Microsoft Entra Suite is late to the SSE pool but will still make waves
General availability of the Microsoft Entra Suite is expected to shake up the nascent SSE industry, putting particular pressure on smaller vendors. SSE – secure service edge…
AI agents can find and exploit known vulnerabilities, study shows
Researchers at the University of Illinois gave a team of autonomous AI agents a CVE description of a vulnerability and the agents were able to…
Breach and attack simulation tools: Top vendors, key features, how to choose
Breach and attack simulation (BAS) products help organizations understand their security posture by automating the tests of specific threat vectors. BAS typically uses MITRE ATT&CK…
AI governance and cybersecurity certifications: Are they worth it?
The International Association of Privacy Professionals (IAPP), SANS Institute, and other organizations are releasing new AI certifications in the areas of governance and cybersecurity or…
The state of ransomware: Faster, smarter, and meaner
Ransomware payments hit $1.1 billion in 2023, a record high and twice what they were in 2022. The frequency, scope and volume of attacks were…
Generative AI poised to make substantial impact on DevSecOps
Generative AI is expected to help write secure code, improve code analysis, create tests, write documentation, and assist with many other DevSecOps functions. But the…
How GenAI helps entry-level SOC analysts improve their skills
Security operations centers (SOCs) are using generative AI systems to automate repetitive triage and documentation tasks, allowing entry-level security analysts to spend more time on…
Assessing and quantifying AI risk: A challenge for enterprises
Artificial intelligence can help businesses through automation or by improving existing tasks, but like any technology it comes with risks if not managed well. For…
3 ways to fix old, unsafe code that lingers from open-source and legacy programs
Companies that find themselves with old, vulnerable code in their environment are likely to be short of resources to fix them. Most organizations will find…
Data loss prevention vendors tackle gen AI data risks
Data loss prevention (DLP) vendors are racing to add support for generative AI use cases to their platforms, following the popularity and increasing adoption of…
5 areas where zero trust can’t protect your organization
Adopting zero trust is no fail-safe against cyberattacks. Attackers are constantly finding new ways to get around zero trust, and this often happens because not…
VMware Cloud gains faster ransomware recovery, expanded management capabilities
VMware announced a raft of improvements to its VMware Cloud platform at this week’s VMware Explore conference in Las Vegas. Previously, VMware’s on-premises private cloud…
VMware NSX+ centralizes cloud networking and security for multicloud environments
VMware customers that have both on-prem and cloud-based architecture can now manage networking and security for both in a single management console. Unveiled at this…
VMware combines SASE and edge management in new orchestration platform, announces private 5G service
Combining things to make them easier to manage and secure is a recurring theme at this week’s VMware Explore conference in Las Vegas. To that end, VMware…
3 strategies that can help stop ransomware before it becomes a crisis
Over the past decade, the average value of ransoms demanded by hackers has gone from hundreds of dollars to hundreds of thousands — even into…
Hybrid mesh firewall platforms gain interest as management challenges intensify
As enterprise networks get more complex, so do the firewall deployments. There are on-premises firewalls to manage, along with firewalls that are deployed in virtual…
Why API attacks are increasing and how to avoid them
Australian energy company Jemena has been using APIs, in some form, for about a decade. Its use of APIs — application programming interfaces — has…
Gartner: SSE landscape shifts as vendors add more security services
The market for managed security services is shifting as enterprises weigh their requirements for cloud-based security capabilities and vendors refine their feature sets and product…
How CISOs can balance the risks and benefits of AI
The rapid pace of change in AI makes it difficult to weigh the technology’s risks and benefits and CISOs should not wait to take charge…
Cybersecurity in a Post-Quantum World
Experts agree that future quantum computers will break most current encryption when they become sufficiently powerful. The code to do this – Shor’s algorithm –…
5G network slices could be vulnerable to attack, researchers say
5G promises increased speed, lower latency, and support for a significantly larger number of connected devices. But the growth in devices and in new applications…
Insured companies more likely to be ransomware victims, sometimes more than once
Companies with cyber insurance are more likely to get hit by ransomware, more likely to be attacked multiple times, and more likely to pay ransoms,…
Siemens focuses on zero trust, legacy hardware, supply chain challenges to ensure cybersecurity of internal systems
Siemens has been working to be on top of vulnerabilities found in its products, but more importantly, to ensure the security of its internal operations.…
Secure Cloud Environments on a Budget: Focus on the Essentials
As tech companies continue to lay off employees and cut budgets, data center managers will have to figure out how to get the most bang…
AI-fueled search gives more power to the bad guys
Concerns about the reach of ChatGPT and how easier it may get for bad actors to find sensitive information have increased following Microsoft’s announcement of…
How ChatGPT Can Help and Hinder Data Center Cybersecurity
The world changed on Nov. 30, when OpenAI released ChatGPT to an unsuspecting public. Universities scrambled to figure out how to give take-home essays if…
Enterprises turn to single-vendor SASE for ease of manageability
Before the start of the Covid epidemic, a traditional WAN architecture with centralized security worked well for Village Roadshow. “Advanced security inspection services can be…
NTT, Palo Alto partner for managed SASE with AIOps
A new offering from IT services provider NTT combines Palo Alto Networks’ Prisma SASE offering with NTT’s managed network services and AIOps infrastructure. SASE – secure…
Pros and cons of managed SASE
AmerCareRoyal, which provides disposable products for the food service and hospitality industries, is the product of six mergers and acquisitions over the past several years,…
How AI chatbot ChatGPT changes the phishing game
ChatGPT, OpenAI’s free chatbot based on GPT-3.5, was released on 30 November 2022 and racked up a million users in five days. It is capable of…