Herjavec Group

MAY 19, 2022

No matter how many firewalls or network controls you have in place, the risk of insider threat will always be present. I’ve been in infosec for over 30 years and have had the great privilege of evolving and learning as a cybersecurity executive in a space I love.

Penetration Testing 98

Penetration Testing Social Engineering Cybercrime InfoSec 98

Herjavec Group

MARCH 24, 2022

Internet-facing architecture that is being ASV scanned has grown more complex over the last years with the implementation of HTTPS load balancers, web application firewalls, deep packet inspection capable intrusion detection/prevention (IDS/IPS) systems, and next-gen firewalls.

Architecture 98

Architecture Firewall Penetration Testing eCommerce 98

SecureWorld News

APRIL 17, 2022

It was once the case that cybersecurity technology consisted of little more than a firewall and antivirus software. One of the first was the storage of passwords by internet browsers. Yes, these advances have meant huge changes for the way that InfoSec operates, there are still many things that can only be managed with human input.

Cybersecurity 96

Cybersecurity Passwords Technology Password Management 96

Pen Test Partners

JULY 1, 2024

There has been a lot of talk on various infosec news feeds about the RegreSSHion vulnerability. Also ask yourself the question: do I need to expose SSH to the untrusted internet? If the answer is “no” then remove or restrict the service by adjusting your firewall rules accordingly. Does CVE-2024-6387 affect me?

InfoSec 83

InfoSec Authentication VPN Firewall 83

SC Magazine

APRIL 26, 2021

Kristin Sanders, chief information security officer for the Albuquerque Bernalillo County Water Utility Authority, revealed last week how New Mexico’s largest water and wastewater utility has been addressing this challenge by leveraging a series of software solutions, sensors and internet-of-things tech.

CISO 82

CISO IoT VPN InfoSec 82

SecureList

NOVEMBER 23, 2021

Further evolution of cyberthreats as a response to infosec tools and measures. Known vulnerabilities in internet-facing hardware are also sure to remain a popular penetration vector. Update firewalls and SSL VPN gateways in good time. Moreover, the latter is the most dangerous and hard-to-detect method.

Spyware 138

Spyware Phishing Cybercrime Energy and Utilities 138

SecureWorld News

SEPTEMBER 27, 2023

Threat Intelligence (TI) representation across different levels There is a lot of information on cyberattacks on the internet, and, as a rule, the most helpful information is contained in cyber threat reports ( Threat Intelligence Reports ). Highlighting the AI advantages in ITSM and InfoSec, you can use ChatGPT.

Cyber threats 112

Cyber threats Artificial Intelligence Malware Threat Reports 112

SiteLock

AUGUST 27, 2021

WordPress remains the largest CMS and holds a large market share of the internet. According to author Nimrod Luria in a recent Infosec Island article , “The (hacked) sites appear to have one thing in common: they are all built on the WordPress content management platform.” Use a malware scanner and web application firewall (WAF).

eCommerce 52

eCommerce Cyber Attacks InfoSec Marketing 52

The Security Ledger

SEPTEMBER 25, 2019

» Related Stories Spotlight Podcast: Security Automation is (and isn’t) the Future of Infosec Episode 159: Deep Fakes and Election (in)Security with ZeroFOX Spotlight Podcast: Rethinking Your Third Party Cyber Risk Strategy. Also: Rachel Stockton of the firm LastPass* joins. Read the whole entry. »

Cyber Attacks 40

Cyber Attacks Energy and Utilities Cyber Risk Firewall 40

Security Boulevard

OCTOBER 11, 2023

I love using this one to help infosec professionals gauge how bad an incident is. Because they aren’t used to everything (potentially) being on the Internet. The entire management plane is on the Internet, so if an attacker gets credentials, you can’t stop them with a firewall or by shutting down access to a server.

Accountability 59

Accountability Internet Internet InfoSec 59

Errata Security

SEPTEMBER 12, 2020

Infosec is a largely non-technical field. Then an 0day is discovered, and a worm infecting SSH spreads throughout the Internet. The (hypothetical) reason is that your organization immediately put a filter for port 22 on the firewalls, scanned the network for all SSH servers, and patched the ones they found. You do this.

