5 charts that show the impact, and cost, of data breaches

With every day a breach goes undetected or unresolved, costs mount, customers lose patience, and a company earns a reputation of neglect.

By Samantha Schwartz • July 29, 2020

Email is still a hacker's wonderland, they could take or leave Slack

While attackers linger in email accounts or sell access points, Slack credentials available for sale go ignored. 

By Samantha Schwartz • July 27, 2020

Passwords for everything. Why are they still terrible?

Passwords are the cockroaches of cybersecurity, yet the methods for managing them don't have to live forever.

By Samantha Schwartz • July 24, 2020

The unanticipated security challenge in Mars, Incorporated pivot to remote work

"I thought we were doing pretty well with our third-party program," said CISO Andrew Stanley. The company experienced "a complete change in the way that technology would be delivered." 

By Samantha Schwartz • July 21, 2020

The dilemma of running TikTok on devices with corporate data

The CIO Dive team discussed the implications of banning personal applications. Here are our thoughts. 

By Samantha Schwartz , Naomi Eide , Roberto Torres • July 20, 2020

Are businesses covered if their service provider is hit by ransomware?

The fallout of supply chain-style ransomware attacks are twofold — data encryption and data exfiltration — cyber insurance has to reckon with both. 

By Samantha Schwartz • July 17, 2020

Why anti-phishing exercises could 'alienate' employees in crisis

Between maintaining business continuity and preserving employee well-being, CISOs had to decide if a pandemic was an appropriate time to test employee cybersecurity awareness.

By Samantha Schwartz • July 16, 2020

CCPA critics warn innovation could lose under the law. What's at stake?

Proponents say proper preparation allows compliance and growth to coexist.

By Samantha Schwartz • July 14, 2020

Everyone is struggling with cloud security

With rising complexity, 96% of organizations are concerned about their cloud security, a Sophos report found. Misconfigurations are at the heart of the trouble.

By Samantha Schwartz • July 10, 2020

'If the public knew:' Ripple20 shows medical device software cyber weakness

Last month’s discovery that Baxter and B. Braun infusion pumps face risk of remote attacks by hackers comes as a medtech effort to track third-party components in devices gains momentum.

By Greg Slabodkin • July 8, 2020

The new cybersecurity priorities of 2020

The secure perimeter of offices disappeared. Companies had to scale or buy more technologies for a remote workforce.

By Samantha Schwartz • July 6, 2020

Even Pentagon IT leaders want more telework post-pandemic

The Pentagon has been slow to adopt the cloud and famously reliant on floppy disks. Shifting to remote work upended traditional IT security practices.

By Samantha Schwartz • July 2, 2020

Ransomware vs. healthcare: How the pandemic added to a cyber crisis

Maze was responsible for at least six ransomware attacks this year and NetWalker was responsible for at least five, according to Recorded Future. 

By Samantha Schwartz • June 30, 2020

A Microsoft bug detection breakthrough has its drawbacks: undetected flaws

Although an accuracy level of 99% sounds great, given the scale that Microsoft is working on this still leaves a huge number of bugs misidentified — 3,000 a month, in fact. 

By Samuel Bocetta • June 29, 2020

DevSecOps in government: Enabling secure productivity during a pandemic

Security continues to be a core focus for all software tools. You need the right strategy to avoid negatively impacting the quality of the code nor the ability to deliver products quickly.

By Jeff Mironcow • June 29, 2020

First came communication platform adoption. Now it's time for strategy

Between technology vision and employee demand, CIOs are confronted with a new challenge: preserving employee well-being. 

By Samantha Schwartz • June 26, 2020

Going remote, employee productivity hampered by password lockouts, app access

Working through the global crisis highlighted gaps in IT, allowing companies to become more aware of the challenges they face amid disruption.

By Roberto Torres • June 25, 2020

Former Salesforce exec joins Zoom as CISO

As Jason Lee takes over security at Zoom, the company is ending its 90-day security and privacy plan, which it put in place following highly publicized flaws in March. 

By Samantha Schwartz • June 25, 2020

Businesses to spend more on security as the number, size of cyberattacks grow

Security strategies are changing as COVID-19's disruption threatens an increase in insider threats and challenges identifying the location of malicious activity.

By Samantha Schwartz • June 24, 2020

3 healthcare CISOs tackled telehealth at hyper speed — they wish they were faster

Telehealth is a years-long pursuit for healthcare organizations. But like other digital transformation efforts, COVID-19 accelerated it. 

By Samantha Schwartz • June 23, 2020

Gartner shrinks infosec spending forecast for 2020, cloud security gets COVID-19 boost

Certain areas of cybersecurity are "supported" by stay-at-home orders, including VPNs and firewalls, endpoint protection platforms, cloud security and secure web gateways. 

By Samantha Schwartz • June 19, 2020

Following scrutiny, Zoom enables end-to-end encryption to all users

Available as technical preview, the feature uses 256-bit AES-GCM encryption, the same encryption used by default in meetings.

By Samantha Schwartz • Updated Oct. 27, 2020

Banking trojan resurfaces targeting JPMorgan, Capital One

There are "definitely more credentials" floating around the dark web currently because businesses are largely using remote desktop protocol for database access, said Justin Heard, security engineer at Nuspire.

By Samantha Schwartz • June 17, 2020

Sublimits: What execs get wrong about cyber coverage

Ambiguities and uncertainties can delay adoption or wreak havoc when coverage is needed.

By Samantha Schwartz • June 16, 2020

Manufacturers, service providers primary targets of Q1 ransomware incidents

In Q2, cybercriminals are ramping up phishing schemes and other tactics that seize on "the opportunities presented by the pandemic."

By Samantha Schwartz • June 11, 2020