Schneier on Security

SEPTEMBER 20, 2023

The numbers never made sense to me, and Ben Rothke has dug in and explained the reality : …there is not a shortage of security generalists, middle managers, and people who claim to be competent CISOs. They are not looking for someone interested in security.

Cybersecurity 341

Cybersecurity CISO Engineering Architecture 341

Security Boulevard

OCTOBER 31, 2024

UnitedHealth Group, which is still picking up the pieces after a massive ransomware attack that affected more than 100 million people, hired a new and experienced CISO to replace the previous executive who became a target of lawmakers for having no cybersecurity background.

CISO 105

CISO Cybersecurity Ransomware Social Engineering 105

eSecurity Planet

OCTOBER 18, 2024

Security Administrator In addition to identifying vulnerabilities and, in general, enforcing the organization’s security posture, security administrators or managers also manage the security and/or information systems team. Network giant Cisco Systems Inc. Network giant Cisco Systems Inc.

Cybersecurity 126

Cybersecurity Artificial Intelligence Penetration Testing CISO 126

The Last Watchdog

JULY 19, 2023

I had the chance to discuss this with Shinichi Yokohama, NTT Global CISO and John Petrie, Counselor to the NTT Global CISO, at RSA Conference 2023. We discussed how the boundaries between in-company and out-of-company IT infrastructure have become increasingly blurred making network security more challenging than ever.

CISO 244

CISO Architecture Network Security Cloud Migration 244

Security Boulevard

DECEMBER 12, 2024

A survey of IT security pros by cybersecurity firm BlackFog found that 70% of them said federal cases like that against SolarWinds' CISO hurt their opinion about the position, but some said they expected the boards of directors would take the issues of security more seriously.

CISO 104

CISO Cybersecurity Risk Government 104

Security Boulevard

MAY 10, 2023

Today’s CISOs and IT teams face unprecedented challenges—keeping up with ever more sophisticated cybercriminals, managing multiple security stacks, dealing with increasing security gaps caused by unmanaged devices in remote and hybrid work structures and more.

CISO 98

CISO Cybersecurity Network Security 98

IT Security Guru

FEBRUARY 28, 2022

When developing a security strategy for supporting a hybrid workforce, it is essential to identify risks, as well as any potential blind spots. As CISOs embark on their transformational journeys, identifying these areas of weakness should be the top priority. Security landscape requires adaptation .

CISO 97

CISO Digital transformation Artificial Intelligence Risk 97

CyberSecurity Insiders

APRIL 12, 2023

Now that we know what’s driving zero trust adoption let’s shift to how zero trust can help the CISO and CIO of a company be more secure, which I will do by drawing on the lessons and characters of “Top Gun”! At its core, zero trust is a security model that assumes all networks, devices, and users are potentially hostile.

CISO 134

CISO Cybersecurity Authentication Internet 134

SC Magazine

FEBRUARY 4, 2021

With that, evidence shows, comes a far brighter spotlight on the role of the chief information security officer. While technically part of the c-suite, CISOs historically received less attention within a company than your average CEO or chief financial officer. Our profile is certainly getting higher. Failure to communicate.

CISO 115

CISO Digital transformation Insurance Risk 115

Security Boulevard

NOVEMBER 24, 2021

Regulations are important and provide the necessary motivation for many organizations to implement security controls that may not otherwise be present, but is this enough? Is it really security? LBMC’s Mark Burnette joins the podcast as the differences between compliance and true security are discussed - check it out.

CISO 93

CISO Risk Cybersecurity Government 93

SC Magazine

MARCH 24, 2021

“It will be interesting to know if security people are even in the conversations about how to bring people back to work. My guess is they’re probably not,” said Helen Patton, advisory CISO with Cisco’s Duo Security. “I I suspect that security people, as is historically the case, will be stuck in react mode.” .

CISO 121

CISO Technology Wireless Cybercrime 121

Security Boulevard

OCTOBER 10, 2024

The increasing integration of AI and bandwidth-heavy applications is complicating network environments and making them a greater focus for C-suite leaders, according to a report by Extreme Networks. The post CIOs Sound Alarm on Network Security in AI Era appeared first on Security Boulevard.

