This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
Plus, learn why GenAI and data security have become top drivers of cyber strategies. And get the latest on the top “no-nos” for software security; the EU’s new cyber law; and CISOs’ communications with boards. Looking for help with shadow AI? Want to boost your software updates’ safety? New publications offer valuable tips.
1 - CISA: Hundreds of critical infrastructure orgs hit by Medusa ransomware Dont let the Medusa ransomware group turn your network into stone. government sent this week via an advisory to cybersecurity teams, especially those at critical infrastructure organizations. Thats the message the U.S.
Check out best practices for shoring up data security and reducing cyber risk. And get the latest on cyber scams; zero-day vulnerabilities; and critical infrastructuresecurity. 1 - CSA: How to boost data security and reduce cyber risk Risk assessment gaps. Siloed cyber tools. Misaligned priorities.
Traditional systems often can’t support the demands of real-time processing and AI workloads,” notes Michael Morris, Vice President, Cloud, CloudOps, and Infrastructure, at SAS. A cloud-first approach ensures better data security, compliance with regulations, and scalability for AI-driven innovation,” says Domingues.
And get the latest on cloud security, SMBs' MFA use and the CIS Benchmarks. Document the secure baseline configurations for all IT/OT systems. Secure internet-facing devices. Plus, a new guide says AI system audits must go beyond check-box compliance. Meanwhile, a report foresees stronger AI use by defenders and hackers in 2025.
Check out a new framework for better securing open source projects. 1 - New cybersecurity framework for open source projects Heres the latest industry effort aimed at boosting open-source software security. OpenSSF created the OSPS Baseline after concluding that open-source project leaders often need help with cybersecurity.
Securities and Exchange Commission (SEC)began enforcing new cybersecurity disclosure rules. Recognizing the critical need for transparency and robust cybersecurity measures, the U.S. As part of their fiduciary duties, boards play a key role in the oversight of risks from cybersecurity threats.
Security and technology teams are under increasing pressure to strengthen their organizations cybersecurity posture. According to the National Cybersecurity Alliance , ransomware attacks, identity theft, assaults on critical infrastructure and AI-powered scams are all expected to escalate in 2025.
Meanwhile, an informal Tenable poll looks at cloud security challenges. government is urging software makers to adopt secure application-development practices that help prevent buffer overflow attacks. For more information about the threat from quantum computing: Is Quantum Computing a Cybersecurity Threat?
Due to be adopted as law by member states by October 2024, the EU Network and Information Systems (NIS2) Directive is the most important cybersecurity legislation ever enacted across member states. At that time, cybersecurity was seen primarily as a problem faced by individual organizations. This is hugely ambitious.
For IT and network security teams, the challenge is to secure their environments, regardless of where people are working. The WAN architecture must cater to the needs of office and remote workers with parity in terms of routing policies, security profile, and management of the WAN.” . Shifting locations and network connections.
Cybersecurity and Infrastructure Agency, combined with significant bills coming out of the House and Senate, are putting critical infrastructure operators on a path towards achieving cross-sector visibility and strong operational technology security. Recent efforts by the U.S. In the U.S., In the U.S.,
Join this webinar to tap into our recent research into the state of things quantum. Quantum technologies are advancing at an unprecedented pace,with quantum computing, quantum sensing and quantum securityreshaping the technological and strategic landscape.
For critical infrastructure organizations, the gains of automation and IoT technology have also meant heightened threats. These are the steps security directors can take to reduce cyber risk across their industrial operations. How automated systems expose infrastructure to cyber threats. Source: www.cisa.gov.
As 2022 ends, we highlight important data points that shine a light on the trends, challenges and best practices that matter to cybersecurity leaders eager to boost their exposure management and reduce their organizations’ cyber risk. . Dive into six illuminating cybersecurity research findings of 2022. Tenable’s Log4j resource page.
