The Uber CSO indictment
Adam Shostack
AUGUST 28, 2020
Mark Rasch, who created the Computer Crime Unit at the United States Department of Justice, has an essay, “ Conceal and Fail to Report – The Uber CSO Indictment.”
October is high season for cyberattacks, InfoSec Institute study shows
CSO Magazine
OCTOBER 12, 2021
There has been an exponential increase in cyberattacks around the globe in the last five years and a major chunk of it happened in October each year, according to a study by InfoSec Institute.
InfoSec 
144
144 InfoSec 144
144 Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
The state of security hiring: Jobs, skills & salaries
CSO Magazine
JULY 26, 2021
Sign up for CSO newsletters. ]. Still, it is clear that the impacts of the COVID-19 pandemic are largely the driving force behind the dramatic increase in the infosec job market. To read this article in full, please click here
CSO 144
144 
What IT leaders from United Airlines, Aflac, Zoom and more predict for the future of InfoSec
CSO Magazine
MARCH 1, 2022
That’s why CSO’s Future of InfoSec Summit is a must-attend event. Warfare that takes place simultaneously online as well as on the ground. We’re living in a different world in which no business or government is isolated from these threats.
InfoSec 119
119 
Spotlight Podcast: CSO Chris Walcutt on Managing 3rd Party OT Risk
The Security Ledger
MAY 16, 2024
In this Spotlight Podcast, host Paul Roberts talks with Chris Walcutt, the CSO of DirectDefense about the rising cyber threats facing operational technology (OT) and how organizations that manage OT - including critical infrastructure owners can best manage increased cyber risks to OT environments. Read the whole entry. »
CSO 59
59 
Cybersecurity in wartime: how Ukraine's infosec community is coping
CSO Magazine
FEBRUARY 27, 2023
Whenever shells rain down on Ukraine, Yuriy Gatupov's colleagues put a '+' sign in a chat room. Then, the pluses are counted. "We We check if everybody is alive," he says. Gatupov, the owner of two cybersecurity companies, says it is vital to stay connected during a time of war.
InfoSec 137
137 
CSO of the Year | Dan Meacham helps Legendary Entertainment’s movie magic live safely in the cloud
SC Magazine
MAY 3, 2021
Dan Meacham is chief information security officer and CSO with Legendary Entertainment, the production company behind Godzilla vs. Kong and other popular films such as The Dark Knight and Jurassic World. The post CSO of the Year | Dan Meacham helps Legendary Entertainment’s movie magic live safely in the cloud appeared first on SC Media.
CSO 69
69 
We don’t need another infosec hero
CSO Magazine
JUNE 16, 2022
There’s this belief among a lot of security professionals that we are special, in that we are the defenders of our companies. We like to think we hold ourselves to a higher standard of care than our coworkers. If not for us, the thinking goes, our companies would crash and burn in horrible ways. Breaches would run rampant.
InfoSec 103
103 
Real Big Phish: Mobile Phishing & Managing User Fallibility
Threatpost
JANUARY 14, 2022
Daniel Spicer, CSO of Ivanti, discusses emerging trends in phishing, and using zero-trust security to patch the human vulnerabilities underpinning the spike. Phishing is more successful than ever.
Phishing 109
109 
JHL Biotech's theft of Genentech data holds lessons for infosec
CSO Magazine
APRIL 18, 2022
On the surface, the case of Racho Jordanov, CEO of JHL Biotech (Eden Biologics), and COO Rose Lin seemed like another case of corporate espionage. They targeted a technology they needed and then set out to acquire the technology. For many years they were successfully stealing Genentech’s secrets.
InfoSec 95
95 
Ransomware Attacks Are Evolving. Your Security Strategy Should, Too
Threatpost
OCTOBER 27, 2021
Defending against ransomware will take a move to zero-trust, argues Daniel Spicer, CSO, Ivanti.
