Automated mitigation on endpoint devices and networks can be tricky
Many companies have automated systems in place for preventing, detecting, and investigating security incidents, but automating the incident response and mitigation process for networks and…
How the insurance industry could change the game for security
The recent growth in the cyber insurance market is already improving cybersecurity in some industry segments, and has the potential to do more — if…
Latest OWASP Top 10 looks at APIs, web apps
The new release of the OWASP Top 10 list is out for public comment from the Open Web Application Security Project, and while most of…
Cyberespionage, ransomware big gainers in new Verizon breach report
Verizon released its tenth annual breach report this morning, and cyberespionage and ransomware were the big gainers in 2016.Cyberspionage accounted for 21 percent of cases…
What it takes to become a data security strategist
Data security strategist is a fast-growing career, and one that will get even hotter as data from AI and IoT inititiatives pours into enterprises. By…
What it takes to become a security systems administrator
There are many more openings for security systems administrators than qualified applicants. That creates opportunities for IT professionals willing to get the training and certification.…
Don’t pay ransoms. But if you must, here’s where to buy the Bitcoins
Ransomware grew into a $1 billion industry last year, and ransom payments now account for nearly 10 percent of the entire Bitcoin economy. Avoiding becoming…
After Amazon outage, HealthExpense worries about cloud lock-in
Financial services companies as popular targets of cybercriminals for the obvious reason — they’re where the money’s at. And health care companies have medical records,…
Expert: NY breach report highlights third-party risk
New York reported a record high number of breaches last year, just after a new set of cybersecurity regulations went into effect in the state.”In…
Bitcoin rise fuels social media scams
The price of a single Bitcoin passed that of an ounce of gold for the first time this month, and scammers were quick to get…
Experts: US needs a federal CISO
Last week, the Trump administration announced the appointment of a White House cybersecurity coordinator. That’s a good first step, security experts say, but the government…
Experts divided on value of Cyber National Guard
This past weekend at SXSW, two Congressmen suggested that the U.S. create a cybersecurity reserves system, similar to the National Guard, but the idea has…
Expert: Apple may have deployed unauthorized patch by mistake
Last month, reports came out that Apple accidentally installed a fake firmware patch on internal development servers. That’s a lesson to all companies to be…
Danes targeted by malware spread through Dropbox
Earlier this week, Danish-speaking users were hit by malware spread through Dropbox, but the company responded quickly to shut down the attack. According to a…
Researchers link Middle East attacks to new victim in Europe
Kaspersky Labs announced new research this morning that shows some links between the massive Shamoon attack that took down 35,000 computers in Saudi Arabia to…
Security pros most worried about clouds, mobile
Companies were least prepared to assess the security risks of cloud and mobile technologies, according to a survey of cybersecurity professionals released this morning. Around…
AI is coming, and will take some jobs, but no need to worry
The capabilities of artificial intelligence and machine learning are accelerating, and many cybersecurity tasks currently performed by humans will be automated. There will still be…
Scholars, infosec experts call for action on Russian hacking
In the wake of reports about Russian involvement in fake news and hacks against political targets leading up to the recent presidential election, scholars and…
Report: Most cybercriminals earn $1,000 to $3,000 a month
Most cybercriminals make between $1,000 and $3,000 a month, but 20 percent earn $20,000 a month or more, according to a recent report.The data is…
SIEMs-as-a-service addresses needs of small, midsize enterprises
The city of Lewiston, in north central Idaho, has a population of around 32,000 and an information systems budget of around $800,000 a year.But it…
Report: Surveillance cameras most dangerous IoT devices in enterprise
Networked security cameras are the most likely to have vulnerabilities when it comes to securing Internet of Things devices in the enterprise, according to a…
Visibility, security top concerns for cloud computing adoption
Enterprises considering adopting public clouds are concerned about where their data is located and how it’s protected, according to a new survey by IDG.Companies will…
AI makes security systems more flexible
Advances in machine learning are making security systems easier to train and more flexible in dealing with changing conditions, but not all use cases are…
Unencrypted pagers a security risk for hospitals, power plants
For most of us, pagers went out when cell phones came in, but some companies are still using them and when the messages are sent…
Flash mobs the latest threat this holiday season
The holiday season rings in more than just higher sales for retailers. There’s also more shoplifting and lower profit margins than the rest of the…
Russian criminals’ bank attacks go global
Russian cybercriminals have field tested their attack techniques on local banks, and have now begun taking them global, according to a new report — and…
Yahoo shows that breach impacts can go far beyond remediation expenses
Companies that focus on the immediate breach remediation costs may be missing the big picture, and could be under-investing in security as a result.Several studies…
Leaky IoT devices help hackers attack e-commerce sites
Millions of IoT devices are misconfigured so that they can forward messages — which, combined with default admin settings, allows them to be used to…
How Shodan helped bring down a ransomware botnet
Shodan is a search engine that looks for internet-connected devices. Hackers use it to find unsecured ports and companies use it to make sure that…
Data leaks evolving into weapons of business destruction
Most of the recent data breaches involve customer information such as user names and passwords, credit card numbers, and medical histories. The companies hacked are…