Then and Now: Securing Privileged Access Within Healthcare Orgs
Joseph Carson, chief security scientist and advisory CISO at ThycoticCentrify, discusses best practices for securing healthcare data against the modern threat landscape. [...]
Showing only posts tagged InfoSec Insider. Show all posts.
On the Taxonomy and Evolution of Ransomware
Not all ransomware is the same! Oliver Tavakoli, CTO at Vectra AI, discusses the different species of this growing scourge. [...]
Building Multilayered Security for Modern Threats
Justin Jett, director of audit and compliance for Plixer, discusses the elements of a successful advanced security posture. [...]
Biden’s Cybersecurity Executive Order Puts Emphasis on the Wrong Issues
David Wolpoff, CTO at Randori, argues that the call for rapid cloud transition Is a dangerous proposition: "Mistakes will be made, creating opportunities for our adversaries. [...]
Combatting Insider Threats with Keyboard Security
Dale Ludwig, business development manager at Cherry Americas, discusses advances in hardware-based security that can enhance modern cyber-defenses. [...]
Building SIEM for Today’s Threat Landscape
Sivan Tehila, cybersecurity strategist at Perimeter 81, discusses the elements involved in creating a modern SIEM strategy for remote work and cloud-everything. [...]
It’s Time to Prepare for a Rise in Insider Threats
Anurag Kahol, CTO at Bitglass, discusses options for detecting malicious or dangerous activity from within an organization. [...]
Beyond MFA: Rethinking the Authentication Key
Tony Lauro, director of security technology and strategy at Akamai, discusses hardware security dongles and using phones to act as surrogates for them. [...]
Shifting Threats in a Changed World: Edge, IoT and Vaccine Fraud
Aamir Lakhani, researcher at FortiGuard Labs, discusses leading-edge threats related to edge access/browsers/IoT, and the COVID-19 vaccine, as a way of getting into larger organizations. [...]
Sneakers, Gaming, Nvidia Cards: Retailers Can Stop Shopping Bots
Jason Kent, hacker in residence at Cequence Security, says most retailers are applying 1970s solutions to the modern (and out-of-control) shopping-bot problem, and offers alternative ideas. [...]
A Tale of Two Hacks: From SolarWinds to Microsoft Exchange
Oliver Tavakoli, CTO of Vectra AI, discusses the differences between the massive supply-chain hack and the Exchange zero-day attacks, and their legacy and ramifications for security professionals. [...]
Smishing: Why Text-Based Phishing Should Be on Every CISO’s Radar
Phil Richards, Chief Security Officer at Ivanti, discusses dramatic growth in smishing and what to do about it. [...]
5 Fundamental But Effective IoT Device Security Controls
Matt Dunn, the associate managing director for cyber-risk at Kroll, discusses how to keep networks safe from insecure IoT devices. [...]
4 Innovative Ways Cyberattackers Hunt for Security Bugs
David “moose” Wolpoff, co-founder and CTO at Randori, talks lesser-known hacking paths, including unresolved "fixme" flags in developer support groups. [...]
What COVID-19 Taught Us: Prepping Cybersecurity for the Next Crisis
Sivan Tehila, cybersecurity strategist at Perimeter 81, discusses climate change and the cyber-resilience lessons companies should take away from dealing with the pandemic. [...]
Mandiant Front Lines: How to Tackle Exchange Exploits
Matt Bromiley, senior principal consultant with Mandiant, offers checklists for how small- and medium-sized businesses (SMBs) can identify and clear ProxyLogon Microsoft Exchange infections. [...]
A Post-Data Privacy World and Data-Rights Management
Joseph Carson, chief security scientist at Thycotic, discusses the death of data privacy and what comes next. [...]
Zero Trust: The Mobile Dimension
Hank Schless, senior security solutions manager at Lookout, discusses how to secure remote working via mobile devices. [...]
Network Detection & Response: The Next Frontier in Fighting the Human Problem
Justin Jett, director of audit and compliance for Plixer, discusses the transformation of network-traffic analytics and what it means for cybersecurity now. [...]
Crossing the Line: When Cyberattacks Become Acts of War
Saryu Nayyar, CEO at Gurucul, discusses the new Cold War and the potential for a cyberattack to prompt military action. [...]
How To Defend the Extended Network Against Web Risks
Aamir Lakhani, cybersecurity researcher for Fortinet’s FortiGuard Labs, discusses criminals flocking to web server and browser attacks, and what to do about it. [...]
From PowerShell to Payload: An Analysis of Weaponized Malware
John Hammond, security researcher with Huntress, takes a deep-dive into a malware's technical and coding aspects. [...]
Building a Fortress: 3 Key Strategies for Optimized IT Security
Chris Hass, director of information security and research at Automox, discusses how to shore up cybersecurity defenses and what to prioritize. [...]
« newer articles | page 5