Security: Page 2

Tabletop exercises can exceed $50K, limited to annual testing

With fewer tabletop exercises, organizations cannot perform a variety of cyberattack scenarios and develop "muscle memory" for responses. 

By Samantha Ann Schwartz • Aug. 17, 2020

COVID-19 is shattering cyberattack records

The daily inundation of misinformation, misconceptions and misunderstandings has given cybercriminals an endless buffet of cyber-based ammo to iterate their attacks.

By Samantha Ann Schwartz • Aug. 12, 2020

Capital One to pay $80M penalty over 2019 data breach

In its consent order, the Office of the Comptroller of the Currency said the bank "failed to establish appropriate risk management" and "failed to identify numerous control weaknesses and gaps in the cloud operating environment."

By Anna Hrushka , Samantha Ann Schwartz • Aug. 06, 2020

How confident are security leaders in their ROI?

Business-aligned leaders are nearly five-times more likely to collaborate with stakeholders on cost, performance and risk reductions than more reactive leaders, according to a Tenable report.

By Samantha Ann Schwartz • Aug. 05, 2020

Internet disruptions up 45% since January, ThousandEyes finds

If outages result from massive upticks in traffic, they can ripple through businesses, no matter their connection to the internet or an ISP. 

By Samantha Ann Schwartz • Aug. 04, 2020

Opinion

Investing in too many cybersecurity tools could hurt defenses

While programs, software and tools are essential to any cybersecurity defense plan, these must work in tandem with security educated employees. 

By Samuel Bocetta • July 30, 2020

Paradigm shift left VPNs, edge security awaiting long-term strategy

Companies are coming to terms with the reality of securing every employee's network. In some cases, they're unable to. 

By Samantha Ann Schwartz • July 30, 2020

5 charts that show the impact, and cost, of data breaches

With every day a breach goes undetected or unresolved, costs mount, customers lose patience, and a company earns a reputation of neglect.

By Samantha Ann Schwartz • July 29, 2020

Email is still a hacker's wonderland, they could take or leave Slack

While attackers linger in email accounts or sell access points, Slack credentials available for sale go ignored. 

By Samantha Ann Schwartz • July 27, 2020

Passwords for everything. Why are they still terrible?

Passwords are the cockroaches of cybersecurity, yet the methods for managing them don't have to live forever.

By Samantha Ann Schwartz • July 24, 2020

The unanticipated security challenge in Mars, Incorporated pivot to remote work

"I thought we were doing pretty well with our third-party program," said CISO Andrew Stanley. The company experienced "a complete change in the way that technology would be delivered." 

By Samantha Ann Schwartz • July 21, 2020

Column

The dilemma of running TikTok on devices with corporate data

The CIO Dive team discussed the implications of banning personal applications. Here are our thoughts. 

By Samantha Ann Schwartz , Naomi Eide , Roberto Torres • July 20, 2020

Are businesses covered if their service provider is hit by ransomware?

The fallout of supply chain-style ransomware attacks are twofold — data encryption and data exfiltration — cyber insurance has to reckon with both. 

By Samantha Ann Schwartz • July 17, 2020

Why anti-phishing exercises could 'alienate' employees in crisis

Between maintaining business continuity and preserving employee well-being, CISOs had to decide if a pandemic was an appropriate time to test employee cybersecurity awareness.

By Samantha Ann Schwartz • July 16, 2020

CCPA critics warn innovation could lose under the law. What's at stake?

Proponents say proper preparation allows compliance and growth to coexist.

By Samantha Ann Schwartz • July 14, 2020

Everyone is struggling with cloud security

WIth rising complexity, 96% of organizations are concerned about their cloud security, a Sophos report found. Misconfigurations are at the heart of the trouble.

By Samantha Ann Schwartz • July 10, 2020

'If the public knew:' Ripple20 shows medical device software cyber weakness

Last month’s discovery that Baxter and B. Braun infusion pumps face risk of remote attacks by hackers comes as a medtech effort to track third-party components in devices gains momentum.

By Greg Slabodkin • July 08, 2020

The new cybersecurity priorities of 2020

The secure perimeter of offices disappeared. Companies had to scale or buy more technologies for a remote workforce.

By Samantha Ann Schwartz • July 06, 2020

Even Pentagon IT leaders want more telework post-pandemic

The Pentagon has been slow to adopt the cloud and famously reliant on floppy disks. Shifting to remote work upended traditional IT security practices.

By Samantha Ann Schwartz • July 02, 2020

Ransomware vs. healthcare: How the pandemic added to a cyber crisis

Maze was responsible for at least six ransomware attacks this year and NetWalker was responsible for at least five, according to Recorded Future. 

By Samantha Ann Schwartz • June 30, 2020

Opinion

A Microsoft bug detection breakthrough has its drawbacks: undetected flaws

Although an accuracy level of 99% sounds great, given the scale that Microsoft is working on this still leaves a huge number of bugs misidentified — 3,000 a month, in fact. 

By Samuel Bocetta • June 29, 2020

Sponsored by Coder

DevSecOps in government: Enabling secure productivity during a pandemic

Security continues to be a core focus for all software tools. You need the right strategy to avoid negatively impacting the quality of the code nor the ability to deliver products quickly.

By Jeff Mironcow • June 29, 2020

First came communication platform adoption. Now it's time for strategy

Between technology vision and employee demand, CIOs are confronted with a new challenge: preserving employee well-being. 

By Samantha Ann Schwartz • June 26, 2020

Going remote, employee productivity hampered by password lockouts, app access

Working through the global crisis highlighted gaps in IT, allowing companies to become more aware of the challenges they face amid disruption.

By Roberto Torres • June 25, 2020

Former Salesforce exec joins Zoom as CISO

As Jason Lee takes over security at Zoom, the company is ending its 90-day security and privacy plan, which it put in place following highly publicized flaws in March. 

By Samantha Ann Schwartz • June 25, 2020