CSO Magazine

SEPTEMBER 2, 2021

Sign up for CSO newsletters. ]. The guide, quietly published in late July, is in essence a primer on how to create an insider risk/insider threat program. Learn 12 tips for effectively presenting cybersecurity to the board and 6 steps for building a robust incident response plan. NCSC and CDSE insider threat program guidance.

CSO 117

CSO Government Risk Cybersecurity 117

CSO Magazine

SEPTEMBER 29, 2022

Cybersecurity continues to be high on the agenda of governments across the globe, with both national and local levels increasingly working to counter cybersecurity threats. Much like last year , 2022 has seen significant, government-led initiatives launched to help to address diverse security issues.

Government 130

Government Cybersecurity Banking 130

CSO Magazine

JULY 13, 2021

The dark web sites operated by the notorious REvil ransomware group suddenly went offline on Tuesday, prompting speculation that the US or Russian governments stepped in. Get the latest from CSO by signing up for our newsletters. ] To read this article in full, please click here

CSO 144

CSO Ransomware Government Malware 144

CSO Magazine

OCTOBER 4, 2021

Over the past two years, the rise of big-ticket ransomware attacks and revelations of harmful software supply chain infections have elevated cybersecurity to the top of the government's agenda. Get the latest from CSO by signing up for our newsletters. ] Learn the The 5 types of cyberattack you're most likely to face. |

CSO 141

CSO Cybersecurity Government Ransomware 141

CSO Magazine

AUGUST 9, 2021

Government-sponsored hackers, who carry out cyberespionage campaigns, invest more resources than ever to find new ways of attacking the cloud. Microsoft 365 is a gold mine," Doug Bienstock, incident response manager at Mandiant, tells CSO. From an intelligence collector's perspective, it makes sense to target it.

CSO 143

CSO Government 143

CSO Magazine

AUGUST 12, 2021

As one who spent most of his adult life within government dealing with home-based IT capabilities that far outstripped those in the office, I know this feeling. Sign up for CSO newsletters. ]. Learn the 5 key qualities of successful CISOs, and how to develop them and 7 security incidents that cost CISOs their jobs.

CISO 144

CISO CSO Technology Government 144

Security Boulevard

FEBRUARY 26, 2025

million people was exposed in a data breach lasts year, prompting AppOmni CSO Cory Michal to say that data collection companies like DISA and National Public Data need more oversight, regulations, and penalties. The post DISA Breach Highlights Need for Stronger Oversight: AppOmni CSO appeared first on Security Boulevard.

CSO 59

CSO Data collection Data breaches Social Engineering 59

CSO Magazine

AUGUST 3, 2021

Both pointed out shortcomings in the cyber readiness of the United States government. Sign up for CSO newsletters. ]. It was preceded by President Biden’s comments made to the Office of the Director National Intelligence and staff and the leadership of the intelligence community on July 27.

CSO 142

CSO Cybersecurity Government Accountability 142

CSO Magazine

SEPTEMBER 21, 2021

It doesn’t communicate enough to other executives,” says Marinkovic, who provides virtual CISO services through Tiro Security and serves on the Emerging Trends Working Group with the IT governance association ISACA. Sign up for CSO newsletters. ].

Cybersecurity 137

Cybersecurity CSO CISO Government 137

CSO Magazine

FEBRUARY 25, 2022

The infamous cybercriminal group behind the Conti ransomware has publicly announced its full support for the Russian government while the country's army is invading Ukraine and threatened to strike the critical infrastructure of anyone launching cyberattacks or war actions against Russia. To read this article in full, please click here

Government 132

Government DDOS Cybercrime Ransomware 132

CSO Magazine

OCTOBER 13, 2021

Google has announced the formation of a cybersecurity action team to provide support to governments, critical infrastructure, enterprises, and small businesses. Get the latest from CSO by signing up for our newsletters. ] Get the latest from CSO by signing up for our newsletters. ]

Digital transformation 124

Digital transformation CSO Cybersecurity Small Business 124

CSO Magazine

MARCH 27, 2023

The French government has banned TikTok and all other “recreational apps” from phones issued to its employees. The Minister of Transformation and the Public Service Stanislas Guerini, said in a statement that recreational applications do not have sufficient levels of cybersecurity and data protection to be deployed on government equipment.

