This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
” “Additionally, we have been sharing Indicators of Compromise (IOCs) and our CISO has been speaking directly with our customers’ security teams to provide updates on the investigation and our eDiscovery process,” the statement continues.
Joe Sullivan, Uber’s CEO during their 2016 databreach, is appealing his conviction. Prosecutors charged Sullivan, whom Uber hired as CISO after the 2014 breach, of withholding information about the 2016 incident from the FTC even as its investigators were scrutinizing the company’s data security and privacy practices.
A jury yesterday found former Uber security chief Joe Sullivan guilty of covering up a massive databreach; the conviction makes Sullivan likely to become the first executive to face prison time over the mishandling of a cyberattack. Serving as a Chief Information Security Officer is a daunting task. Click To Tweet.
A leading cyber lawyer in Australia has warned CISOs and other IT leaders their organisations and careers could be at stake if they do not understand data risk and data governance practices.
Earlier today, a public relations firm working with Sisense reached out to learn if KrebsOnSecurity planned to publish any further updates on their breach (KrebsOnSecurity posted a screenshot of the CISO’s customer email to both LinkedIn and Mastodon on Wednesday evening).
LAS VEGAS — One fundamental reason some 7,000 or so IT pros are making the trek here this week is that no one ever wants to get caught in the crossfire of a devastating databreach. Plot thickens To qualify to participate in the Black Hat show run taking place on August 8th from 6-8PM, CISOs are asked to solve a cipher.
Insight #2: Most CISOs fear getting axed over databreaches A recent survey revealed that 77% of CISOs feel significant pressure to prevent databreaches, often to the point of fearing for their jobs. This simple step can significantly reduce your risk of a security breach.
It all feels a bit "business as usual" this week; databreaches, IoT and 3D printing. But what I'm most excited about is what I probably spent the least amount of time talking about, that being the work 1Password and I have been doing on our "Hello CISO" series.
CISO Magazine , a publication dedicated to covering issues near and dear to corporate chief information security officers everywhere, has graciously awarded this author the designation of “ Cybersecurity Person of the Year ” in its December 2019 issue. KrebsOnSecurity is grateful for the unexpected honor. More at cisomag.com.
The CISO: Guardian of Data while Navigating Risk Strategic Insights for the Boardroom and Shaping Future Business madhav Thu, 12/05/2024 - 06:03 CISOs have one of the most vital roles in organizations today. That’s because, regardless of industry or location, organizational data has become a precious asset.
Gary Perkins, Chief Information Security Officer, CISO Global While the scale of this databreach is alarming – with 277 gigabytes of data reportedly stolen – it’s important not to panic. The post Identity Under Siege: Responding to the National Public DataBreach appeared first on Security Boulevard.
We also saw, for the first time, a security chief sentenced to prison for concealing a databreach. These events and many more have changed the business landscape and forced CISOs to steer a course through uncertain waters. To read this article in full, please click here
The post Cybersecurity Insights with Contrast CISO David Lindner | 11/15/24 appeared first on Security Boulevard. This empowers employees to identify and escalate potential risks, bolstering your overall security posture and resilience against cyberattacks.
GoDaddy WordPress databreach timeline. In a Securities and Exchange Commission (SEC) filing , Demetrius Comes, GoDaddy’s CISO, announced that the organization had discovered unauthorized access to its Managed WordPress servers. November 17, 2021: GoDaddy discovers unauthorized third-party access on Managed WordPress.
Often inadvertent databreaches stem from a well-meaning employee trying to meet the needs of clients but without the technical systems to facilitate. Their database of phone numbers, along with other key information about our phones’ usage and characteristic, makes them more valuable to hackers than your average databreach.
KrebsOnSecurity reviewed the Web sites for the global top 100 companies by market value, and found just five percent of top 100 firms listed a chief information security officer (CISO) or chief security officer (CSO). Nobody’s saying these companies don’t have CISOs and/or CSOs and CTOs in their employ.
CISA adds Veeam Backup and Replication flaw to its Known Exploited Vulnerabilities catalog North Korea-linked APT37 exploited IE zero-day in a recent attack Omni Family Health databreach impacts 468,344 individuals Iran-linked actors target critical infrastructure organizations macOS HM Surf flaw in TCC allows bypass Safari privacy settings Two Sudanese (..)
Department of Health and Human Services (HHS) has stepped in to ensure patients are made aware if their sensitive data was compromised during February's massive cyberattack on health IT firm Change Healthcare. The unprecedented directive stems from Change Healthcare's business acquisition by UnitedHealth in 2022.
Recently, a friend posted a wonderful piece attributed to their hero, the CISO. In business today, the role of a CISO is crucial. With the consistency and severity of cyber attacks and databreaches worsening, compliance becoming a minefield, organisations are turning to (and paying) CISOs for protection and guidance.
In a sentencing memorandum filed with a San Francisco federal court on April 27, 2023, prosecutors argued that Joe Sullivan—the former CISO of Uber and a former federal computer crimes prosecutor himself (with the same office)—should serve 15 months in federal prison for his role in the ride-sharing company’s concealment of a databreach.
