Thales Cloud Protection & Licensing

OCTOBER 24, 2019

In the spirit of National Cyber Security Awareness Month (NCSAM), my colleague Ashvin Kamaraju wrote about how organizations can use fundamental controls to secure their information technology. Effective digital security doesn’t end at “Secure IT,” however. Building a Robust Security Culture.

Security Awareness 83

Security Awareness InfoSec Passwords Accountability 83

Security Boulevard

MARCH 24, 2022

Welcome to the Ask Chloé column on Security Boulevard! Each week, Chloé provides answers to readers’ questions to help guide them as they navigate the technology industry. This week, Chloé offers advice to an InfoSec pro struggling with response time anxiety.

InfoSec 78

InfoSec Technology Media Security Awareness 78

SC Magazine

MAY 1, 2021

Brian Levine is senior director of product security at Axway, a global security engineering organization delivering training, tools, processes and DevSecOps practices for secure applications and cloud services to the enterprise market. In government, Brooks served under President George W.

Computers and Electronics 126

Computers and Electronics Technology Information Security Education 126

Security Boulevard

NOVEMBER 17, 2021

Each week, Chloé provides answers to readers’ questions to help guide them as they navigate the technology industry. This week, Chloé offers advice on getting a talk accepted at an InfoSec conference. Dear Chloé, I’ve been trying to get my talk accepted at InfoSec conferences; however, I keep.

InfoSec 59

InfoSec Technology Security Awareness Cybersecurity 59

Herjavec Group

MAY 19, 2022

Hackers are routinely attempting novel ways to infiltrate corporate networks so it’s important to ensure that your employees are aware of how their online behavior can make them – and you – more vulnerable. Build security awareness training modules to educate your employees on how to spot phishing emails or business-related scams.

Penetration Testing 98

Penetration Testing Social Engineering Cybercrime InfoSec 98

The Falcon's View

AUGUST 29, 2017

For those unfamiliar with Fogg's work, he started out doing research on Persuasive Technology back in the 90s, which has become the basis for most modern uses of technology to influence people (for example, use of Facebook user data to influence the 2016 US Presidential Election). Well, low-and-behold, it already exists!

Information Security 45

Information Security InfoSec Social Engineering Security Awareness 45

SC Magazine

FEBRUARY 18, 2021

Officials from the National Institute of Standards and Technology (NIST) this week teased future improvements to the agency’s recently introduced “Phish Scale” measurement system, which helps companies determine whether phishing emails are hard or easy for their employees to detect.

Phishing 114

Phishing Mobile Security Awareness Media 114

SecureWorld News

OCTOBER 19, 2023

Too many folks focus on the technology as opposed to the people or process. When budgets tighten and we're still responsible for moving the security forward, we should look to the policies, procedures, and controls and which ones can we shore up, what can we do to block/tackle those things we've been putting off, etc.

Cybersecurity 106

Cybersecurity CISO Education Phishing 106

SC Magazine

MARCH 2, 2021

House Oversight and Homeland Security committees last week, SolarWinds’s former and current CEOs blamed an intern for creating a weak FTP server password and leaking it on GitHub – an act which may or may not have contributed to a supply chain hack that impacted users of the tech firm’s Orion IT performance monitoring platform.

Passwords 129

Passwords Password Management CISO InfoSec 129

Notice Bored

JULY 21, 2022

The customer is apparently seeking guidance on integrating infosec into the development process, which begs the question "Which development process?". Reducing the problem to its fundamentals, there is a desire to end up with software/systems that are 'adequately secure', meaning no unacceptable information risks remain.

Software 72

Software Risk InfoSec Security Awareness 72

Notice Bored

JULY 4, 2022

That's a heady mix of laws and regs that apply to the organisation, its officers and workers, its property and finances, its technologies, its contracts, agreements and relationships with employees and third parties including the authorities, owners, suppliers, partners, prospects and customers, and society at large. All requirements?!

Risk 72

Risk Accountability InfoSec CISO 72

The Falcon's View

AUGUST 6, 2018

There's no shortage of guidance available today about how to structure, build, and run a security program. Most guidance comes from a standpoint of inherent bias, whether it be to promote a product class, specific framework/standard, or to best align with specific technologies (legacy/traditional infrastructure, cloud, etc.).

InfoSec 40

InfoSec Risk Architecture Security Awareness 40

SecureWorld News

MAY 16, 2023

The city has a more established IT setup, including a full-time IT director, which many of the smaller towns lack, according to this Government Technology article. We use this type of model for our 'Whole of State' approach to security in North Dakota," says Michael Gregg, CISO for the State of North Dakota. This is a great approach.

Cybersecurity 98

Cybersecurity Insurance Cyber Risk CISO 98

Security Boulevard

MAY 14, 2021

Welcome to the Ask Chloé column on Security Boulevard! Each week, Chloé provides advice to readers’ questions to help guide them as they navigate the technology industry. Dear Chloé, I.

Technology 87

Technology Marketing CISO Security Awareness 87

Security Boulevard

MARCH 18, 2024

Zero-trust encompasses a variety of technologies, from strong identity systems to microsegmentation. The post Zero-Trust Network Access: Why so Many Teams Get it Wrong appeared first on Security Boulevard. Why are so many organizations getting it wrong?

