Tenable

DECEMBER 29, 2023

The new year is upon us, and so we ponder the question: What cybersecurity trends will shape 2024? Their 2024 forecasts include: A bigger security role for cloud architects; a focus by ransomware gangs on OT systems in critical industries; an intensification of IAM attacks; and much more!

Software Review 76

Software Review Development Team Review Systems Review Weak Development Team 76

Tenable

JULY 12, 2024

Plus, the Linux Foundation and OpenSSF spotlight the lack of cybersecurity expertise among SW developers. Meanwhile, GenAI deployments have tech leaders worried about data privacy and data security. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI in an alert published this week. “OS So said the U.S.

Technical Review 76

Technical Review Generative AI Software Review Development 76

Tenable

DECEMBER 22, 2023

As we bid adieu to 2023, we highlight major trends that impacted cybersecurity professionals in the past 12 months. Learn how the cyber world changed in areas including artificial intelligence, CNAPP, IAM security, government oversight and OT security. Cybersecurity teams were no exception.

Artificial Inteligence 76

Artificial Inteligence Technical Review Cloud Systems Review 76

Tenable

AUGUST 23, 2024

And get the latest on ransomware trends, vulnerability management practices and election security! 1 - Guide outlines logging and threat detection best practices As attackers double down on the use of stealthy, hard-to-detect “living off the land” (LOTL) techniques, cybersecurity teams should improve how they log events and detect threats.

Security 74

Security Artificial Inteligence Azure Malware 74

The Crazy Programmer

MARCH 3, 2021

Cybersecurity isn’t something new. Businesses are emphasized to protect their data systems from hackers for decades. Unfortunately, the escalating rate of digitalization that is consuming IT resources across organizations has led to basic network and device hygiene becoming one of the most neglected components of cybersecurity.

Systems Review 147

Systems Review Guidelines Compliance Firewall 147

Tenable

JANUARY 5, 2024

Want to learn more about protecting AI systems from malicious actors? Plus, new granular configuration recommendations for securing Microsoft 365 are out. 1 - NIST categorizes cyberattacks against AI systems Are you involved with securing the artificial intelligence (AI) tools and systems your organization uses?

Artificial Inteligence 71

Artificial Inteligence Systems Review System Generative AI 71

Tenable

MARCH 29, 2024

Plus, how to cut cyber risk when migrating SCADA systems to the cloud. The 52-page report, titled “ Managing Artificial Intelligence-Specific Cybersecurity Risks in the Financial Services Sector, ” touches on cybersecurity and fraud protection; fraud threats; the regulatory landscape; and major challenges and opportunities.

Systems Review 65

Systems Review Weak Development Team Banking System 65

Tenable

APRIL 19, 2024

Check out recommendations for securing AI systems from the Five Eyes cybersecurity agencies. Plus, Stanford University offers a comprehensive review of AI trends. Deploying AI systems securely requires careful setup and configuration that depends on the complexity of the AI system, the resources required (e.g.,

Artificial Inteligence 74

Artificial Inteligence Trends Technical Advisors Analysis 74

Tenable

NOVEMBER 24, 2023

Uncle Sam wants your input on the latest version of the “Secure Software Development Attestation Form” that federal agencies will use to assess the security of software vendors. government will evaluate the security practices of its software vendors – and offer your two cents. And much more!

Software Review 71

Software Review Software Insurance Software Development 71

Tenable

APRIL 26, 2024

1 - New version of MITRE ATT&CK adds guidance on generative AI, cloud threats Information about malicious use of generative AI tools. Advice about securing cloud environments. Dive into six things that are top of mind for the week ending April 26. Recommendations for protecting software development pipelines.

Security 72

Security Cloud Artificial Inteligence Healthcare 72

Tenable

DECEMBER 15, 2023

A group that includes the Cloud Security Alliance, CISA and Google is working to compile a comprehensive collection of best practices for secure AI use. Meanwhile, check out a draft of secure configuration recommendations for the Google Workspace suite. Partners include government agencies, such as the U.S.

Groups 72

Groups Industry Hardware Software Review 72

Tenable

JULY 5, 2024

Fortra has released a new Cobalt Strike version with enhanced security features, according to the NCA. That’s according to a Bloomberg article published on June 27 that cites Microsoft officials and reports on email notifications reviewed by the news agency. federal government agencies. government officials during that breach.

