SC Magazine

MARCH 2, 2021

“The latest developments in relation to the SolarWinds intern’s poor password choice highlight’s how bad password hygiene is getting and how important it is for organizations to prioritize password management,” said Joseph Carson, chief security scientist and advisory CISO at Thycotic.

Passwords 129

Passwords Password Management CISO InfoSec 129

Security Boulevard

JUNE 18, 2022

We should not be focused so much on the organization’s Return on investment or Return on asset around security spending; we should consider for a moment that with every significant security awareness training, every adaptive control, and every security policy only makes the task “of being hacked” even more expensive for the cybercriminals.

Hacking 84

Hacking CISO Cybersecurity Banking 84

Spinone

JULY 29, 2020

To automate your job and remain time-efficient, you’ll probably need specialized software that helps you with app security assessment and whitelisting/blacklisting. Network Security Engineer As the name suggests, a network security engineer’s job is to protect corporate networks from data breaches, human error, or cyberattacks.

Penetration Testing 52

Penetration Testing CISO Engineering Software 52

SecureWorld News

MAY 19, 2020

Sherry brought to Princeton his 25 years of technology experience, 12 of which was in higher education as the former CISO at Brown University. In many ways, leading a security mission out of a university is like securing a city. Security culture: the security team and everyone else.

Cybersecurity 58

Cybersecurity CISO Risk Education 58

Malwarebytes

SEPTEMBER 30, 2022

In Michigan’s Cyber Partners Program , for example, local communities receive services from a CISO-level consultant. University partners : Partnering with universities can help local governments get access to talent, technological insights, even real-time network security monitoring. Network monitoring.

Government 68

Government Cybersecurity Cyber Insurance Insurance 68

Security Boulevard

APRIL 12, 2024

The post Sisense Hacked: CISA Warns Customers at Risk appeared first on Security Boulevard. A hard-coded credential catastrophe: The analytics firm kept big companies’ secrets in an insecure AWS bucket. Government says victims include the “critical infrastructure sector.”

Risk 139

Risk Hacking Government Digital transformation 139

Security Boulevard

NOVEMBER 12, 2021

Recent ransomware attacks have dominated the headlines this year. Predictions estimate that the financial impact caused by ransomware could reach $265 billion globally by 2031.

Cyber Insurance 145

Cyber Insurance Insurance Ransomware Cybersecurity 145

Security Boulevard

NOVEMBER 29, 2021

The cybersecurity world remains dynamic. On November 4, 2021, the Department of Defense (DoD) posted an update to its Cybersecurity Maturity Model Certification (CMMC) initiative, announcing program changes dubbed CMMC 2.0.

Cybersecurity 145

Cybersecurity CISO IoT Security Awareness 145

Security Boulevard

FEBRUARY 20, 2023

The post GoDaddy Hosting Hacked — for FOURTH Time in 4 Years appeared first on Security Boulevard. GoDaddy’s web hosting service breached yet again. This time, the perps were redirecting legit websites to malware.

Hacking 143

Hacking Malware Social Engineering CISO 143

Security Boulevard

AUGUST 18, 2021

Cyberattacks are on the rise. Hackers will seize on any opportunity to accelerate or obscure their cyberattacks. So imagine their delight when the COVID-19 pandemic forced companies to shutter their offices and conduct most, if not all, of their business remotely. It was open season with easy targets everywhere. The attacks that followed were some.

Cybersecurity 141

Cybersecurity CISO Security Awareness Mobile 141

Security Boulevard

NOVEMBER 23, 2022

The post ‘This is Appalling’ — Tax-Prep Sites Leak PII to Facebook appeared first on Security Boulevard. Some incredibly personal details are being sent to Facebook, without your consent, using the “Meta Pixel.”.

CISO 138

CISO Security Awareness Mobile Risk 138

Security Boulevard

NOVEMBER 18, 2022

Meta Security Guards Hacked Facebook Users appeared first on Security Boulevard. Facebook parent Meta has disciplined or fired at least 25 workers for allegedly hacking into user accounts. The post Oops!