CSO 97
97 
Cybersecurity researchers face real-life threats
CSO Magazine
JUNE 21, 2022
Anyone who has been in this field long enough has stumbled upon stories of infosec professionals receiving threats or has experienced incidents themselves. Cybersecurity researchers work hard to keep the digital world safe, but every once in a while their own physical security is at risk.
Cybersecurity 137
137 
21 best free security tools
CSO Magazine
APRIL 20, 2021
As an infosec professional, you may be already familiar with decades-old network monitoring and security tools like Nmap, Wireshark or Snort, and password crackers like Ophcrack. Having these applications at your disposal has been an indispensable part of the gig. To read this article in full, please click here (Insider Story)
InfoSec 115
115 
What is the cyber kill chain? A model for tracing cyberattacks
CSO Magazine
APRIL 14, 2022
As an infosec professional, you’ve likely heard about using a cyber kill chain to help identify and prevent intrusions. Attackers are evolving their methods, which might require that you look at the cyber kill chain differently. What follows is an explanation of the cyber kill chain and how you might employ it in your environment.
InfoSec 128
128 
Apps Built Better: Why DevSecOps is Your Security Team’s Silver Bullet
Threatpost
JULY 14, 2021
Phil Richards, vice president and CSO at Ivanti, explains how organizations can design DevOps processes and systems to thwart cyberattacks.
CSO 88
88 
How Aflac maximizes security ROI
CSO Magazine
JUNE 8, 2022
CSO’s Derek Hulitsky sat down with DJ Goldsworthy, VP and global practice lead, security operations and threat management at Aflac at the recent Future of InfoSec Summit to discuss just that. For more of Goldsworthy’s insights, watch the full video of the event session embedded below.
InfoSec 97
97 
8 must-ask security analyst interview questions
CSO Magazine
SEPTEMBER 6, 2021
If you’re Keatron Evans, principal security researcher at security education provider InfoSec, the history major gets the job. The other has an advanced degree in computer science, with a focus on cybersecurity, and 10 years’ experience in pentesting and security operations center environments. Which candidate do you hire?
InfoSec 116
116 
8 top penetration testing certifications employers value
CSO Magazine
DECEMBER 20, 2021
It's a job that lots of people currently working in infosec would like to have, and one that can be tricky to get as competition heats up. "It It used to be the best way to grow a career in attack and penetration was through hands-on experience," says Matthew Eidelberg, technical manager for threat management at Optiv.
Zero days explained: How unknown vulnerabilities become gateways for attackers
CSO Magazine
APRIL 12, 2021
Borrowed into the world of cybersecurity, the name evokes a scenario where an attacker has gotten the jump on a software vendor, implementing attacks that exploit the flaw before the good guys of infosec are able to respond.
InfoSec 118
118 
WannaCry 5 years on: Still a top threat
CSO Magazine
MAY 19, 2022
WannaCry broke onto the infosec scene on May 12, 2017. Such is the case over the last several days when it comes to remembering WannaCry, the ransomware that infected thousands of computers five years ago and cost companies all over the world billions of dollars in damages.
InfoSec 111
111 
The HITECH Act explained: Definition, compliance, and violations
CSO Magazine
FEBRUARY 18, 2021
There are a number of provisions of the law that provide direct and indirect incentives to health care providers and consumers to move to EHRs, but the parts of the law of most interest to infosec professionals are those that tighten rules on providers to ensure that EHRs remain private and secure.
InfoSec 104
104 
The Hacker Mind: Shattering InfoSec's Glass Ceiling
ForAllSecure
MARCH 8, 2023
Booth babes and rampant sexism were more of a problem in infosec in the past. She’s an amazing person who has done an amazing number of things in a short amount of time -- CMU professor, Forrester analyst, CSO at a successful startup -- and she’s not done changing the industry. That is, until Chenxi Wang spoke up.
InfoSec 40
40 
Microsoft Exchange ProxyNotShell vulnerability explained and how to mitigate it
CSO Magazine
DECEMBER 15, 2022
Last year, two high severity, easily exploitable Microsoft Exchange vulnerabilities dubbed ProxyLogon and ProxyShell made waves in the infosec sphere.