Network Security 80

Network Security CISO Cybersecurity 80

Cisco Security

JANUARY 6, 2022

This blog has been authored by Frank Dickson, Program Vice President, Cybersecurity Products Practice, and Christopher Rodriguez, Research Director, IDC Network Security. IDC recently had the opportunity to talk to CISOs regarding the integration of Cisco Secure Workload and Secure Firewall.

Digital transformation 135

Digital transformation CISO Firewall IoT 135

The Last Watchdog

OCTOBER 25, 2021

There are several methods of active defense that companies can utilize to safeguard their networks, and it’s time for CISOs to start picking. Traditional network security solutions, such as firewalls, are not effective at detecting and stopping lateral attack movement – and that’s where the real damage is done.

Energy and Utilities 214

Energy and Utilities Cyber Attacks Mobile CISO 214

CSO Magazine

AUGUST 4, 2021

Hybrid IT environments — multiple clouds, edge, on-premises infrastructure, a distributed workforce — are putting the old approach to network security to the extreme test. The traditional centralized approach via MPLS and VPNs is becoming not only expensive, but also challenging to secure against ever-evolving cyber threats.

CISO 120

CISO Cyber threats Network Security 120

The Last Watchdog

SEPTEMBER 6, 2022

Network security has been radically altered, two-plus years into the global pandemic. The new normal CISOs face today is something of a nightmare. Related: ‘ Attack surface management’ rises to the fore. Criminal hacking collectives are thriving, more than ever.

Cloud Migration 203

Cloud Migration Cybersecurity Marketing CISO 203

Cisco Security

JULY 21, 2021

Today, the Cisco Investments team released their 2021 CISO Survival Guide to Emerging Trends in the Startup Ecosystem. Written in partnership with three leading VCs, this report breaks down trends in four areas of the security startup arena: Secure Access Service Edge (SASE), DevSecOps, Privacy & Compliance, and Automation.

CISO 145

CISO Phishing Architecture Marketing 145

Security Boulevard

FEBRUARY 19, 2024

The post Generative AI and Cybersecurity: The Impact on CISOs and Security Teams appeared first on LogRhythm. The post Generative AI and Cybersecurity: The Impact on CISOs and Security Teams appeared first on Security Boulevard.

CISO 69

CISO Artificial Intelligence Cybersecurity Technology 69

Security Boulevard

AUGUST 19, 2022

The post 3 Reasons Why CISOs are Prioritizing Cyber Risk Quantification appeared first on Security Boulevard. All of them are looking for new approaches due to changes in expectations from their boards, senior executives and other stakeholders.

Cyber Risk 69

Cyber Risk CISO Risk Financial Services 69

SC Magazine

APRIL 26, 2021

Kristin Sanders, CISO for the Albuquerque Bernalillo County Water Utility Authority, revealed how New Mexico’s largest water and wastewater utility has been addressing the security challenge. The same philosophy applies to ABCWUA’s installation of its cloud-based enterprise network security software.

CISO 82

CISO IoT VPN InfoSec 82

SC Magazine

APRIL 30, 2021

So we’ve got to rethink things, and I think the Department of Defense and Department of Homeland Security and [Federal CISO] Chris DeRusha came out and reaffirmed a zero trust strategy, which I’ve been advocating for for the last five years. We’ve drilled holes in with VPNs, which are…25-year-old technology.

CISO 109

CISO Cybersecurity Artificial Intelligence Government 109

Cisco Security

JANUARY 25, 2022

Today, most CISOs in the enterprise space have decades of experience. They’ve led teams covering everything from threat intelligence to security/privacy by design initiatives, navigated tricky transitions like the one from on-prem to the cloud, and become prominent business leaders in their companies. Join us on February 23rd .

CISO 102

CISO Network Security Engineering Technology 102

Security Boulevard

JULY 30, 2021

The post CISO Stories Podcast: Ransomware Attacks and the True Cost to Business appeared first on Security Boulevard.

CISO 64

CISO Ransomware Cyber Insurance Insurance 64

Security Boulevard

JULY 28, 2023

Thanks are in order to BSides Leeds for publishing their presenter’s outstanding BSides Leeds 2023 security content on the organizations’ YouTube channel. Permalink The post BSides Leeds 2023 – Kim Hendry – The NSM Ouroboros: Embracing The Endless Cycle Of Network Security Monitoring appeared first on Security Boulevard.

