CSO Magazine

AUGUST 23, 2021

The exposed details differed across different types of customers, so the level of risk users are exposed to varies. Related: The T-Mobile data breach: A timeline | Get the latest from CSO by signing up for our newsletters. ] Related: The T-Mobile data breach: A timeline | Get the latest from CSO by signing up for our newsletters. ]

Mobile 144

Mobile CSO Data breaches Phishing 144

CSO Magazine

MAY 19, 2022

Enterprises around the world are being barraged by risk events, according to a report released Wednesday by Forrester. Risk events, incidents and disruptions have become so frequent that the increased level of risk is the “new normal,” Forrester reported. To read this article in full, please click here

Risk 131

Risk 131

CSO Magazine

APRIL 5, 2023

In many organizations they also focus on securing products and public-facing applications, and one way to do this well is through risk assessment. To read this article in full, please click here And you need to understand who your interested parties are, the stakes they've got in the game, and the security objectives.”

Risk 107

Risk CSO CISO Cybersecurity 107

CSO Magazine

AUGUST 17, 2021

They must also consider a SaaS governance plan that implements security measures to reduce risk associated with their SaaS usage. That plan includes a combination of compliance frameworks, documentation/due diligence and technical measures for ongoing monitoring and risk reduction. To read this article in full, please click here

Government 128

Government CSO Risk 128

CSO Magazine

SEPTEMBER 2, 2021

“Government-led cybersecurity initiatives are critical to addressing cybersecurity issues such as destructive attacks, massive data breaches, poor security posture, and attacks on critical infrastructure,” Steve Turner, security and risk analyst at Forrester, tells CSO. To read this article in full, please click here

Government 144

Government Cybersecurity CSO Data breaches 144

CSO Magazine

SEPTEMBER 29, 2021

Both are subject to similar risks and vulnerabilities, and the cloud can sometimes be more complicated than on-premises because of our unfamiliarity with deployment and patching. Get the latest from CSO by signing up for our newsletters. ]. Recent events have brought cloud risks into focus.

CSO 126

CSO Risk 126

CSO Magazine

APRIL 5, 2022

I don’t know how many times I’ve heard cybersecurity professionals say something like, “Not having multi-factor authentication is a huge risk for our organization.” The real risk is the probability of a ransomware incident, for example, or the leak of personally identifiable information (PII) from a customer database.

Risk 143

Risk Cybersecurity Authentication Ransomware 143

CSO Magazine

DECEMBER 1, 2021

Cyber insurance, also referred to as cyber risk insurance or cyber liability insurance coverage (CLIC), is a policy with an insurance carrier to mitigate risk exposure by offsetting costs involved with damages and recovery after a cyber-related security breach or similar event. Cyber insurance definition.

Cyber Insurance 130

Cyber Insurance Insurance CSO Cyber Risk 130

CSO Magazine

NOVEMBER 2, 2021

However, such terms are not always helpful and can be inaccurate, outdated, misleading, or even risk causing harm. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ]. To read this article in full, please click here Here are the 11 cybersecurity buzzwords and phrases that should be laid to rest in 2021.

Cybersecurity 143

Cybersecurity CSO Marketing Information Security 143

CSO Magazine

AUGUST 3, 2021

The US General Accountability Office (GAO) issued the 19-page report , “Cybersecurity and Information Technology: Federal Agencies need to Strengthen Efforts to Address High-Risk Areas” on July 29. Sign up for CSO newsletters. ]. To read this article in full, please click here

CSO 142

CSO Cybersecurity Government Accountability 142

CSO Magazine

OCTOBER 21, 2021

Learn the 7 keys to better risk assessment. | Get the latest from CSO by signing up for our newsletters. ]. To read this article in full, please click here Could such variations trigger changes in the cyber insurance market and, if so, how will they impact insurance carriers and organizations?

Cyber Insurance 133

Cyber Insurance Insurance Ransomware CSO 133

CSO Magazine

AUGUST 16, 2021

Learn the 7 keys to better risk assessment. | Get the latest from CSO by signing up for our newsletters. ]. In fact, by putting cybersecurity at the fore of its cloud innovations, Odom believes the hospital has installed a more efficient, agile, and risk-focused security approach to protect is 34,000 employees.

