CIO

FEBRUARY 24, 2023

By Sean Duca, vice president and regional chief security officer for Asia Pacific and Japan at Palo Alto Networks Some economists predict that we could soon face a global recession. This can be a challenge to cyber budgets in organizations where security is viewed primarily as a cost center.

Security 261

Security Strategy Fractional CTO Technical Review 261

CIO

SEPTEMBER 12, 2023

Over 100,00 organizations are expected to be impacted by Network and Information Security Directive (NIS2) cybersecurity standards that European Union (EU) member states must implement by October 2024. [i] This concept of least-privilege access is fundamental to Zero Trust Security practices.

Security 242

Security Compliance Network Fashion 242

Crunchbase News

APRIL 16, 2024

Venture funding overall was still sluggish , but cybersecurity startups saw some love from investors in the first quarter of 2024. To be sure, this is not the salad days of 2021 — cybersecurity funding was still down year to year — but the sector saw its best funding quarter in three quarters. billion in 228 deals.

IoT 115

IoT Network Industry Budget 115

Tenable

SEPTEMBER 13, 2024

And get the latest on AI-model risk management and on cybersecurity understaffing! Cybersecurity and Infrastructure Security Agency (CISA). They’re currently focused on disrupting aid efforts to Ukraine, which they first attacked with the WhisperGate malware in early 2022. billion, a 45% increase over 2022.

Infrastructure 72

Infrastructure Technical Review Artificial Inteligence Recruiting 72

Ivanti

JULY 9, 2024

Microsoft, Google, Mozilla and Adobe all have releases on the July 9, 2024, Patch Tuesday. Microsoft updates Microsoft has resolved a spoofing vulnerability in Windows MSHTML Platform ( CVE-2024-38112 ) that could allow an attacker to send a malicious file to a user to be executed across the network.

Windows 125

Windows System Network Report 125

Tenable

MARCH 12, 2024

2 Critical 57 Important 0 Moderate 0 Low Microsoft addresses 59 CVEs in its March 2024 Patch Tuesday release with no zero-day or publicly disclosed vulnerabilities. Microsoft patched 59 CVEs in its March 2024 Patch Tuesday release, with 2 rated critical and 57 rated as important. It was assigned a CVSSv3 score of 9.8

Windows 124

Windows Azure Authentication Infrastructure 124

Tenable

JULY 9, 2024

5 Critical 132 Important 1 Moderate 0 Low Microsoft addresses 138 CVEs in its July 2024 Patch Tuesday release, with five critical vulnerabilities and three zero-day vulnerabilities, two of which were exploited in the wild. There have been 44 vulnerabilities in Windows Hyper-V that have been patched since 2022. and is rated important.

Windows 123

Windows Azure Authentication .Net 123

Tenable

FEBRUARY 9, 2024

CVE Description CVSSv3 Severity CVE-2024-21762 Fortinet FortiOS Out-of-bound Write Vulnerability in sslvpnd 9.6 Medium FG-IR-23-397 Analysis CVE-2024-21762 is an out-of-bound write vulnerability in sslvpnd, the SSL VPN daemon in Fortinet FortiOS. and international agencies.

Malware 122

Malware Authentication Infrastructure Analysis 122

CIO

JANUARY 11, 2024

billion in 2024, up from $563.6 The first deal of the year was announced on January 3 when Accenture said it had completed the acquisition of 6point6, a UK technology consultancy, specializing in cloud, data, and cybersecurity. billion on 38 acquisitions in 2022, $4.2 billion in 2023, according to a report from Gartner.

Technical Review 284

Technical Review Artificial Inteligence Artificial Intelligence Software Review 284

Tenable

MAY 14, 2024

1 Critical 57 Important 1 Moderate 0 Low Microsoft addresses 59 CVEs in its May 2024 Patch Tuesday release with one critical vulnerability and three zero-day vulnerabilities, two of which were exploited in the wild. of the vulnerabilities patched this month, followed by elevation of privilege (EoP) vulnerabilities at 28.8%.

Windows 119

Windows Software Review Systems Review Malware 119

CIO

APRIL 22, 2024

La cybersecurity toglie il sonno ai CIO? Sicuramente la grande maggioranza dei Chief Information Officer definisce “priorità numero uno” la sicurezza dei sistemi IT aziendali. Il recepimento deve avvenire entro il 17 ottobre 2024 e le imprese sono chiamate, fin da ora, a verificare che i propri sistemi siano “a norma”.