Hacking 128

Hacking Accountability Social Engineering CISO 128

Security Boulevard

SEPTEMBER 9, 2022

Patreon, the notorious membership monetization platform, laid off its entire security team yesterday. The post Patreon Fires its Security Team — and the Internet Freaks Out appeared first on Security Boulevard. Just like that.

Internet 137

Internet Internet CISO Security Awareness 137

Security Boulevard

OCTOBER 1, 2022

Korean Job Scams Push Trojans via LinkedIn appeared first on Security Boulevard. Hey, hey, DPRK, how many people will you scam today? The post Warning: N.

Scams 134

Scams Social Engineering CISO Engineering 134

Security Boulevard

FEBRUARY 15, 2021

For IT professionals, building a set of metrics for security needs is often accompanied by feelings of anxiety, because if measurements look at the wrong data or indicators, they may lead to a false sense of security. Security programs are made up of many. The post Measuring Security Risk vs.

Risk 134

Risk CISO Security Awareness Mobile 134

Security Boulevard

NOVEMBER 11, 2022

The post NSA’s Plea: Stop Using C and C++ (Because You’re Idiots) appeared first on Security Boulevard. The C and C++ languages are unsafe. Instead, the NSA would like devs to use memory-safe languages—such as Rust.

CISO 124

CISO IoT Security Awareness Mobile 124

Security Boulevard

MARCH 10, 2023

The post ‘Extraordinary, Egregious’ Data Breach at House and Senate appeared first on Security Boulevard. Capitol Trouble: Senators, representatives and staffers suffer PII leak. Could it finally kickstart some action?

Data breaches 132

Data breaches Social Engineering Insurance CISO 132

Security Boulevard

NOVEMBER 28, 2022

and UK Ban More Chinese Kit as Xi’s Grip Weakens appeared first on Security Boulevard. Two key members of the Five Eyes intelligence alliance have made further moves to stop Chinese equipment imports. The post U.S.

Digital transformation 131

Digital transformation CISO IoT Security Awareness 131

Security Boulevard

OCTOBER 25, 2021

Wouldn’t it be great if you had enough confidence in your information security program that if a criminal gang attacked you, you would be able to defend yourself, keep your business going and notify the appropriate legal authorities and any vendor partners that might be impacted? With a mature information security program, you are able.

Ransomware 131

Ransomware Information Security Cyber Risk CISO 131

Security Boulevard

JULY 22, 2024

The post How to Prepare Your Workforce for the Deepfake Era appeared first on Security Boulevard. Of all of the AI-powered weapons, the one that your employees may be the least equipped to resist is deepfake technology.

Technology 119

Technology Social Engineering Engineering CISO 119

Security Boulevard

FEBRUARY 6, 2024

The post Why an HR-IT Partnership is Critical for Managing Cybersecurity Risk appeared first on Security Boulevard. By aligning priorities into a shared game plan, HR and IT can finally set their organizations up to defend against modern cyberthreats.

Risk 130

Risk Cybersecurity Social Engineering Cyber Risk 130

Responsible Cyber

JULY 14, 2024

Key Responsibilities: Analyzing security alerts Investigating security breaches Implementing protective measures Security Operations Manager: Oversees the daily operations of a security team, manages resources, coordinates incident responses, and ensures compliance with security policies.

Cybersecurity 52

Cybersecurity Education Penetration Testing Engineering 52

Security Boulevard

OCTOBER 26, 2021

Says it’s Microsoft’s Fault appeared first on Security Boulevard. Microsoft has issued another of its “look how clever we are” writeups of detecting APT29 hackers. But the U.S. government sees it differently. The post New Russian Hacks Revealed—but U.S.

Hacking 128

Hacking Government Social Engineering CISO 128

Security Boulevard

OCTOBER 31, 2022

The post Chinese Tech: Banned in DC, but not in the States appeared first on Security Boulevard. There’s a massive loophole in the federal ban on Chinese technology from sus firms such as Huawei and ZTE: It doesn’t stop states from buying it.