The post ‘Extraordinary, Egregious’ DataBreach at House and Senate appeared first on Security Boulevard. Capitol Trouble: Senators, representatives and staffers suffer PII leak. Could it finally kickstart some action?
When databreaches escalate, cyber-attacks grow more sophisticated, nation states ramp up their digital warfare, and regulations tighten the noose, staying ahead isnt just an optionits your only line of defence. For CISOs and cyber risk owners, this isnt just a riskits a gamble no one can afford to take.
Cary, NC, May 28, 2024, CyberNewsWire — If there is a single theme circulating among Chief Information Security Officers (CISOs) right now, it is the question of how to get stakeholders on board with more robust cybersecurity training protocols. Human error remains one of the leading causes of security breaches.
Dell, one of the world's largest technology companies, has just disclosed a major databreach that may have compromised the personal information of tens of millions of current and former customers. The breach went undetected for several months before finally being discovered in early 2023.
The post ‘Incompetent’ FCC Fiddles With DataBreach Rules appeared first on Security Boulevard. FCC FAIL: While Rome burns, Federal Communications Commission is once again behind the curve.
The role of a Chief Information Security Officer (CISO) is undeniably complex, yet incredibly rewarding. However, the challenges faced by CISOs are mounting, exacerbated by the evolving threat landscape and regulatory environment. These incidents underscore the critical importance of effective governance in cybersecurity programs.
Databreaches can be quite a complicated issue for organizations. No matter how good, or bad, your cybersecurity is, sophisticated threat actors always seem to find a way to make life difficult for a CISO. T-Mobile databreach. The company disclosed the databreach quickly after discovering it.
A review of the executives pages published by the 2022 list of Fortune 100 companies found only four — BestBuy , Cigna , Coca-Cola , and Walmart — that listed a Chief Security Officer (CSO) or Chief Information Security Officer (CISO) in their highest corporate ranks. Nor is the average pay hugely different among all these roles.
Joe Sullivan, the former Chief Security Officer (CSO) of Uber, has been sentenced to three years’ imprisonment and 200 hours of community service for covering up a cyber attack on the company’s servers in 2016, which led to a databreach affecting over 50 million riders and drivers.
District Judge William Orrick sentenced former Uber CISO and former DOJ cybercrime prosecutor Joe Sullivan to three years of probation and 200 hours of community service for his role in concealing a massive databreach at Uber from the public and from the FTC. While the court rejected the government’s.
Databreaches are a security nightmare that most CISOs will face at some point in their careers. While most databreaches are not recoverable, security teams can still reduce the impact and limit the damage.
A new report from Bitdefender found that although IT leaders have an obligation to report attacks, over 42% of them have been told to keep quiet when a breach should have been reported. The post 70% of US IT Leaders Told Not to Disclose DataBreaches appeared first on Security Boulevard. Shockingly, in the U.S.,
As the world continues to face unprecedented cyber threats, Chief Information Security Officers (CISOs) are facing a growing number of challenges in their roles. In 2023, these challenges are likely to increase, and CISOs will have to be well-equipped to overcome them. Failure to do so can result in hefty fines and penalties.
UnitedHealth Group, which is still picking up the pieces after a massive ransomware attack that affected more than 100 million people, hired a new and experienced CISO to replace the previous executive who became a target of lawmakers for having no cybersecurity background.
Marriott International has confirmed that it was victim to another databreach, its third since 2018, as an anonymous group of threat actors says it was able to successfully exfiltrate 20 GB of data, which includes credit card and other confidential information. The cause of the breach? Fool me twice, shame on me.
I've been on panels with large hospital CISOs who said, 'It's not that I don't know what to do, or that I don't have executive leadership buy in; it's that we don't have the money and resources to implement proper controls. If this information falls into the wrong hands during a databreach, it can be used to commit identity theft or fraud.
T-Mobile has fallen victim to yet another databreach, its second one in 2023 , adding to the already long list of breaches the telecom giant has experienced in recent years. Despite efforts to address the databreach, the fact the company has experienced multiple breaches in recent years could have lasting consequences.
Nearly half of CISOs will change jobs by 2025 due to stress caused by the risk of being breached while trying to retain staff, according to the Gartner report, Predicts 2023: Cybersecurity Industry Focuses on the Human Deal. Although burnout is nothing new, it did become more visible and common during and after COVID-19.
A Uber breach verdict was handed down that could prove highly impactful to CISOs and CSOs in the near and distant future. The post “How will the Uber Breach Verdict Affect the CISO Role in the Future?” The post “How will the Uber Breach Verdict Affect the CISO Role in the Future?”
On January 11, 2023, presiding United States District Judge William Orrick in San Francisco denied the motion of Joe Sullivan, the former CISO of Uber, for a judgment of acquittal. The post Former Uber CISO Conviction Affirmed by Trial Court appeared first on Security Boulevard.
We organize all of the trending information in your field so you don't have to. Join 28,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content