But not all organizations that store and process sensitive customer data are fully aware that a chink in infrastructure can break our digital trust. According to a recent IDC 1 Infobrief , respondents identified security as the top risk to digital trust. It also gives business users greater confidence that their data is being secured.
Darren Adcock, product manager at Redcentric responsible for the company’s privately owned Infrastructure-as-a-Service offering, the Redcentric Cloud, has strong beliefs about what differentiates a cloud vendor from a cloud partner. In our case, this also includes the knowledge that all engineers touching our cloud are security cleared.”
1 - CISA: How VIPs and everyone else can secure their mobile phone use In light of the hacking of major telecom companies by China-affiliated cyber spies, highly targeted people should adopt security best practices to protect their cell phone communications. Dive into six things that are top of mind for the week ending Jan.
It’s crucial to ensure your organization is operating lawfully in every country it operates, that your business is protected from cybersecurity threats, and that your company both manages risk and establishes processes to govern those tasks. Why are GRC certifications important? Is GRC certification worth it?
A year after the ransomware attack against the Colonial Pipeline, what can we do to further harden the IT and OT systems of power plants, fuel pipelines, water treatment plants and similar critical infrastructure facilities? government, CISOs, cybersecurity vendors and the public at large. CISOs, CIOs and business leaders.
As we celebrate Data Privacy Day, Bernard Montel, Tenables EMEA Technical Director and Security Strategist, wants to remind us that we live in a digital world and that we need to protect it. However, the volume and complexity in hybrid and multi-cloud environments make it increasingly complex to secure your businesss data.
For critical infrastructure organizations, the gains of automation and IoT technology have also meant heightened threats. These are the steps security directors can take to reduce cyber risk across their industrial operations. How automated systems expose infrastructure to cyber threats. Source: www.cisa.gov.
16 | How cybersecurity excellence boosts business | CISOs on a vendor-consolidation campaign | A quick check on converged OT/IT cybersecurity | Guides to help developers beef up on security | And much more! Top-notch cybersecurity yields business gains. Cybersecurity. For more information, read the McKinsey & Co.
Tasked with securing your org’s new AI systems? Plus, open source security experts huddled at a conference this week – find out what they talked about. That’s the topic of the paper “ Securing AI: Similar or Different? published by Google’s Cybersecurity Action Team. ” published by Google’s Cybersecurity Action Team.
For many global policymakers, the transformative impact of the COVID-19 pandemic has reinforced the need to adopt new cybersecurity and privacy policies. The COVID-19 pandemic and resulting global economic downturn represent new challenges for government security leaders. Brazil data security and Latin America regional influence.
It’s “Critical InfrastructureSecurity and Resilience Month” – check out new resources from the U.S. focuses on critical infrastructuresecurity in November If critical infrastructuresecurity is in your wheelhouse, November is a special month for you. Plus, the U.K.’s An ISACA guide could be helpful.
Topics that are top of mind for the week ending July 1 | Cybersecurity budgeting priorities. So it seemed timely to poll our webinar attendees on their cybersecurity spending priorities. For more on cybersecurity budgeting read: “ Cybersecurity spending isn't recession-proof. And much more! How time flies!
For utilities and manufacturers tasked with keeping their lights on during the COVID-19 response, scaled-down workforces can pose increased security risks. Don’t overlook your OT security blind spots. Clearly, there is a need to secure OT networks as we have in IT. But working from home is not always an option.
The post-quantum encryption standards are designed to secure “a wide range of electronic information,” including email messages and e-commerce transactions, the U.S. That’s the main topic of the Cloud Security Alliance’s new report “ Securing LLM Backed Systems: Essential Authorization Practices ,” published this week.