Insurance 72

Insurance Transportation Software Review Systems Review 72

Tenable

JUNE 14, 2024

Check out the NCSC’s call for software vendors to make their products more secure. And the latest on the cybersecurity skills gap in the U.S. 1 - NCSC issues “code of practice” for software makers Software vendors improve the security of their products. And much more! That’s the goal of the U.K. The document from the U.K.’s

Software Review 72

Software Review Artificial Inteligence Banking Artificial Intelligence 72

Tenable

MARCH 8, 2024

Plus, a survey shows how artificial intelligence is impacting cybersecurity jobs. That’s according to ISC2’s survey “AI in Cyber 2024: Is the Cybersecurity Profession Ready?”, based on a poll of 1,123 cybersecurity pros. Source: “AI in Cyber 2024: Is the Cybersecurity Profession Ready?” And much more!

Infrastructure 115

Infrastructure Report Software Review Artificial Inteligence 115

Tenable

MARCH 25, 2020

As COVID-19 drives many government agencies to quickly migrate from a centralized to remote workforce, new cybersecurity questions arise. Here are steps government agencies can take to manage these new cyber risks. . How can we make sure cybersecurity gaps don’t emerge in such an uncertain environment? .

Government 105

Government Systems Review Software Review Technical Review 105

Palo Alto Networks

APRIL 17, 2024

In the ever-evolving landscape of cybersecurity, the specter of ransomware looms larger than ever before. Once considered merely an IT issue, ransomware has since evolved into a pervasive threat, affecting individuals, businesses and governments alike. Implement enterprise-wide Zero Trust network architecture.

Artificial Inteligence 88

Artificial Inteligence Artificial Intelligence Government Technical Review 88

Tenable

DECEMBER 9, 2020

For many global policymakers, the transformative impact of the COVID-19 pandemic has reinforced the need to adopt new cybersecurity and privacy policies. The COVID-19 pandemic and resulting global economic downturn represent new challenges for government security leaders. Here's a look at what we can expect in the year ahead.

Security 98

Security Policies Technical Review Systems Review 98

Tenable

DECEMBER 29, 2023

As we reflect on the many accomplishments Tenable OT Security achieved in 2023, one thing is clear: we couldn’t have done it without the support and collaboration of our customers and partners. I can easily say 2023 was a good year for Tenable OT Security. We believe all cyber risk needs to be viewed, ultimately, as operational risk.

Systems Review 72

Systems Review Technical Review Software Review IoT 72

Tenable

OCTOBER 27, 2023

Check out how organizations’ enthusiasm over generative AI is fueling artificial intelligence adoption for cybersecurity. government’s cyber incident response plan. Also, why boards of directors feel more comfortable with cybersecurity. business and IT pros involved in cybersecurity. And much more!

Artificial Inteligence 64

Artificial Inteligence Artificial Intelligence Technical Review Backup 64

CIO

JUNE 18, 2024

The use of gen AI with ERP systems is still in its early days, but the combination is expected to provide several benefits, including helping employees create specialized ERP functionality on their own through code wizards, says Liz Herbert, a Forrester analyst and lead author of the report, “ How Generative AI Will Transform ERP.”

Enterprise 335

Enterprise Software Review Systems Review Generative AI 335

Tenable

JULY 26, 2024

And a poll on water plant cybersecurity. Cybersecurity and Infrastructure Security Agency (CISA), the FBI and law enforcement agencies from the U.S., Check out a CISA-FBI advisory about North Korean cyber espionage on critical infrastructure orgs. Plus, what Europol found about the use of AI for cybercrime. And much more!

Artificial Inteligence 67

Artificial Inteligence CTO Technical Review Healthcare 67

Tenable

SEPTEMBER 8, 2023

Life is getting harder for cybersecurity pros, but there are ways to improve working conditions. Meanwhile, there’s a new, free attack-emulation tool for OT security teams. government is alerting about exploits to CVE-2022-47966 and CVE-2022-42475. Check out what a study found. Plus, the U.S.

Technical Review 68

Technical Review Systems Review Software Review Survey 68

Tenable

JUNE 23, 2023

Also, review concrete guidance on cloud system administration and on designing cloud apps with privacy by default. That’s why a recent IANS Research blog post about building an incident response process for ransomware caught our eye. Learn all about the DOJ’s reward for CL0P ransomware leads. And much more!

Cloud 53

Cloud Systems Review Data Disaster Recovery 53

Cloudera

MARCH 3, 2022

Whether the enterprise uses dozens or hundreds of data sources for multi-function analytics, all organizations can run into data governance issues. Bad data governance practices lead to data breaches, lawsuits, and regulatory fines — and no enterprise is immune. . Everyone Fails Data Governance. In 2019, the U.K.’s

Government 103

Government Enterprise Systems Review Data 103

Tenable

JULY 14, 2023

government for defending CI/CD pipelines. 1 – CISA and NSA issue CI/CD defense guidance Looking for recommendations and best practices to improve the security of your continuous integration / continuous delivery (CI/CD) pipelines? Learn about the guidance from the U.S. Plus, check out the 25 most dangerous software weaknesses.

