This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
Vincent Hoang became the CISO in Hawaii in 2016. In this interview, Vince shares his journey and cyber priorities in protecting the Aloha State, particularly among the challenges presented by COVID-19.
Joe Sullivan, Uber’s CEO during their 2016 data breach, is appealing his conviction. Prosecutors charged Sullivan, whom Uber hired as CISO after the 2014 breach, of withholding information about the 2016 incident from the FTC even as its investigators were scrutinizing the company’s data security and privacy practices.
According to The New York Times , in 2016, while the Federal Trade Commission (FTC) was investigating an earlier breach of Uber’s computer systems, Sullivan learned of a subsequent compromise that affected more than 57 million Uber accounts. There is a reason that the rate of turnover in such roles is so high – CISOs burn out quickly.
On May 4, 2023, Sullivan was sentenced to three years of probation for felony obstruction and misprision for not reporting a 2016 breach at rideshare and delivery company Uber that threatened to expose the data of 600,000 drivers and the personal information associated with 57 million riders.
The trial of former Uber CISO Joe Sullivan marks the first time a cybersecurity chief has faced potential criminal liability. Sullivan is charged with trying to conceal from federal investigators the details of a 2016 hack at Uber that exposed the email addresses and phone numbers of 57 million drivers and passengers.
Truth, transparency and trust are the three T’s that all CISOs and CSOs should embrace as they march through their daily grind of keeping their enterprise and the data safe and secure. By way of background, Uber’s former CSO faces a five-felony count superseding indictment associated with his handling of the company's 2016 data breach.
Yesterday, a federal jury handed down a guilty verdict to Joe Sullivan, the former CSO on charges of “obstruction of the proceedings of the Federal Trade Commission and misprision of felony in connection with the attempted cover-up of a 2016 hack at Uber” according to a notice published by the Department of Justice (DOJ).
There needs to be better corporate accountability, and that means CISOs need to fully document decisions by CEOs and boards to accept risks that are against the recommendation of company security leaders and experts.
I had the chance to sit down with their CISO, Dave Stapleton, to learn more about the latest advancements in TPRM security solutions. CyberGRX launched in 2016 precisely because bespoke assessments had become untenable. -based CyberGRX. For a full drill down of our discussion, please give the accompanying podcast a listen.
This week, the former Chief Security Officer of Uber, Joseph Sullivan, was found guilty on one count of obstruction of justice and one count of misprison, the act of concealing a felony from authorities, arising out of his handling of a 2016 data breach at the company. Sullivan's actions were irregular.
Since being promoted to his current role in January 2016, he has been responsible for directing Aflac’s global security strategy and leading the information security, business continuity and disaster recovery functions across the company, prioritizing security initiatives and allocating resources based on appropriate risk assessments.
Joe Sullivan, the former Chief Security Officer (CSO) of Uber, has been sentenced to three years’ imprisonment and 200 hours of community service for covering up a cyber attack on the company’s servers in 2016, which led to a data breach affecting over 50 million riders and drivers.
No matter how good, or bad, your cybersecurity is, sophisticated threat actors always seem to find a way to make life difficult for a CISO. In 2016, Uber experienced a data breach that exposed the information of 57 million users and drivers. Data breaches can be quite a complicated issue for organizations. Uber data breach.
In a case that ups the stakes for CSOs dealing with data breaches, former Uber chief security officer Joe Sullivan was found guilty by a federal jury earlier this week of obstructing justice and of misprision (concealing) of a felony in connection with his coverup of a 2016 breach. United States Attorney Stephanie M.
Demisto launched in May 2016. Last Watchdog had the chance to visit with Michael Sutton, former longtime CISO of cloud security vendor Zscaler, who recently signed on as advisor to a fresh, new SOAR startup, Syncurity. Based in Bethesda, MD, Syncurity recently announced the close of its $2 million institutional investment round.
Founded in 2016 by Dr. Edward Amoroso, former Chief Security Officer of AT&T, TAG Cyber disrupts and reinvents cybersecurity research and provides advisory services. With the automation capabilities of a unified cloud security platform, you can integrate security into your existing DevOps and ticketing/response workflows.
His tenure at Tenable, beginning in 2016, was marked by significant achievements, including the company's IPO in 2018 and its emergence as a leader in vulnerability management. In the private sector, Yoran's entrepreneurial spirit shone. Reflections from industry leaders Yoran's influence was deeply felt across the cybersecurity community.
After speaking with the anonymous group, DataBreaches reached out to Marriott's CISO, Arno Van Der Walt, who agreed to speak with their counsel. This breach was due to old systems Starwood used before being acquired by Marriott in 2016. The cause of the breach? In February 2020, Marriott experienced a data breach that affected 5.2
Before co-founding Cyolo, Almog Apirion was a CISO for 15 years. “I With my co-founders, we formed a team to build the tool I always wanted while I was a CISO. These applications are a large security gap that CISOs normally must accept.”. In 2016, she left Dropbox to launch Vanta. Arctic Wolf.
What is Uber's former CISO accused of doing? Attorney for Northern California says Sullivan then covered up that crime so the world, including the FTC, would not find out about it: Rather than report the 2016 breach, Sullivan allegedly took deliberate steps to prevent knowledge of the breach from reaching the FTC.