Technology 119

Technology Social Engineering CISO IoT 119

Security Boulevard

OCTOBER 5, 2021

Security professionals work hard to plan secure IT environments for organizations, but the developers who are tasked with implementing and carrying these plans and procedures are often left out of security planning processes, creating a fractured relationship between development and security.

CISO 126

CISO Security Awareness Cybersecurity Network Security 126

Security Boulevard

MAY 31, 2023

The task is now more challenging: According to a report by cyberinsurance provider Beazley, network attacks rose in the first quarter of 2023.

Cybersecurity 111

Cybersecurity Penetration Testing CISO Security Awareness 111

Security Boulevard

AUGUST 24, 2021

Organizations’ increasing use of contractors, freelancers and other third-party workers is weakening consumers’ trust in their data security, according to a study by SecZetta. The survey of more than 2,000 U.S.

CISO 116

CISO Security Awareness Software Risk 116

Security Boulevard

JULY 29, 2021

Concern over secure access to data has led to significant adoption of cloud identity management solutions, specifically identity-as-a-service (IDaaS), to ensure that people accessing applications are who they say they are–that is, to authenticate their identity. However, IDaaS solves only half the problem.

Authentication 116

Authentication CISO Security Awareness Cybersecurity 116

Spinone

DECEMBER 23, 2019

No wonder this threat keeps our client’s CISO and security teams up at night. Network Security: Firewall A firewall is your first line of defense or your computer network gatekeepers. Ransomware attacks cost smaller companies an average of $713,000 per incident.

Ransomware 52

Ransomware Backups Antivirus Firewall 52

Security Boulevard

FEBRUARY 13, 2024

The post ‘Incompetent’ FCC Fiddles With Data Breach Rules appeared first on Security Boulevard. FCC FAIL: While Rome burns, Federal Communications Commission is once again behind the curve.

Data breaches 114

Data breaches Data privacy CISO Security Awareness 114

Security Boulevard

JULY 9, 2021

The unexpected global pandemic left the world scrambling to maintain their daily activities and work as best they could.

Consumer Services 111

Consumer Services Digital transformation CISO Security Awareness 111

Security Boulevard

NOVEMBER 15, 2021

The United States and the European Union announced plans to join the Paris Call, an international effort to combat cyberthreats endangering citizens and infrastructure.

Cybersecurity 111

Cybersecurity Internet Internet CISO 111

Security Boulevard

FEBRUARY 10, 2023

The post Reddit Hacked — 2FA is no Phishing Phix appeared first on Security Boulevard. Reddit got hacked with a “sophisticated” spear phishing attack. The individual victim was an employee who clicked the wrong email link.

Phishing 111

Phishing Hacking Social Engineering CISO 111

Security Boulevard

FEBRUARY 26, 2021

This vastly increased mobility, cloud computing and social networking usage; in some cases, this transition occurred before companies and staff were fully prepared. Enterprises and their staff dealt with a lot of change in 2020. The pandemic and resulting lockdowns forced organizations to allow staff to work from home.

Mobile 109

Mobile Social Engineering CISO Engineering 109

Security Boulevard

JULY 7, 2023

The post Contec SolarView: Critical Bug Unpatched After 14 MONTHS appeared first on Security Boulevard. PV OT: VPN PDQ! CVSS known since May 2022—but still exploitable on 400+ net-connected OT/ICS/SCADA systems.

VPN 105

VPN IoT CISO Security Awareness 105

Security Boulevard

NOVEMBER 3, 2021

In my previous post, I talked about the NIST Cybersecurity Framework (CSF). Some of you, I am sure, Googled “NIST CSF” after reading it and found tons of information from NIST on the framework. Then, as you looked at the details, you might have felt intimidated by the five functions (identify, protect, detect, respond and.

Ransomware 105

Ransomware Cybersecurity CISO Security Awareness 105

Security Boulevard

MAY 2, 2022

IT leaders are changing the way they secure cloud workloads in the aftermath of the Log4j vulnerability, according to a report from Valtix. The post How Log4j Reshaped Cloud Security Thinking appeared first on Security Boulevard.

CISO 98

CISO Security Awareness Cybersecurity Network Security 98