, discusses Ransomware-as-a-Service (RaaS) with a focus on how these cybercriminal operations are adapting to increased competition, shifting structures, and a fragmented ecosystem.
more → Security Boulevard, Tuesday, September 3rd, 2024
Ever-Increasing Data Breach Costs: Why And What To Do
Data breach costs keep rising-it's a perennial occurrence at this point to see these types of statements. But it doesn't necessarily need to be the default for this trend to continue. In fact, you could argue that frequent reports, warnings and advisories should help drive costs down. So, what's going on with ever-increasing data breach costs? And what can you do about it?
more →