Software supply chain attacks are among the most destructive strategies used by cybercriminals today. 59% of companies that have suffered a supply chain attack reported significant operational disruption, according to BlackBerry research.
To ensure responsible Trusted Computing, it is vital that organizations employ full-coverage security measures including the Trusted Platform Module (TPM) and Self-Encrypting Drive (SED).
Historically, to become a successful hacker, you had to have the knowledge and skills to create your own attacks from scratch. However, all that has changed with the proliferation of the underground market for phishing-as-a-service.
While digitalisation increases productivity and output for critical national infrastructure, the industry needs to find a balance between the benefits of interconnectivity and exposure to cyber risks.
Data privacy came into public consciousness in 2018. Yet, even with new regulations to protect personal privacy, it’s clear that there is still a long way to go in 2019 before personal data is truly protected.
The emergence of PrivacyTech has since provided and will continue to expand on solutions to help companies with privacy protection and personal data management.
Security teams have relied on scheduled assessments for years because the model worked. Today, that assumption no longer holds. Attackers don't operate on that schedule anymore.
Financial institutions are 300 times as likely as other companies to be targeted by a cyberattack. Unfortunately, the systems designed to help (such as alerting or security monitoring tools) can overwhelm a bank’s IT department.
A CEO’s involvement shouldn’t only come as a last resort. CEOs should take a proactive stance to highlight that security is also in the business’s best interest and can be balanced with the overarching goals of the business. With the CEO on board, the spotlight then shifts back to the CISO who must then begin work to create a security-focused organization.
Although it can be easy to get caught up in the novelty and buzz surrounding new security tools, it isn’t always in a company’s best interest to continue adding to their tech stack before spending time to ensure that the current systems are being utilized to the best of their ability.