Cybersecurity 144

Cybersecurity CSO Healthcare CISO 144

CSO Magazine

DECEMBER 1, 2021

Cyber insurance, also referred to as cyber risk insurance or cyber liability insurance coverage (CLIC), is a policy with an insurance carrier to mitigate risk exposure by offsetting costs involved with damages and recovery after a cyber-related security breach or similar event. Cyber insurance definition.

Cyber Insurance 126

Cyber Insurance Insurance CSO Cyber Risk 126

CSO Magazine

OCTOBER 5, 2021

Throughout National Insider Threat Awareness Month there has been no shortage of thoughts and ideas proffered on how to manage and mitigate insider risk that comes with having humans as part of the ecosystem. They are called upon to mitigate the risk and ameliorate the actions of the malevolent or careless employee.

CSO 121

CSO Risk 121

CSO Magazine

NOVEMBER 11, 2021

From a cybersecurity standpoint, organizations are operating in a high-risk world. The ability to assess and manage risk has perhaps never been more important. To read this article in full, please click here (Insider Story)

Risk 125

Risk Telecommunications CISO Data breaches 125

CSO Magazine

MARCH 8, 2021

But nothing more than that.” [ Learn the 7 keys to better risk assessment. | Get the latest from CSO by signing up for our newsletters. ]. To read this article in full, please click here

CSO 132

CSO Cybersecurity CISO Healthcare 132

CSO Magazine

SEPTEMBER 6, 2022

In-app browsers can pose significant security risks to businesses, with their tendency to track data a primary concern. This was highlighted in recent research which examined how browsers within apps like Facebook, Instagram and TikTok can be a data privacy risk for iOS users. To read this article in full, please click here

Risk 137

Risk Data privacy Passwords 137

CSO Magazine

JUNE 8, 2021

In December 2020, the US Government Accounting Office (GAO) made 145 recommendations to 23 federal agencies relating to supply chain risks. D’Souza, testified before Congress on supply chain risks. Get the latest from CSO by signing up for our newsletters. ]. Get the latest from CSO by signing up for our newsletters. ].

Government 121

Government CSO Risk Accountability 121

CSO Magazine

MARCH 22, 2022

Cybersecurity and risk expert David Wilkinson has heard some executives put off discussions about risk acceptance, saying they don’t have any appetite or tolerance for risk. Yet there are indicators that many CISOs aren’t having productive conversations around risk acceptance. Otherwise, they’d be unable to function.

Risk 120

Risk CISO Cybersecurity 120

CSO Magazine

SEPTEMBER 2, 2021

The guide, quietly published in late July, is in essence a primer on how to create an insider risk/insider threat program. Sign up for CSO newsletters. ]. The 11-page publication touches on four areas: To read this article in full, please click here NCSC and CDSE insider threat program guidance.

CSO 117

CSO Government Risk Cybersecurity 117

CSO Magazine

NOVEMBER 12, 2021

The risk of cybercrime is not spread equally across the globe. Cyberthreats differ widely, with internet users in some countries at much higher risk than those in nations that offer more security due to strong cybercrime legislation and widely implemented cybersecurity programs, according to fraud-detection software company SEON.

Cybercrime 129

Cybercrime Risk Internet Internet 129

CSO Magazine

JANUARY 25, 2022

The CSF came out of another EO, 13636, which is from 2013 and directed NIST to work with stakeholders to develop a voluntary framework for reducing risk to critical infrastructure. To read this article in full, please click here To read this article in full, please click here

Risk 130

Risk Cybersecurity Government 130

CSO Magazine

APRIL 11, 2022

The National Institute of Standards and Technology (NIST) is developing a voluntary framework to better manage risks associated with AI called the Artificial Intelligence Risk Management Framework (AI RMF). To read this article in full, please click here

Artificial Intelligence 125

Artificial Intelligence Risk Technology Government 125

CSO Magazine

SEPTEMBER 6, 2021

is fraught with risk and requires as much (if not more) attention than who is coming in the door. To read this article in full, please click here The hiring entity often spends an inordinate amount of time on process and acclimation onboarding new employees. The unprepared are rolling the dice.