InfoSec 97
97 
Ransomware roundup: System-locking malware dominates headlines
CSO Magazine
JUNE 2, 2022
Ransomware was all over the infosec news headlines in the past week, with one new report revealing that its presence has grown more in the last year than in the past several years combined. As we head into the unofficial start of summer, it does not appear the criminal groups that run ransomware schemes are planning to take any time to rest.
Ransomware 91
91 
HYAS brings security threat detection, response to production networks
CSO Magazine
MAY 24, 2022
Bringing threat detection and response capabilities to production networks, cybersecurity company HYAS Infosec is set to release a new, specifically targeted security solution dubbed HYAS Confront.
How to Become a CISO in 5 Steps
CyberSecurity Insiders
MARCH 10, 2021
Keeping skills and knowledge up to date with the latest trends is even more critical for CISOs as they are charged with deciding how the entirety of any company’s varied infosec resources will be deployed now and in the future.”. “It is vital to remain current with what is happening in the industry. Pick up the soft skills.
CISO 112
112 
World's First Hybrid War in Ukraine Holds Important Cyber Lessons
SecureWorld News
OCTOBER 26, 2022
Leighton has some real admiration for the Ukraine government and the host of supporters across the world—including 200,000 InfoSec practitioners aiding in Ukraine's cyber efforts—for not just battling Russia, but winning in many instances. And 9 more informative sessions.
CISO 76
76 
5 best practices for secure collaboration
CSO Magazine
AUGUST 3, 2022
At CSO’s recent InfoSec Summit, Lazar shared his research into what companies that are successfully implementing emerging collaboration technologies are doing to ensure that they are secure. What follows are edited excerpts of that presentation.
InfoSec 82
82 
2022 Cybersecurity predictions
CyberSecurity Insiders
NOVEMBER 16, 2021
While in past years, InfoSec was previously the focus and CISOs were the norm – we’re moving to a new cybersecurity world order that expands the role of the CISO to a CSO (Chief Security Officer). 5G began its disruptive charge in 2021, and this will continue to accelerate in 2022.
Cybersecurity 125
125 
BrandPost: Leveling Up Cloud Native Security with Integrated DLP and Threat Intel
CSO Magazine
APRIL 5, 2023
Securing public cloud environments with tools like Cloud Native Application Protection Platforms (CNAPP) has become a top priority for InfoSec leaders. In fact, cloud security spending has increased (statistics show that the market is growing at a rate of 25.1% year over year, from $10.98 billion in 2021 to 13.73
XDR: The Key to Solving SIEM Shortcomings
Security Boulevard
AUGUST 17, 2021
According to CSO Online , SIEMs augment threat monitoring and incident response with log analysis. One of the mainstays of organizations’ digital security postures is a Security Information and Event Management (SIEM) platform. The post XDR: The Key to Solving SIEM Shortcomings appeared first on Security Boulevard.
CSO 59
59 
Importance of Cybersecurity Profession Highlights SecureWorld Chicago
SecureWorld News
JUNE 13, 2023
It was fitting that the opening keynote panel for SecureWorld Chicago on June 8th was titled " Making the Cybersecurity Music: Navigating Challenges and Opportunities in Today's InfoSec Landscape.
December 15 Marks Deadline for SEC's New Cyber Disclosure Rules
SecureWorld News
DECEMBER 11, 2023
We covered the new rules on July 31, with some thoughts from InfoSec leaders. Understanding the nature of the threat and how to appropriately mitigate that risk should be a shared responsibility, not solely the purview of the CISO or CSO. Immediately or not, Dec. 15 is now here, and the new rules will be in effect.
CISO 91
91 
Jeff Moss on the Evolution of Hacking at SecTor 2021
ForAllSecure
NOVEMBER 3, 2021
Jeff Moss, ICANN CSO and founder of DEF CON/Black Hat, gave the keynote speech at SecTor 2021 in Toronto, Ontario. Moss also said that all hacking is not infosec and that all infosec is not hacking. Where with infosec the goal is to produce income. His talk was nostalgic, reflecting on the 40+ years of computer hacking.