Network Security 75

Network Security Architecture CISO Education 75

Krebs on Security

OCTOBER 20, 2022

In late September 2022, KrebsOnSecurity warned about the proliferation of fake LinkedIn profiles for Chief Information Security Officer (CISO) roles at some of the world’s largest corporations. A follow-up story on Oct. A follow-up story on Oct.

Accountability 327

Accountability Cryptocurrency Scams CISO 327

Security Boulevard

SEPTEMBER 16, 2021

The post CISO Stories Podcast: Communications Before, During and After a Breach appeared first on Security Boulevard. Figuring out what to do after a breach is the wrong time to start the planning process.

CISO 59

CISO Cybersecurity Risk Government 59

Security Boulevard

JULY 12, 2021

The post CISO Roundtable: Ransomware Attacks and the True Cost to Business appeared first on Security Boulevard.

CISO 59

CISO Ransomware Cyber Insurance Insurance 59

The Last Watchdog

MARCH 4, 2024

Nonprofits can bolster their network security by insisting on strong login credentials. In a 2023 survey, 30% of CISOs named insider threats one of the biggest cybersecurity threats for the year. Investing in top-notch firewalls is also essential, as they serve as the first line of defense against external threats.

Social Engineering 213

Social Engineering Risk Cybersecurity Authentication 213

Security Boulevard

OCTOBER 7, 2021

Kathy Wang, CISO at Very Good Security, discusses challenges in extending detection and response capabilities to cloud deployments while also ensuring correlations across traditional networks, endpoints, mobile, application suites and user identities.

CISO 52

CISO Mobile InfoSec Cybersecurity 52

Security Boulevard

FEBRUARY 22, 2021

The post How to Succeed as a CISO in 2021 appeared first on Fidelis Cybersecurity. The post How to Succeed as a CISO in 2021 appeared first on Security Boulevard.

CISO 52

CISO Cybersecurity Threat Detection Network Security 52

CyberSecurity Insiders

MAY 18, 2022

A foundational approach to cybersecurity empowers CISOs to see abnormalities and block threats before they do damage. By increasing visibility into DNS traffic, CISOs can detect, block, and respond to incidents more quickly as well as use this data to institute new controls and increase overall resiliency.

DNS 140

DNS Cybersecurity CISO Social Engineering 140

Security Boulevard

JULY 19, 2024

A federal district court judge blew a hole in the SEC's case against SolarWinds, saying that while the company and its CISO could be tried for statements made before the high-profile Sunburst attack, those that came after were based on "speculation and hindsight."

CISO 117

CISO Software Malware Cybersecurity 117

Security Boulevard

FEBRUARY 29, 2024

As today’s security threat environment evolves, SaaS security posture management (SSPM) has become a key part of a CISO's security defense plan. The post A CISO’s Guide to SaaS Security Posture Management appeared first on Security Boulevard.

CISO 108

CISO Security Defenses Security Awareness Cybersecurity 108

Security Boulevard

SEPTEMBER 23, 2021

All organizations must have security awareness training programs to teach basics to end users. The post CISO Stories Podcast: Fiscally Responsible Ways to Train and Build Community appeared first on Security Boulevard. Similarly, the technical teams need to be exposed to flexible training that is interesting to them.

CISO 52

CISO Security Awareness InfoSec Risk 52

Security Boulevard

APRIL 15, 2021

Here are my unvarnished thoughts on this week of security news…in 60 second snippets. Many thanks to Steve Prentice, CISO Series and Cyber Security Headlines for having me on and asking the hard questions! The post Cyber Security Headlines – Week in Review – April 12-16, 2021 appeared first on Security Boulevard.

CISO 119

CISO Network Security 119

Security Boulevard

FEBRUARY 20, 2023

At one point, virtual private networks (VPNs) were a valuable tool for remote workers to access private networks and data centers. But with more and… The post The CISO Perspective 2023-02-20 09:19:54 appeared first on Security Boulevard.

CISO 52

CISO VPN Technology Cybersecurity 52

Security Boulevard

SEPTEMBER 30, 2021

The post CISO Stories Podcast: Security from Scratch – Incident Response on a Budget appeared first on Security Boulevard. Sam Monasteri joins the podcast to discuss key steps to implement in an incident response plan without breaking the bank by simplifying incident response to the 3 ‘P’s - check it out.

CISO 52

CISO Banking Network Security 52