Security Policies Nobody Reads: Are We Just Writing PDFs for Auditors?
Have you lost the count of the security policies you have written, reviewed or "inherited" over the years?
Articles
News
433 articles, newest first.
Threat Actors See Bigger Return for Smaller Devices: The Growing Threat of Mobile Malware
Mobile devices have become indispensable to modern life, supporting both personal connectivity and professional operations. This ubiquity has made them
While You’re Hunting Phish, Someone’s Bugging the Boardroom
There is a quiet war happening behind the noise of cybersecurity. Firewalls are roaring, alerts are pinging, dashboards are glowing red, and somewhere in the
Insider Threat – From Detection to Prevention
From data leaks and cybersecurity incidents enabled by careless users to the malicious theft of intellectual property (IP) or even workplace violence, insider
Cryptocurrency Cybersecurity Threats: How Hacks, Exploits, and Scams Undermine the Future of Blockchain and DeFi
In recent years, we've all seen cryptocurrencies grow from what felt like a niche, tech-lover experiment into a massive, complex financial system. It's been
BayMark Health Services Data Breach: RansomHub Ransomware Group Claims Responsibility for Massive 1.5TB Data Theft
BayMark Health Services, Inc. (BayMark), the largest provider of medication-assisted treatment (MAT) for substance use disorders in North America, has
Best Cybersecurity Certifications for Penetration Testing
A master list of penetration testing certifications. From beginner, to intermediate to advanced level.
Critical Vulnerability on Samsung Devices Could Enable Remote Exploitation
A significant vulnerability has been uncovered in Samsung smartphones, linked to the Monkey's Audio (APE) decoder. The flaw, now resolved, was identified as
Darktrace to Acquire Cado Security, Strengthening Cloud Forensics and Cybersecurity Capabilities
Darktrace, a prominent leader in AI-driven cybersecurity solutions, has announced its intent to acquire Cado Security, a UK-based provider specializing in
The Overlooked Foundations of Cybersecurity Programs: Why Small Details Determine Strategic Success
When you think about information security strategies, what comes to mind? If you're like most cybersecurity professionals, you probably envision bold
The Future of Technology: Microsoft CEO Satya Nadella’s Vision of a World Without Software Applications
Microsoft CEO Satya Nadella recently made waves in the tech industry with groundbreaking predictions about the future of software. His bold statements have
Ethical Hacking: From Misconceptions to Modern-Day Superheroes of Cybersecurity
Most people envision hacking as the dark arts of cybercrime, conjuring images of masked individuals exploiting others. However, within this stereotype lies a
Microsoft Faces Intense Scrutiny Over Cybersecurity Practices
In a pivotal hearing before the House Homeland Security Committee, Microsoft President Brad Smith faced rigorous questioning regarding the company's
Micro-Segmentation: Balancing Security Benefits with Implementation Challenges
Micro-segmentation is a buzzword in the IT world, promising enhanced security and streamlined network management. It's a cutting-edge technique designed to
The Rise of Autonomous GPT-4 Bots: Revolutionizing Cybersecurity with AI-Driven Exploits
In a demonstration of artificial intelligence capabilities, researchers have successfully infiltrated over half of their test websites using autonomous teams
FTI Consulting Study Reveals Significant Communications Gaps Between CISOs and C-Suites Despite Increased Focus on Cybersecurity
FTI Consulting, Inc.'s (NYSE: FCN) Cybersecurity & Data Privacy Communications practice today released the second installment of its "CISO Redefined"
The “World’s Most Harmful Cyber Crime Group” Taken Down
The United Kingdom's National Crime Agency (NCA) unveiled that an initiative dubbed Operation Cronos has led to the acquisition of the LockBit ransomware's
CISA Warns on Known Exploited Vulnerability ‘Roundcube’
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) included a well-known vulnerability in its Known Exploited Vulnerabilities (KEV) catalog,