Hacking 52
52 
Webinar: The Current State and Future Challenges of Security
Security Boulevard
APRIL 28, 2021
Join Ed Amoroso, CEO of TAG Cyber and Sam Curry, CSO of Cybereason as they discuss pre-COVID-19 trends, discontinuities, and the outlook based on recent events and challenges in the security industry. Supply Chain weaknesses, Ransomware, the “new normal” going forward, the evolution of the MITRE framework and more are all fair game.
CSO 52
52 
The Rise of an Overlooked Crime – Cyberstalking
Security Affairs
AUGUST 29, 2018
He has been featured on major media outlets including TheGuardian, Lifehacker Australia, The Next Web, CSO, ITProPortal, Infosec Magazine, Tripwire and many others. About Author: Anas Baig is a Cybersecurity & Tech Writer. He writes about online security and privacy, IoT, AI, and Big Data.
Identity Theft 110
110 
Uber Breach Guilty Verdict, Mandatory Password Expiration, Fake Executive Profiles on LinkedIn
Security Boulevard
OCTOBER 16, 2022
Former Uber CSO Joe Sullivan was found guilty of obstructing a federal investigation in connection with the attempted cover-up of a 2016 hack at Uber, NIST and Microsoft say that mandatory password expiration is no longer needed but many organizations are still doing it, and how fake executive profiles are becoming a huge problem for […].
Passwords 52
52 
Meet the 2021 SC Awards judges
SC Magazine
MAY 1, 2021
Over his 25+ year career, Poe worked in several other significant infosec related roles, most notably as chief technology officer of United Way of Greater St. Currently the head of cybersecurity at Davis Polk, he has also directed departments in InfoSec operations, network engineering, messaging and end point support.
Battling Burnout: A Growing Concern for CISOs and Security Professionals
SecureWorld News
JUNE 20, 2024
As defenders of digital assets, Chief Information Security Officers (CISOs) and cybersecurity professionals face immense pressure, often leading to burnout. This phenomenon is not just anecdotal; several studies have highlighted the alarming prevalence of burnout in the cybersecurity industry.
CISO 106
106 The Hacker Mind Podcast: Hacking Diversity
ForAllSecure
APRIL 7, 2021
You’d think that having an amazing resume, a couple of bug bounties, or a CTF win would land you that dream infosec job. There's a serious shortage of InfoSec professionals. I've mentioned before but InfoSec Twitter is a valuable resource. For many, though, that isn’t true.
Hacking 40
40 
The Hacker Mind Podcast: Hacking Diversity
ForAllSecure
APRIL 7, 2021
You’d think that having an amazing resume, a couple of bug bounties, or a CTF win would land you that dream infosec job. There's a serious shortage of InfoSec professionals. I've mentioned before but InfoSec Twitter is a valuable resource. For many, though, that isn’t true.
Hacking 40
40 
Why CISOs Are Joining 'The Great Resignation'
SecureWorld News
DECEMBER 8, 2022
We hear it all the time: there are not enough people to fill all the cybersecurity roles (including CISOs) that are currently available, not to mention the openings expected in the coming months and years.
CISO 85
85 
Cybersecurity for Startups with Josh Feinblum from Stavvy
Security Boulevard
MAY 8, 2022
Josh Feinblum is the co-founder of Stavvy, a Boston-based fully integrated digital mortgage platform, where he leads product, engineering, people, and finance. He also serves as a venture partner at F-Prime Capital, where he evaluates and advises startups of all stages across multiple verticals.
Top Cybersecurity Accounts to Follow on Twitter
eSecurity Planet
DECEMBER 3, 2021
How to screen for natural infosec talent: Ask for a worst case scenario for any common situation. Street is an industry-respected speaker and analyst and currently is the VP of InfoSec for SphereNY. Markstedter actively contributes to filling the infosec education gap. — Jack Daniel (@jack_daniel) October 10, 2018.
Accountability 135
135 
Let's personalize your content