InfoSec 75

InfoSec Passwords Accountability CISO 75

Security Boulevard

OCTOBER 10, 2022

The applications that were first to appear on the internet in the 90s ran in data centers. Developers want to go incredibly fast and infosec wants to be secure even if it slows down development. Infosec must provide the intellectual property and expertise to accelerate development while securing it. What’s new here? fastsecure.

Digital transformation 59

Digital transformation Software Authentication InfoSec 59

Security Boulevard

APRIL 22, 2025

Exploit Chain Targets Unpatched Juniper EX Switches and SRX Firewalls CVE-2023-36845 Juniper Networks Junos OS PHP External Variable Modification Vulnerability 9.8 The consulting industry had the longest average remediation rate while the software, internet and technology sector had the shortest at 172 days.

Energy and Utilities 59

Energy and Utilities Authentication Data breaches VPN 59

Threatpost

SEPTEMBER 29, 2020

Botnets and IoT devices are forming a perfect storm for IT staff wrestling with WFH employee security.

IoT 80

IoT Firewall InfoSec Internet 80

ForAllSecure

MARCH 24, 2021

That meant I tested the release candidates -- not the final product you’d buy in the stores - for consumer-grade antivirus programs, desktop firewalls, and desktop Intrusion detection systems. Mashable: Move over Heartbleed and welcome to shell shock, the latest security threat to hit the internet. And it's a doozy program.

Software 52

Software Passwords Internet Internet 52

ForAllSecure

MARCH 24, 2021

That meant I tested the release candidates -- not the final product you’d buy in the stores - for consumer-grade antivirus programs, desktop firewalls, and desktop Intrusion detection systems. Mashable: Move over Heartbleed and welcome to shell shock, the latest security threat to hit the internet. And it's a doozy program.

Software 52

Software Passwords Internet Internet 52

ForAllSecure

JUNE 2, 2021

With more than 600K followers on YouTube, LiveOverflow is one of infosec’s first social media influencers. Robert Vamosi: Before there was the internet as we know it today, there were bulletin boards, BBSs. By anyone’s measure that would make him an infosec influencer, would it not? Massive numbers.

Media 52

Media Hacking InfoSec Marketing 52

ForAllSecure

JUNE 2, 2021

With more than 600K followers on YouTube, LiveOverflow is one of infosec’s first social media influencers. Robert Vamosi: Before there was the internet as we know it today, there were bulletin boards, BBSs. By anyone’s measure that would make him an infosec influencer, would it not? Massive numbers.

Media 52

Media Hacking InfoSec Marketing 52

eSecurity Planet

FEBRUARY 25, 2022

Firewalls work both ways. Start treating the entire internet as hostile… because it is.” “If my boutique infosec consultancy has these resources…what does a state sponsored one have?” ” “Watch your egress. Carefully monitor outbound traffic. DMZ servers RESPOND to external requests.

B2B 125

B2B Cyber Attacks Firewall Cyber threats 125

SecureWorld News

JANUARY 11, 2024

DeSouza has also earned numerous industry accolades, including Top Global CISO by Cyber Defense Magazine, Top 10 InfoSec Professional by OnCon, and induction into the CISO Hall of Fame by the global Cyber Startup Observatory.

Cybersecurity 109

Cybersecurity CISO Cyber threats Risk 109

ForAllSecure

MAY 2, 2023

That, of course, was not all, but it is an example of how someone -- anyone on the internet -- can take a photo or blog post or Yelp review from social media, or some other seemingly random open source item and tie it back to a crime. Which then I could configure to get on the internet, you know. Daniel, he keeps a low profile.

Hacking 40

Hacking Media InfoSec Internet 40

Andrew Hay

JUNE 29, 2017

Unless you’ve been away from the Internet earlier this week, you’ve no doubt heard by now about the global ransomware outbreak that started in Ukraine and subsequently spread West across Western Europe, North America, and Australia yesterday. Checking out the new Petya variant – SANS ISC InfoSec Forums. By: Andrew Hay.

Ransomware 45

Ransomware Firewall Malware InfoSec 45

ForAllSecure

JANUARY 22, 2023

Having a common framework around vulnerabilities, around threats , helps us understand the infosec landscape better. Adam has more than 20 years in the infosec world, and he even helped create the CVE system that we all use today. And they wrote an article which you can now find on the internet, titled The threats to our products.

Engineering 40

Engineering Technology Information Security Authentication 40