Disaster Recovery 261

Disaster Recovery Budget Backup Software Review 261

Tenable

JUNE 7, 2024

CVE Description CVSSv3 CVE-2024-4577 PHP-CGI Argument Injection Vulnerability 9.8 Analysis CVE-2024-4577 is a critical argument injection vulnerability in PHP that can be exploited to achieve remote code execution (RCE). Get more information DEVCORE blog: Security Alert: CVE-2024-4577 - PHP CGI Argument Injection Vulnerability PHP 8.1.29

PHP 116

PHP Windows Research Analysis 116

Tenable

JANUARY 9, 2024

2 Critical 46 Important 0 Moderate 0 Low Microsoft addresses 48 CVEs in its January 2024 Patch Tuesday release with no zero-day or publicly disclosed vulnerabilities. Microsoft patched 48 CVEs in its January 2024 Patch Tuesday release, with two rated critical and 46 rated as important. Both vulnerabilities received CVSSv3 scores of 7.8

Windows 115

Windows Authentication Cloud System 115

Tenable

JULY 12, 2024

Plus, the Linux Foundation and OpenSSF spotlight the lack of cybersecurity expertise among SW developers. Meanwhile, GenAI deployments have tech leaders worried about data privacy and data security. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI in an alert published this week. “OS So said the U.S.

Technical Review 76

Technical Review Generative AI Software Review Development 76

Tenable

JUNE 11, 2024

1 Critical 48 Important 0 Moderate 0 Low Microsoft addresses 49 CVEs in its June 2024 Patch Tuesday release with one rated as critical and no zero-day or publicly disclosed vulnerabilities. Our counts omitted two CVEs that were not issued by Microsoft, which include CVE-2023-50868 (issued by MITRE) and CVE-2024-29187 (issued by GitHub).

Windows 114

Windows Azure Storage Authentication 114

CIO

JANUARY 9, 2024

Achieving and sustaining compliance with the Payment Card Industry Data Security Standard (PCI DSS) is a daunting challenge for hotels because they handle many complex payment business cases. in order to meet the March 31, 2024, deadline, when v3.2.1 March 2022.) is set to expire. Four recommended steps in the PCI DSS v4.0

Hotels 261

Hotels Technical Review Compliance Systems Review 261

CIO

DECEMBER 18, 2023

As we approach the year 2024, Jyoti Lalchandani discusses with CIO Middle East 2024’s top tech trends and future CIO challenges. What do you forecast to be 2024’s top tech trends or emerging topics in the Middle East and what’s driving these trends? How can CIOs benefit from these new regions in 2024?

Technical Review 270

Technical Review Cloud Sustainability Weak Development Team 270

CIO

DECEMBER 5, 2023

The good news is that a Zero Trust approach can go a long way toward helping organizations take back control and develop a more robust security posture. They weren’t designed with cybersecurity considerations in mind, and they can’t be easily patched or upgraded because of operational, compliance, or warranty concerns.

System 261

System Technology Strategy Weak Development Team 261

Tenable

MARCH 8, 2024

Plus, a survey shows how artificial intelligence is impacting cybersecurity jobs. Source: “2023 Internet Crime Report” from the FBI’s Internet Crime Complaint Center, March 2024) Overall, ransomware losses skyrocketed 74% to almost $60 million, as attackers employed new tactics, such as pelting victims with multiple ransomware variants.

Infrastructure 115

Infrastructure Report Software Review Artificial Inteligence 115

Tenable

APRIL 19, 2024

Check out recommendations for securing AI systems from the Five Eyes cybersecurity agencies. 1 - Multinational cyber agencies issue best practices for secure AI deployment Looking for best practices on how to securely deploy artificial intelligence (AI) systems? And don’t miss the latest CIS Benchmarks updates.

Artificial Inteligence 74

Artificial Inteligence Trends Technical Advisors Analysis 74

Tenable

JULY 5, 2024

Fortra has released a new Cobalt Strike version with enhanced security features, according to the NCA. In June, Microsoft President Brad Smith faced tough questions during his testimony before the House of Representatives’ Homeland Security Committee, which scheduled the hearing after a U.S. as well as private sector organizations.

Insurance 72

Insurance Transportation Software Review Systems Review 72

Crunchbase News

AUGUST 14, 2024

Investors seem to be digging cybersecurity yet again. A week after Abnormal Security closed a $250 million Series D that valued the startup at $5.1 billion, secure content company Kiteworks raised a $456 million round from Insight Partners (which also participated in the Abnormal round) and Sixth Street.

Data 107

Data Company 107

Tenable

JANUARY 12, 2024

Check out expert recommendations for deploying AI tools securely. 1 - How to ensure AI helps, not hurts, cybersecurity How can organizations use artificial intelligence (AI) in a way that’s safe and that benefits cybersecurity? In addition, cyber insurance demand is forecast to grow robustly. And much more!

Systems Review 72

Systems Review System Technical Review Development Team Review 72

Ivanti

FEBRUARY 13, 2024

Microsoft has resolved a Security Feature Bypass vulnerability in Internet Shortcut Files ( CVE-2024-21412 ) which could allow an attacker to target a user with a specially crafted file designed to bypass security checks. The CVE affects Windows 11 and Server 2022. The vulnerability affects all versions of the Windows OS.