Risk 129

Risk 129

CSO Magazine

JANUARY 18, 2022

Every company, regardless of size, should have an insider risk management playbook in place to address the insider threat. The human factor is always in play, mistakes will happen that inadvertently place the company at risk. To read this article in full, please click here

Risk 130

Risk 130

CSO Magazine

AUGUST 5, 2021

The question COOs should be asking their CISO’s is: “How can I make my product and processes the most secure and operate within acceptable risk parameters for the company and our customers?” [ Learn the 5 key qualities of successful CISOs, and how to develop them and 7 security incidents that cost CISOs their jobs.

CISO 126

CISO CSO Information Security Risk 126

CSO Magazine

MARCH 1, 2023

Known vulnerabilities, compromise of legitimate package, and name confusion attacks are expected to be among the top ten open source software risks in 2023, according to a report by Endor Labs. To read this article in full, please click here

Software 113

Software Risk 113

CSO Magazine

AUGUST 2, 2021

Researchers have identified several high-risk vulnerabilities in a popular model of pneumatic tube systems (PTS) that are used by many hospitals to transport sensitive materials including lab specimens, blood products, tests and medications between different departments. To read this article in full, please click here

Risk 135

Risk Manufacturing Healthcare 135

CSO Magazine

NOVEMBER 9, 2021

Yet, despite that, many organizations still underestimate the risk of a potential cybersecurity incident. To read this article in full, please click here (Insider Story)

Risk 129

Risk Data breaches Ransomware Cybersecurity 129

CSO Magazine

MAY 3, 2022

Conversely, one that is problematic and incohesive can have the opposite effect, negatively impacting a company’s security practices and leaving them vulnerable to risks and wasted investment. To read this article in full, please click here

CISO 128

CISO CSO Cybersecurity Accountability 128

CSO Magazine

SEPTEMBER 12, 2022

Vendors, tech firms, collectives and governments have contributed to helping raise the open-source security bar amid organizations’ increasing use of and reliance upon open-source resources, along with the complex security risks and challenges that come with it. To read this article in full, please click here

CSO 119

CSO Government Software Risk 119

CSO Magazine

APRIL 21, 2023

In fact, these changes have led to a CTI subcategory focused on digital risk protection. DRP is broadly defined as, “telemetry, analysis, processes, and technologies used to identify and mitigate risks associated with digital assets.” To read this article in full, please click here CISOs are investing here but challenges remain.

Cyber threats 124

Cyber threats Risk Digital transformation CISO 124

CSO Magazine

MARCH 24, 2023

"Basically, every organization that uses this tool is at risk of losing their AI models, having an internal server compromised, and having their AWS account compromised," Dan McInerney, a senior security engineer with cybersecurity startup Protect AI, told CSO. To read this article in full, please click here

CSO 111

CSO Authentication Engineering Internet 111

CSO Magazine

FEBRUARY 15, 2023

The use of third-party services can also come with significant—often unforeseen—risks. To read this article in full, please click here It’s often more efficient and less expensive to contract out work that would otherwise require significant effort and potentially drain in-house resources to those who can do it for you.

Risk 129

Risk 129

CSO Magazine

MARCH 18, 2021

Editor's note: This article, originally published in July, 2018, has been updated to more accurately reflect recent trends. To read this article in full, please click here Deepfake definition. Deepfakes are fake videos or audio recordings that look and sound just like the real thing.

Risk 145

Risk Software 145

CSO Magazine

APRIL 3, 2023

Mergers and acquisitions (M&A) have the potential to introduce significant cybersecurity risks for organizations. To read this article in full, please click here

Risk 125

Risk Cybersecurity Technology 125

CSO Magazine

FEBRUARY 28, 2023

Companies rightly see much promise for future revenues and productivity by building and participating in emerging digital ecosystems — but most have not given enough consideration to the risks and threats inherent in such ecosystems.

Risk 106

Risk Cyber threats Cybersecurity 106