In 2016, Jay Leek – then CISO at the Blackstone investment firm, and now a CyberGRX board member — was collaborating with CSOs at several firms Blackstone had invested in when a common theme came up. For a full drill down, please listen to the accompanying podcast. The key takeaways: Rise of third parties.
She was with Versum since its start-up in October 2016 and was responsible for standing up all security services required for the new company as part of its spin-off from Air Products & Chemicals. Answer: In 2020, Versum Materials was acquired by Merck KGaA, and my CISO position was eliminated in April 2020.
We made a conscious decision to focus on market education starting from our founding in 2016. In this new guide, we take a close look at the special challenges CISOs face with increasing API usage and evolving security requirements. Our guide outlines why APIs present CISOs with the biggest risk in their technology stack.
According to Microsoft’s latest update on July 6, updates are not yet available for Windows 10 version 1607, Windows Server 2016, or Windows Server 2012. On the other hand, Hammond said the “seemingly partial fix” does look to prevent remote code execution.
Posted by Royal Hansen, VP, Privacy, Safety and Security Engineering, Google, and Phil Venables, VP, TI Security & CISO, Google Cloud The National Institute of Standards and Technology (NIST) just released three finalized standards for post-quantum cryptography (PQC) covering public key encapsulation and two forms of digital signatures.
Salt has long benefited from the unique support that comes from being part of the Y Combinator accelerator program (Salt was in the Winter 2016 batch), and all these years later, we’re thrilled to have been named to not one but two of YC’s Top Company lists – the Top Private YC companies 2023 and the YC Breakthrough Companies 2023.
In fact, in March 2016, I wrote a piece in CNN calling for urgent action and offering solutions. The “people problem” is a phrase I heard in many different occasions when I met with IT managers (CISO, CSO, CIOs), many in leading research labs, national security establishments, and such. I presented it at Blackhat in 2016 and 2017.
Company Sector Year Status Verodin Cybersecurity analytics 2018 Acquired by FireEye Kenna Security Risk management 2018 Acquired by Cisco PhishMe Incident response 2016 Acquired: P.E. Named after the infamous string of nation-state cyber attacks during the late 2000s, NightDragon was established in 2016 by former McAfee CEO Dave DeWalt.
Spotlight21 will also offer access to insights and knowledge from today’s top CISOs, including Delta Air Lines CISO Deborah Wheeler, who will also join DeCesare in a conversation about security at scale in the aviation industry. Similar to professional sports, every day is game day for CISOs and analysts.
Between 2016 and 2018, the malware strain SamSam made brute force RDP attacks an integral part of its attacks on several public organizations. On a Sunday in February 2018, the Colorado CISO’s office set up a temporary server to test a new cloud-based business process. SamSam Ransomware: Malware Specializing in RDP.
GCIS was a Davos-level conference with no vendors and no selling, where scores of chief security information officers (CISOs), top CEO’s, industry and government thought leaders and leading innovators discussed the myriad challenges in and around cybersecurity and possible solutions in today’s environment.
Caleb followed that with another startup, Bluebox, a mobile application security firm he sold to Lookout in 2016 , followed by senior roles as a Managing Vice President at CapitalOne and Vice President of Information Security at Databricks. Once more unto the (data) breach! Identity Fraud: The New Corporate Battleground.
I had the displeasure of meeting a global hacker during a trip to Taiwan in 2016. The CISO also sets the direction security standards, which cybersecurity functions the organization will deploy, and align to all business priorities. Meeting A Cybercriminal — In Person. How he got there, I have no idea.
NopSec released a featured annual report, “2016 State of Vulnerability Risk Management.” In the 2016 Report, NopSec partnered with FireEye Labs to evaluate the malware-based risk of vulnerabilities and their potential risks to be “weaponized” by active malware in the wild.
» Related Stories Spotlight Podcast: QOMPLX CISO Andy Jaquith on COVID, Ransomware and Resilience Spotlight Podcast: RSA President Rohit Ghai warns Digital Transformation is magnifying Enterprise Risk Ahead of Black Hat: Fear and Pessimism in Las Vegas. Read the whole entry. »
At SecureWorld, we consider all of our Advisory Council members—the CISOs, BISOs, and senior leaders who help us plan each of our 15 in-person conferences—to be true cyber heroes. In 2016, she posthumously received the Presidential Medal of Freedom. Brilliant and irreverent, Grace was a trailblazer and example to countless many.
Founded in 2016 by Dr. Edward Amoroso, former Chief Security Officer of AT&T, TAG Cyber disrupts and reinvents cybersecurity research and provides advisory services. With the automation capabilities of a unified cloud security platform, you can integrate security into your existing DevOps and ticketing/response workflows.
CISOs , who seek a solution that will help their companies to comply with data protection regulations. Spin Technology has been providing SaaS data protection solutions since 2016. Office 365 administrators , looking for a seamless, easy-to-use, automatical ransomware protection service; 2.
It is not only the CISO, CSO or CIO’s responsibility to care and do the right thing. For instance, in August 2020, a former Uber company executive was criminally prosecuted for not disclosing a data breach back in 2016. Everyone is responsible and accountable. When one person doesn’t do their part, things can fall apart for a company.
Disinformation or PsyOps The highly effective disinformation campaigns or psychological operations affecting the US election of 2016 and Brexit votes of the same year are examples where threat actors have used social media to push a particular narrative. One area that is often overlooked by CISOs is the insider threat risk.
We organize all of the trending information in your field so you don't have to. Join 28,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content