Software Review 105

Software Review Systems Review Windows Authentication 105

CIO

OCTOBER 16, 2023

In a volatile payments landscape, enterprises are preparing for the Payment Card Industry Data Security Standard (PCI DSS) version 3.2.1 to expire on March 31, 2024. Understanding the changes in the Standard is paramount for Qualified Security Assessors (QSAs) to do a comprehensive and effective assessment,” adds Stachowicz.

Compliance 312

Compliance Report Retail Healthcare 312

Crunchbase News

SEPTEMBER 5, 2024

Global venture funding slowed last month, reaching $18 billion — the lowest monthly funding so far in 2024, Crunchbase data shows. AI leads The leading sector for funding amounts in August 2024 went to AI-related companies, which raised $4.3 And in 2022 1 in 10 dollars went to this sector. billion in August 2023.

Biotech 94

Biotech Healthcare Report Marketing 94

Palo Alto Networks

OCTOBER 5, 2023

With an ever-growing attack surface in an increasingly interconnected world, there has never been a more critical time to educate and train a cybersecurity workforce with the advanced skills required for meaningful jobs that complement technological innovation. JR Gumarin presents at the 2020 in-person Secure the Future competition.

Technical Review 110

Technical Review Education Transportation Network 110

CIO

JUNE 21, 2024

in late November 2022 — MITRE would be among the first organizations looking to capitalize on the technology, launching MITREChatGPT a month later. MITREChatGPT, a secure, internally developed version of Microsoft’s OpenAI GPT 4, stands out as the organization’s first major generative AI tool. API available to projects, Cenkl says.

ChatGPT 334

ChatGPT Generative AI Technical Review Nonprofit 334

Crunchbase News

SEPTEMBER 4, 2024

billion Series E in late 2022. billion in 2024, per Crunchbase data. Kiteworks , $456M, cybersecurity: Investors seem to be digging cybersecurity yet again. Secure content company Kiteworks raised a $456 million round from Insight Partners and Sixth Street. The Costa Mesa, California-based startup locked up a $1.5

Artificial Inteligence 95

Artificial Inteligence Biotech Artificial Intelligence Travel 95

Crunchbase News

AUGUST 16, 2024

Want to keep track of the largest startup funding deals in 2024 with our curated list of $100 million-plus venture deals to U.S.-based Kiteworks , $456M, cybersecurity: Investors seem to be digging cybersecurity yet again. A week after Abnormal Security closed a $250 million Series D that valued the startup at $5.1

Biotech 101

Biotech Artificial Inteligence Artificial Intelligence Healthcare 101

Tenable

DECEMBER 22, 2023

As we bid adieu to 2023, we highlight major trends that impacted cybersecurity professionals in the past 12 months. Learn how the cyber world changed in areas including artificial intelligence, CNAPP, IAM security, government oversight and OT security. Cybersecurity teams were no exception.

Artificial Inteligence 76

Artificial Inteligence Technical Review Cloud Systems Review 76

Tenable

JANUARY 10, 2024

Two zero-day vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure have been exploited in the wild, with at least one attack attributed to nation-state actors. Background On January 10, Ivanti released a security advisory for two zero-day vulnerabilities that were exploited in-the-wild in limited, targeted attacks.

Policies 72

Policies Authentication Analysis Network 72

Cloudera

MAY 10, 2024

Cloudera and Iceberg have become increasingly interconnected since it was integrated into the Cloudera platform in 2022. Building an open data lakehouse with Iceberg delivers significant benefits increasing self-service access, ease of use, flexibility, and delivering unified security and governance for all data.

Analytics 106

Analytics Open Source Virtualization Government 106

TechCrunch

AUGUST 17, 2023

has boomed since the passage of the Inflation Reduction Act in August 2022, which offers a range of tax credits for the production of clean energy. Now, the automaker is working to secure its supply of battery materials so that its vehicles can qualify for the IRA’s EV tax credit. The onshoring of battery factories in the U.S.

Guidelines 234

Guidelines Construction Energy Meeting 234

CIO

OCTOBER 17, 2022

On May 11, 2022, the European Union (EU) reached provisional agreement on the new Digital Operational Resilience Act (DORA). In fact, one of the world’s most far-reaching cybersecurity regulations for financial services and their supply chains is a done deal. Countdown to 2024. Meeting the Challenges.

Security 261

Security Compliance Enterprise Budget 261

CEO Insider

DECEMBER 26, 2023

percent in 2022 to 3.0 percent in 2024, well below the historical (2000–19) […] The post Racing to stay competitive in 2024: Business Resilience appeared first on CEOWORLD magazine. The baseline forecast expects global growth to slow from 3.5 percent in 2023 and 2.9 Copyright CEOWORLD magazine 2023.

Policies 111

Policies Data 111

Crunchbase News

MAY 14, 2024

Eleven companies joined The Crunchbase Unicorn Board in April 2024 — a big jump up from the six companies that joined in April 2023 but still a fraction of the 40 added to the board in April 2022. Cybersecurity company Rubrik and cash reward company Ibotta both went public in April on the New York Stock Exchange.

Blockchain 127

Blockchain Software Engineering Healthcare Banking 127