Government 123

Government Media Cybersecurity 123

CSO Magazine

JANUARY 4, 2023

The number of attacks targeting the government sector increased by 95% worldwide in the second half of 2022 compared to the same period in 2021, according to a new report by AI-based cybersecurity company CloudSek. There is also a risk that national security and military data can be used by terrorist organizations.

Government 126

Government Risk Cybersecurity 126

CSO Magazine

APRIL 21, 2021

Competitive and adversarial relations with China, Russia, Iran, and North Korea percolate to the top, while global issues like the pandemic and economic migration will strain governments around the world, including the US. Sign up for CSO newsletters. ].

CSO 131

CSO Government Cybersecurity 131

CSO Magazine

MAY 31, 2022

federal government introduced a proposed five-step 5G Security Evaluation Process Investigation. “[It] Last week the U.S. It] was developed to address gaps in existing security assessment guidance and standards that arise from the new features and services in 5G technologies," Eric Goldstein, executive assistant director for the U.S.

Government 123

Government Technology Engineering Cybersecurity 123

CSO Magazine

JULY 27, 2021

A sophisticated, likely government-sponsored threat actor has been compromising major public and private organizations over the past year by exploiting deserialization flaws in public-facing ASP.NET applications to deploy fileless malware. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ].

Malware 145

Malware CSO Internet Internet 145

Security Boulevard

JUNE 23, 2023

Top 5 ways access governance prevents supply chain attacksIn today's interconnected digital landscape, organizations rely heavily on their supply chains to deliver products, services, and software solutions. According to CSO Online, […] The post Prevent supply chain attacks with access governance appeared first on SafePaaS.

Government 64

Government CSO Software Risk 64

The Security Ledger

MAY 16, 2024

In this Spotlight Podcast, host Paul Roberts talks with Chris Walcutt, the CSO of DirectDefense about the rising cyber threats facing operational technology (OT) and how organizations that manage OT - including critical infrastructure owners can best manage increased cyber risks to OT environments. Read the whole entry. »

CSO 59

CSO Risk Energy and Utilities Social Engineering 59

CSO Magazine

MAY 25, 2022

Chris Wysopal, founder and chief technology officer of application security company Veracode, sat down with CSO Senior Writer Lucian Constantin at a recent Security Summit to discuss just that.

CSO 127

CSO Risk Software Government 127

CSO Magazine

SEPTEMBER 30, 2021

Security researchers have recently seen a notorious cyberespionage group with ties to the Russian government deploy a new backdoor that's designed to hook into Active Directory Federation Services (AD FS) and steal configuration databases and security token certificates. [ Sign up for CSO newsletters ! ].

CSO 125

CSO Malware Government Hacking 125

CSO Magazine

MARCH 30, 2023

An APT group known in the security industry as Winter Vivern has been exploiting a vulnerability in the Zimbra Collaboration software to gain access to mailboxes from government agencies in several European countries.

Government 111

Government Telecommunications Software Cybersecurity 111

CSO Magazine

MAY 18, 2021

Get the latest from CSO by signing up for our newsletters. ]. As a result, managed service providers (MSPs) could be required to adhere to strengthened security rules or guidance going forward. Learn the 7 keys to better risk assessment. |

Risk 94

Risk CSO Government Cyber Risk 94

CSO Magazine

NOVEMBER 2, 2022

The US Government Accountability Office (GAO) released a comprehensive report in late September 2022 that discussed the need for dedicated privacy leadership within the departments and agencies of the executive branch of government if goals surrounding privacy are to be achieved.

Government 111

Government Accountability Risk 111

CSO Magazine

SEPTEMBER 12, 2022

Vendors, tech firms, collectives and governments have contributed to helping raise the open-source security bar amid organizations’ increasing use of and reliance upon open-source resources, along with the complex security risks and challenges that come with it. In sum: things are just getting started, but progress has been made,” David A.

