Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Blog

CIO Vs. CISO: Who Does What?

Every organization handles security differently, based on their needs and internal structure—but in some mid-sized and large companies, both the chief information officer (CIO) and the chief information security officer (CISO) are involved. This can set up a CIO vs. CISO standoff. Indeed, historically, the relationship between the CIO and CISO has been described as adversarial but ever-evolving.

The SEC's New Cybersecurity Regulations Part II: What Shareholders Should Know

It seems everyone is concerned about cybersecurity these days, and the investor community is no different. Shareholders are reading the headlines—ransomware attacks, data breaches, infrastructure disruptions—and they are wondering how these incidents could impact the companies that they invest in. Shareholders are about to get a lot more information from companies in the months ahead. In July 2023, the U.S.

Tackling the Surge: The Expanded Financial Attack Surface

The Attack Surface is Growing, and fast. What once was considered the attack surface is no longer. Instead organizations are faced with a sprawling attack surface, including not just domains, IPs and sub-domains, but also third parties, brand risks and more. Businesses in the finance sector face two additional challenges: This blog focuses on banks, FinTech companies and insurance providers, as they are among the largest types of entities in the financial sector.

Qakbot Banking Trojan

Qakbot, also known as Pinkslipbot, Qbot and Quakbot, is a notorious Banking Trojan designed to steal account credentials and online banking session information leading to account takeover fraud. Commonly distributed via malicious unsolicited email (malspam), Qakbot campaigns reportedly deployed ‘Cobalt Strike’ beacons likely in an attempt to move laterally as well as gaining persistency and establishing a robust communication channel back to the threat actor.

Cybersecurity Threats in Remote Learning

The pandemic brought with it many changes that affected how we interacted with each other; one of the biggest was remote learning. Traditionally, students had to be in classrooms physically to attend lectures. However, as this became unsafe and government regulations were put into effect, schools in many parts of the world had to adopt an online learning model.

Cybersecurity Careers: Navigating the Education Path

In a world where data breaches and cyberattacks are as frequent as morning coffee, the demand for cybersecurity specialists has never been higher. Whether you're a budding hacker hunter or just fascinated by the murky side of the digital world, a career in cybersecurity offers exciting challenges and opportunities. But how do you go about getting an education to work in this constantly evolving field? Do not be alarmed, my cyber-curious friend; we are about to embark on a journey through the fascinating labyrinth of cybersecurity careers.

Building a cloud-based financial app with regulatory compliance

Financial institutions recognize the advantages of migrating apps to the cloud or adopting a multicloud approach. While modern technologies offer tremendous opportunities, they also present challenges related to safeguarding customer data, cybersecurity, and complying with the law in the strictly regulated finance sector. How can you create a cloud-based FinTech app and ensure its compliance with industry regulations?

How to Support Business Agility With Hybrid Cloud Services

Hybrid cloud takes the capabilities of the public and various private cloud options and merges them, allowing businesses to host different workloads within different environments depending on their performance, security, and resource needs. Companies leveraging a hybrid cloud strategy promote business competitiveness and agility, allowing them to respond to changes in resource demands quickly.

What a Cybersecurity Risk Management Process Entails

Organizations today are at greater risk of a cyberattack than ever before, and that risk will only grow as new technologies keep emerging in the future. That means an ever greater need for cybersecurity risk management — that is, the process of identifying, analyzing, prioritizing, and mitigating your organization’s cybersecurity risks.