Coronavirus tests Ohio State, Stanford CISOs as fall semester begins

CISOs lost visibility when students and staff went home. Since then, they've gained capacity to react faster to security challenges.

By Samantha Schwartz • Aug. 21, 2020

Carnival hit by ransomware, employee and customer data at risk

If the attack is concluded as negligent and a result of insufficient security protocols, the company could face privacy-related fines from employees and customers. 

By Samantha Schwartz • Aug. 19, 2020

Tabletop exercises can exceed $50K, limited to annual testing

With fewer tabletop exercises, organizations cannot perform a variety of cyberattack scenarios and develop "muscle memory" for responses. 

By Samantha Schwartz • Aug. 17, 2020

COVID-19 is shattering cyberattack records

The daily inundation of misinformation, misconceptions and misunderstandings has given cybercriminals an endless buffet of cyber-based ammo to iterate their attacks.

By Samantha Schwartz • Aug. 12, 2020

Capital One to pay $80M penalty over 2019 data breach

In its consent order, the Office of the Comptroller of the Currency said the bank "failed to establish appropriate risk management" and "failed to identify numerous control weaknesses and gaps in the cloud operating environment."

By Anna Hrushka , Samantha Schwartz • Aug. 6, 2020

How confident are security leaders in their ROI?

Business-aligned leaders are nearly five-times more likely to collaborate with stakeholders on cost, performance and risk reductions than more reactive leaders, according to a Tenable report.

By Samantha Schwartz • Aug. 5, 2020

Internet disruptions up 45% since January, ThousandEyes finds

If outages result from massive upticks in traffic, they can ripple through businesses, no matter their connection to the internet or an ISP. 

By Samantha Schwartz • Aug. 4, 2020

Investing in too many cybersecurity tools could hurt defenses

While programs, software and tools are essential to any cybersecurity defense plan, these must work in tandem with security educated employees. 

By Samuel Bocetta • July 30, 2020

Paradigm shift left VPNs, edge security awaiting long-term strategy

Companies are coming to terms with the reality of securing every employee's network. In some cases, they're unable to. 

By Samantha Schwartz • July 30, 2020

5 charts that show the impact, and cost, of data breaches

With every day a breach goes undetected or unresolved, costs mount, customers lose patience, and a company earns a reputation of neglect.

By Samantha Schwartz • July 29, 2020

Email is still a hacker's wonderland, they could take or leave Slack

While attackers linger in email accounts or sell access points, Slack credentials available for sale go ignored. 

By Samantha Schwartz • July 27, 2020

Passwords for everything. Why are they still terrible?

Passwords are the cockroaches of cybersecurity, yet the methods for managing them don't have to live forever.

By Samantha Schwartz • July 24, 2020

The unanticipated security challenge in Mars, Incorporated pivot to remote work

"I thought we were doing pretty well with our third-party program," said CISO Andrew Stanley. The company experienced "a complete change in the way that technology would be delivered." 

By Samantha Schwartz • July 21, 2020

The dilemma of running TikTok on devices with corporate data

The CIO Dive team discussed the implications of banning personal applications. Here are our thoughts. 

By Samantha Schwartz , Naomi Eide , Roberto Torres • July 20, 2020

Are businesses covered if their service provider is hit by ransomware?

The fallout of supply chain-style ransomware attacks are twofold — data encryption and data exfiltration — cyber insurance has to reckon with both. 

By Samantha Schwartz • July 17, 2020

Why anti-phishing exercises could 'alienate' employees in crisis

Between maintaining business continuity and preserving employee well-being, CISOs had to decide if a pandemic was an appropriate time to test employee cybersecurity awareness.

By Samantha Schwartz • July 16, 2020

CCPA critics warn innovation could lose under the law. What's at stake?

Proponents say proper preparation allows compliance and growth to coexist.

By Samantha Schwartz • July 14, 2020

Everyone is struggling with cloud security

With rising complexity, 96% of organizations are concerned about their cloud security, a Sophos report found. Misconfigurations are at the heart of the trouble.

By Samantha Schwartz • July 10, 2020

'If the public knew:' Ripple20 shows medical device software cyber weakness

Last month’s discovery that Baxter and B. Braun infusion pumps face risk of remote attacks by hackers comes as a medtech effort to track third-party components in devices gains momentum.

By Greg Slabodkin • July 8, 2020

The new cybersecurity priorities of 2020

The secure perimeter of offices disappeared. Companies had to scale or buy more technologies for a remote workforce.

By Samantha Schwartz • July 6, 2020

Even Pentagon IT leaders want more telework post-pandemic

The Pentagon has been slow to adopt the cloud and famously reliant on floppy disks. Shifting to remote work upended traditional IT security practices.

By Samantha Schwartz • July 2, 2020

Ransomware vs. healthcare: How the pandemic added to a cyber crisis

Maze was responsible for at least six ransomware attacks this year and NetWalker was responsible for at least five, according to Recorded Future. 

By Samantha Schwartz • June 30, 2020

A Microsoft bug detection breakthrough has its drawbacks: undetected flaws

Although an accuracy level of 99% sounds great, given the scale that Microsoft is working on this still leaves a huge number of bugs misidentified — 3,000 a month, in fact. 

By Samuel Bocetta • June 29, 2020

DevSecOps in government: Enabling secure productivity during a pandemic

Security continues to be a core focus for all software tools. You need the right strategy to avoid negatively impacting the quality of the code nor the ability to deliver products quickly.

By Jeff Mironcow • June 29, 2020

First came communication platform adoption. Now it's time for strategy

Between technology vision and employee demand, CIOs are confronted with a new challenge: preserving employee well-being. 

By Samantha Schwartz • June 26, 2020