CSO 119

CSO Government Software Risk 119

CSO Magazine

MAY 2, 2023

Data security authorization vendor Veza has announced a new solution for access security and governance across SaaS applications including Salesforce, GitHub, and Slack. Securing access is complicated due to app-specific role-based access controls that many SaaS apps use.

Government 102

Government 102

CSO Magazine

JUNE 8, 2023

The Australian Capital Territory government is one of the victims of a vulnerability found in Barracuda’s email security gateway (ESG).

Government 95

Government 95

CSO Magazine

JULY 7, 2022

In a concerted effort to spread the word on the threat posed by China to governments at the state and local level as well as businesses of all sizes, the U.S. Protecting Government and Business Leaders at the U.S. National Counterintelligence and Security Centre (NSCS), issued a “ Safeguarding Our Future ” bulletin.

Government 98

Government 98

CSO Magazine

MARCH 19, 2021

Ryuk is a sophisticated ransomware threat that has been targeting businesses, hospitals, government institutions and other organizations since 2018. Get the latest from CSO by signing up for our newsletters. ] Get the latest from CSO by signing up for our newsletters. ] What is Ryuk ransomware?

Ransomware 98

Ransomware CSO Encryption Government 98

CSO Magazine

MAY 28, 2021

Sign up for CSO newsletters. ]. The hacking group, known in the security industry as APT29 , Cozy Bear, The Dukes and Nobelium, has been tied to the Russian Foreign Intelligence Service (SVR) by the US and UK governments.

CSO 105

CSO Government Marketing Hacking 105

CSO Magazine

MAY 29, 2023

There’s no getting around it, I am long in the tooth and have been dealing with individuals who break trust within their work environment for more than 30 years, both in government (where we called it counterespionage or counterintelligence) and in the private sector.

Risk 109

Risk CSO Government 109

CSO Magazine

DECEMBER 15, 2022

The US Government Accounting Office (GAO) continues to highlight shortcomings in the cybersecurity posture of government entities responsible for the protection of United States infrastructure when it comes to internet of things (IoT) and operational technology (OT) devices and systems.

IoT 99

IoT Government Internet Internet 99

Security Boulevard

APRIL 3, 2023

Out of an abundance of caution, we replaced our RSA SSH host key used to secure Git operations for GitHub.com,” GitHub CSO and SVP. In an attempt to get ahead of fallout from the exposure of its private SSH key in a public repository, the software development platform GitHub proactively rotated its host key last week.

CSO 124

CSO Software Risk Government 124

CSO Magazine

OCTOBER 4, 2022

Local governments continue to grapple with ransomware and other cyberattacks that have crippled their school systems and halted other civic functions. The latest crisis in a long string of local government cyber incidents involves the Los Angeles Unified School District.

Government 90

Government Cybersecurity Ransomware 90

CSO Magazine

MARCH 30, 2022

Authentication continues to test CISOs for several reasons, with its modern definition being the first to address, Netskope CISO Lamont Orange tells CSO. “We

Authentication 107

Authentication CISO CSO Passwords 107

CSO Magazine

MARCH 9, 2023

The new governent body will streamline data governance policies in the country, amid increasing confusion from businesses that deal with multiple bodies presiding over different aspects of data governance within the country's borders, according to a Wall Street Journal report citing sources familiar with the issues.

Government 83

Government 83

CSO Magazine

JUNE 5, 2023

The stakes are high — just last week, technology leaders signed an open public letter saying that if government officials get it wrong, the consequence could be the extinction of the human race. To read this article in full, please click here

Government 91

Government Technology 91

CSO Magazine

MARCH 29, 2021

These attacks have drawn government attention and sparked calls for liability protection against malicious intrusions. Sign up for CSO newsletters. ]. Sign up for CSO newsletters. ]. If organizations want this protection, however, lawmakers say they need to step up their game to implement better cybersecurity practices.

CSO 96

CSO Cybersecurity Government Ransomware 96