Three common problems regularly hold back cybersecurity strategies – not testing enough, not resolving or disclosing known vulnerabilities, and not having proper security programs in place to measure testing effectiveness.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Zero Trust has reached buzzword status in the security industry. But, unfortunately, many vendors that claim to provide Zero Trust solutions fall short of addressing all critical components.
The embassy phishing campaign is just one element of a rash of recent activity by the Russian hackers referred to as APT 29, probably better known to the general public as Cozy Bear.
SaaS applications are not going anywhere, and we must face the fact that they have access to our company’s most sensitive data. With SaaS, the shadow IT challenge has expanded and deepened even further.
Luxury goods retailer Neiman Marcus Group confirms a data breach linked to the Snowflake hack allowing hackers to access the personal information of over 64,000 people.
A cyber attack has caused severe operational disruptions across Jaguar Land Rover facilities, affecting production, sales, parts supplies, and auto repair workshops.
Security companies and regulatory organizations (most notably NIST) have emphasized the advantages of a zero-trust security architecture for years. Rights are granted dynamically when needed, only to the appropriate level, and then they are removed when no longer required.
There has been considerable debate about banning ransomware payments as a means of curbing the explosive growth of the crime Assistant director of the FBI's cyber division weighed in, suggesting that it would create a new avenue of extortion.
LabMD may have won an appeals case against the FTC, arguing that regulations regarding their cyber security practices were too vague to allow for prosecution, but every organization needs to be warned that the FTC could be coming for you next.
Colorado Energy Company, Delta-Montrose Electric Association (DMEA), suffered a malicious cyber attack that shut down 90% of its internal controls and wiped 25 years of historical data.