Weak Development Team 52

Weak Development Team Software Review Software Technical Review 52

Tenable

JANUARY 19, 2024

government to critical infrastructure organizations: If the drones you’re using were made in China, be careful. These drones represent a “significant risk” because the data they collect could end up in the hands of the Chinese government, the U.S. Dive into six things that are top of mind for the week ending January 19. The upside?

Infrastructure 72

Infrastructure Malware Government Technical Review 72

Tenable

OCTOBER 4, 2023

Infrastructure Investment and Jobs Act created the State and Local Cybersecurity Grant Program (SLCGP) to help state, local, tribal and territorial (SLTT) governments address an ever-evolving cybersecurity threat landscape. million to SLTT governments. million to SLTT governments.

Programming 64

Programming Meeting How To Government 64

Tenable

NOVEMBER 25, 2022

Get the latest on the Hive RaaS threat; the importance of metrics and risk analysis; cloud security’s top threats; supply chain security advice for software buyers; and more! . Understanding the Ransomware Ecosystem: From Screen Lockers to Multimillion-Dollar Criminal Enterprise ” (Tenable blog). What would this look like?

Metrics 52

Metrics Cloud Backup Software Review 52

Tenable

NOVEMBER 4, 2022

Get the latest on salary trends for CISOs and cybersecurity pros; CISA’s call for adopting phishing-resistant MFA; the White House’s ransomware summit; and more! and Canada improved this year compared with 2021 as employers paid up to retain their cybersecurity chiefs amidst a shortage of qualified candidates for these jobs.

Trends 103

Trends Authentication Recruiting Banking 103

Tenable

SEPTEMBER 2, 2022

Securing machine learning systems. Shifting security left – meaning, starting security checks earlier in the software development process – has been widely hailed. Most companies expect developers to do security code reviews, but many don’t provide them with security training. And much more!

Security 52

Security Software Review Artificial Inteligence Technical Review 52

Tenable

JANUARY 20, 2023

Plus, NIST mulls major makeover of its Cybersecurity Framework. Also, the struggle to develop secure apps is real. Then check out how Uncle Sam plans to use AI and ML to boost cybersecurity. Almost 70% of organizations' SDLCs are missing critical security processes. Learn all about the spike in CISO job satisfaction.

Software Review 63

Software Review Artificial Inteligence SDLC Technical Review 63

Palo Alto Networks

FEBRUARY 29, 2020

Cyber Canon Book Review: “CISO Compass: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers” by Todd Fitzgerald (published December 3, 2019). Book Reviewed by: Ron Woerner, Bellevue University, Professor. Bottom Line: I recommend this book as a Cybersecurity Canon candidate.

Technical Review 54

Technical Review Systems Review Security Leadership 54

Tenable

FEBRUARY 9, 2024

The Volt Typhoon hacking gang is stealthily breaching critical infrastructure IT environments so it can strike on behalf of the Chinese government, cyber agencies say. critical infrastructure IT and operational technology security teams, listen up. So said cybersecurity agencies from the U.S., Critical Infrastructure. ”

Weak Development Team 67

Weak Development Team Infrastructure Generative AI Artificial Inteligence 67

Tenable

FEBRUARY 3, 2023

Also, check out our ad-hoc poll on cloud security. issues framework for secure AI Concerned that makers and users of artificial intelligence (AI) systems – as well as society at large – lack guidance about the risks and dangers associated with these products, the U.S. And much more! 1 - Amid ChatGPT furor, U.S.

ChatGPT 52

ChatGPT Artificial Inteligence Artificial Intelligence Technical Review 52

Palo Alto Networks

MARCH 20, 2024

For over 40 years, the President’s National Security Telecommunications Advisory Committee (NSTAC) has demonstrated a long track record of providing forward-looking private sector advice to the President of the United States on the most critical issues at the nexus of technology and national security.

Report 95

Report Artificial Inteligence Artificial Intelligence Telecommunications 95

Tenable

DECEMBER 6, 2023

Tenable Research has published two blogs on CitrixBleed, our initial analysis of the vulnerability as well as a Frequently Asked Questions (FAQ) blog providing added context surrounding the in-the-wild exploitation by threat actors including multiple ransomware groups. ransomware group in their exploitation of CitrixBleed.

Systems Review 74

Systems Review Authentication Analysis Malware 74

Tenable

AUGUST 5, 2022

That’s the bad news the Cybersecurity and Infrastructure Security Agency’s Cyber Safety Review Board delivered in a recent report. Drive best practices for security hygiene, such as automated vulnerability management, asset inventorying and vulnerability mitigation, as well as secure software development practices.

Development Team Review 52

Development Team Review Software Review Systems Review Technical Review 52