Technology 78

Technology Data privacy Security Awareness InfoSec 78

Security Boulevard

NOVEMBER 26, 2023

In this episode, Tom shows off AI generated images of a “Lonely and Sad Security Awareness Manager in a Dog Pound” and the humorous outcomes. The conversation shifts to Apple’s upcoming support for Rich Communication Services (RCS) and the potential security implications.

Scams 59

Scams Security Awareness Social Engineering Data privacy 59

Security Boulevard

AUGUST 8, 2021

Welcome to the Ask Chloé column on Security Boulevard! Each week, Chloé provides answers to readers’ questions to help guide them as they navigate the technology industry. The post Ask Chloé: Reducing Biased Language in Job Descriptions appeared first on Security Boulevard. Dear Chloé, I’ve been told.

Technology 64

Technology CISO Security Awareness InfoSec 64

Security Boulevard

APRIL 24, 2022

Award-winning security transformation manager and digital anthropologist Lianne Potter joins us to discuss the fascinating topic of digital anthropology and how we can rehumanize cybersecurity.

Cybersecurity 98

Cybersecurity Security Awareness InfoSec Technology 98

Security Boulevard

MARCH 19, 2023

We cover how empathy relates to cybersecurity in the industry, the importance of being empathetic in our roles as […] The post Exploring the Role of Empathy in Cybersecurity with Andra Zaharia appeared first on The Shared Security Show.

Cybersecurity 95

Cybersecurity Data privacy Security Awareness InfoSec 95

Notice Bored

AUGUST 23, 2020

on security awareness which is already in the plan anyway: maybe we should mention A.7.2.2 Ben Woelk, program manager for the Information Security Office at Rochester Institute of Technology, has published a detailed ISO comms plan - 16 pages laying out all the things they planned to communicate as part of their ISMS.

Information Security 52

Information Security Security Awareness Security Performance Risk 52

Security Boulevard

SEPTEMBER 10, 2023

Finally, we […] The post The FBI’s Qakbot Takedown, QR Code Phishing Attacks, Dox Anyone in America for $15 appeared first on Shared Security Podcast. In this episode we discuss the FBI’s remarkable takedown of the Qakbot botnet, a saga involving ransomware, cryptocurrency, and the FBI pushing an uninstaller to thousands of victim PCs.

Phishing 75

Phishing Cryptocurrency Ransomware Social Engineering 75

Security Boulevard

APRIL 28, 2024

In episode 327 Tom, Scott, and Kevin discuss the findings from Mandiant’s M-Trends 2024 report, highlighting a significant rise in traditional vulnerability exploitation by attackers while observing a decline in phishing. Despite phishing’s decreased prevalence, it remains the second most popular method for gaining initial network access.

Phishing 72

Phishing Data privacy Passwords Security Awareness 72

Security Boulevard

OCTOBER 13, 2024

In the milestone 350th episode of the Shared Security Podcast, the hosts reflect on 15 years of podcasting, and the podcast’s evolution from its beginnings in 2009. The ‘Aware Much’ segment focuses on […] The post Emergency Satellite Messaging, Stagnation in User Cybersecurity Habits appeared first on Shared Security Podcast.

Cybersecurity 64

Cybersecurity Password Management Passwords Media 64

Security Boulevard

DECEMBER 3, 2023

In this episode, noteworthy guest Tanya Janca returns to discuss her recent ventures and her vision for the future of Application Security. Tanya sheds light on her decision to partner […] The post Application Security Trends & Challenges with Tanya Janca appeared first on Shared Security Podcast.

Data privacy 59

Data privacy Security Awareness InfoSec Technology 59

Security Boulevard

JULY 2, 2023

Several major organizations, including British Airways and the BBC, fell victim to the recent MOVEit cyberattack. We discuss the alarming trend of hackers targeting trusted suppliers to gain access to customer data, potentially holding companies and individuals for ransom.

Passwords 52

Passwords Data privacy Data breaches Security Awareness 52

Security Boulevard

APRIL 30, 2023

In this episode we speak with Kai Roer, a renowned author, security culture coach, and CEO of Praxis Security Labs. Kai shares his career journey in cybersecurity and emphasizes the importance of building a strong security culture within organizations.

Cybersecurity 52

Cybersecurity Data privacy Security Awareness InfoSec 52

Security Through Education

NOVEMBER 30, 2022

At Social Engineer LLC, our purpose is to bring education and awareness to all users of technology. However, they will remember how you made them feel and that you treated them with empathy and compassion. Always remember, knowledge and skill have the best results when used ethically. Sources: [link]. Image: [link].

Social Engineering 105

Social Engineering Engineering Education Technology 105

Security Boulevard

APRIL 10, 2022

The post Truths and Myths of Privacy, Fake Shopping Apps, Borat RAT Malware appeared first on The Shared Security Show. Scott and Tom explain why privacy isn’t dead, why should everyone should care about their privacy, and how you should respond to someone that says “I don’t care about privacy, I have nothing to hide!”.

Malware 98

Malware Social Engineering Scams Engineering 98