Check out the best practices cyber agencies are promoting during Cybersecurity Awareness Month, as a report warns that staffers are feeding confidential info to AI tools. Meanwhile, a study highlights how business decisions can derail OT security. Dive into six things that are top of mind for the week ending Oct. In the U.S.,
World Backup Day 2025: Protect Your Enterprises Data with Next Generation Cyber Secure Backup Adriana Andronescu Mon, 03/31/2025 - 13:32 Its important for an enterprise to build cyber resilience into secondary storage to protect backup copies of data. So, why would you not deploy cyber secure backup on your secondary storage?
Report finds that many critical infrastructure networks can be breached using simple attacks. 1 - CISA: Critical infrastructure orgs susceptible to common attacks After assessing the security of 143 critical infrastructure organizations in 2023, the U.S. Coast Guard (USCG).
Okay, I’ll admit it – I probably get more excited for Cybersecurity Awareness Month than most people. It has been 18 years since the first Cybersecurity Awareness Month, but this one feelsparticularly important. And perhaps, we are getting back to the fundamentals of cybersecurity rather than chasing the shiniest possible objects.
21 | The problem with Gen Zers and Millennials | Global shortage of cybersecurity pros worsens | An informal poll about attack surface growth | Password usage drops a bit | And much more! This may sound counterintuitive but employees between ages 18 and 41 tend to be less careful regarding cybersecurity.
1 - New version of MITRE ATT&CK adds guidance on generative AI, cloud threats Information about malicious use of generative AI tools. Advice about securing cloud environments. Dive into six things that are top of mind for the week ending April 26. Recommendations for protecting software development pipelines. elections With the U.S.
Plus, a CISA program is helping critical infrastructure organizations prevent ransomware attacks. government program that helps critical infrastructure organizations fend off ransomware attackers resulted in the mitigation of vulnerabilities in 850-plus devices last year. And get the latest on the Change Healthcare breach.
Trying to explain secure access service edge (SASE pronounced ‘sassy’) and zero trust can be exasperating when you’re making the case for business leaders to invest in new products and infrastructure. Both SASE and zero trust are fast-evolving security concepts, creating somewhat of a moving target. Transformative explanations.
Plus, JCDC will put special focus on critical infrastructuresecurity in 2024. Meanwhile, CISA and OpenSSF shine a spotlight on the security of software package repositories. Improve critical infrastructure’scybersecurity foundation. And scammers leveraged tech tools to steal $10 billion from U.S. And much more!
And get the latest on ransomware trends, vulnerability management practices and election security! 1 - Guide outlines logging and threat detection best practices As attackers double down on the use of stealthy, hard-to-detect “living off the land” (LOTL) techniques, cybersecurity teams should improve how they log events and detect threats.
Just five years ago, cybersecurity experts were warning that the threat from cyber extortion was poised to grow as criminals increasingly looked to profit from the use of ransomware. Ransomware presents a massive risk to national security and the operations of large organizations. Federal Trade Commission ransomware information.
A landmark global report from cybersecurity agencies emphasizes 17 attack techniques against Microsoft Active Directory and cautions organizations to step up protections. Concerns over the risks of AD compromise prompted cybersecurity agencies from Australia, Canada, New Zealand, U.K.
Check out recommendations for securing AI systems from the Five Eyes cybersecurity agencies. 1 - Multinational cyber agencies issue best practices for secure AI deployment Looking for best practices on how to securely deploy artificial intelligence (AI) systems? And don’t miss the latest CIS Benchmarks updates.
The acquisition of cloud security innovator Ermetic, once completed, will add unified, elegantly integrated CNAPP and market-leading CIEM capabilities to the Tenable portfolio. Ermetic has developed an end-to-end cloud-native application protection platform (CNAPP) and is a thought leader in cloud infrastructure entitlement management (CIEM).
Cybersecurity teams must beware of RansomHub, a surging RaaS gang. RansomHub and its affiliates have successfully attacked at least 210 organizations from a wide variety of industries, including from multiple critical infrastructure sectors. Meanwhile, a new SANS report stresses the importance of protecting ICS and OT systems.
We organize all of the trending information in your field so you don't have to. Join 49,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content