Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

February 2024

riscosity

Secure your code and protect your data flows with Riscosity and Semgrep

Feb 29, 2024 By Charrah Hardamon In Riscosity
Semgrep is a leading static application security testing (SAST) tool powered by an open-source community for surfacing bugs, discovering vulnerabilities, and enforcing code standards. Semgrep has scanned over 75 million packages, contributed to 2000 community rules, and supports over 30 coding languages. Riscosity is the leading data flow observability and security platform. This is why we’re excited to announce Ricosity’s new integration with Semgrep.
Read Post

Communicating Cyber Risk to Executives and Boards with Shamane Tan

Feb 29, 2024 By Rubrik In Rubrik
In this episode of Cyber Security Decoded from Rubrik Zero Labs, host Steve Stone is joined by Chief Growth Officer at Sekuro and Best-Selling Author Shamane Tan to discuss differences in the cybersecurity landscape between the US and APAC, communication strategies for CISOs, building trust for better cybersecurity outcomes, improving organizational resilience, and diversity in the cybersecurity field.
View Video
bitsight

Tackling Shadow IT Head-On: Strategies for Cybersecurity Leaders

Feb 29, 2024 By Tim Grieveson In BitSight
As cybersecurity leaders, we're all too familiar with the challenges posed by Shadow IT—a persistent thorn in the side of IT and security teams worldwide. And when high-profile supply chain attacks make headlines, the urgency to understand our reliance on third parties becomes all too real.
Read Post

Visualizing Vulnerability Management: What Does a Single Pane of Glass Really Look Like?

Feb 29, 2024 By Nucleus In Nucleus
Single Pane of Glass (SPOG) is a common buzzword that sends shivers down the spines of technical folks everywhere. Yet, executive teams ask for it, especially in vulnerability management. At the same time, the complex and fragmented nature of modern IT environments wreaks havoc on organizations aiming to understand their current location related to remediating and patching risks. So, what exactly is a single pane of glass, and what does it look like for enterprises today?
View Video
SecurityScorecard

SecurityScorecard 2024 Global Third-Party Cybersecurity Breach Report: Software supply chain is top target for ransomware groups

Feb 28, 2024 By SecurityScorecard In SecurityScorecard
The SecurityScorecard Global Third-Party Breach Report uses the world’s largest proprietary risk and threat dataset to provide unique insights into the intricate web of supply chain vulnerabilities exploited by ransomware groups. As the digital landscape continues to evolve, so too do the tactics of cyber adversaries. Ransomware groups, in particular, have honed in on a prime target: the software supply chain.
Read Post
memcyco

Top 10 Digital Risk Protection Software Solutions

Feb 28, 2024 By Eran Tsur In Memcyco
It’s no longer a question of ‘if’, but ‘when’ and ‘how’ cyber threats will target an organization. This reality demands a proactive approach to digital security. Recent data shows that over 85% of organizations have experienced a cyber attack supporting this need for vigilance. These incidents range from data breaches to brand impersonation, each carrying significant risks to business integrity and continuity.
Read Post
riskoptics

Steps to Creating a Statement of Applicability (SOA)

Feb 28, 2024 By RiskOptics In RiskOptics
A Statement of Applicability (SOA) is a document you draft as part of achieving compliance with ISO 27001 and other ISO standards. The SOA reviews the internal controls you have decided to include in your information security management system (ISMS) and why you selected those controls. Writing a thoughtful, comprehensive SOA is crucial to your ISO 27001 compliance journey.
Read Post
veracode

Data-driven Strategies for Effective Application Risk Management in 2024

Feb 28, 2024 By Chris Wysopal In Veracode
Insecure software is significantly impacting our world. In a recent statement, CISA Director Jen Easterly declared: “Features and speed to market have been prioritized against security, leaving our nation vulnerable to cyber invasion. That has to stop... We are at a critical juncture for our national security.”
Read Post

Bitsight Vendor Risk Management Walkthrough

Feb 28, 2024 By BitSight In BitSight
Streamline Assessments, Monitor Vendors, and Validate Security Posture with Ease. No more manual workflows or toggling between tools—with Bitsight VRM, part of the industry’s first end-to-end third-party risk management solution, you can effortlessly navigate through risk assessments and continuous monitoring with just a flip of a switch. Discover a new level of clarity and efficiency with instant access to an ever-growing network of 40,000+ vendor profiles. Track onboarding and validate questionnaire responses with objective data to make informed decisions and expedite risk mitigation.
View Video
obrela

Obrela Achieves NCSC CIR Level 2 Assure Service Provider Status , Demonstrating Commitment to Cybersecurity Excellence

Feb 27, 2024 By Obrela In Obrela
Obrela proudly announces it has been awarded the National Cyber Security Centre (NCSC) Cyber Incident Response (CIR) Level 2 Assured Service Provider status issued by CREST. This underscores Obrela's unwavering dedication to maintaining the highest standards of cybersecurity readiness and incident response capabilities.
Read Post
bitsight

Hunting PrivateLoader: The malware behind InstallsKey PPI service

Feb 27, 2024 By André Tavares In BitSight
Since July 2022, Bitsight has been tracking PrivateLoader, the widespread malware downloader behind the Russian Pay-Per-Install (PPI) service called InstallsKey. At the time, this malware was powering the now decommissioned ruzki PPI service. Figure 1 presents a brief description of the service, which was found in their sales telegram channel. Fig. 1 - Service description on telegram channel profile (Russian and English).
Read Post

Risk Management Essentials: How to Operationalize Risk Reporting

Feb 27, 2024 By TrustCloud In TrustCloud
This virtual workshop delves into the core of risk management reporting. Led by our panel of industry experts, this session will equip you with the essential skills to not only analyze and report on organizational risks, but also communicate them effectively to leadership teams. Discover how to construct a robust reporting framework and master the art of presenting metrics with finesse.
View Video
riskoptics

Tenable for Vulnerability Scans: Maximizing Your Security Posture

Feb 27, 2024 By RiskOptics In RiskOptics
Vulnerability scans are essential to an effective cyber defense strategy, offering a proactive approach to uncover and mitigate potential threats before they can exploit your systems. At the forefront of this crucial practice are Tenable and RiskOptics, each offering comprehensive solutions designed to conduct thorough vulnerability assessments. These tools identify weaknesses and help prioritize and address them, significantly strengthening your overall security posture.
Read Post
riskoptics

Why There's No Such Thing as PCI Certification

Feb 27, 2024 By RiskOptics In RiskOptics
If your business takes debit or credit card payments online or in person, you’ve most likely heard of “PCI DSS” or “PCI SSC.” These words relate to sensitive data security procedures, namely the controls that a retailer or payment processor should have to protect payment card data from cyber attacks. Being PCI compliant does not ensure a company’s systems are safe; nonetheless, it is a significant step in that direction.
Read Post
riskoptics

Who Owns PCI Controls? Unpacking ZenGRC in Compliance

Feb 27, 2024 By RiskOptics In RiskOptics
PCI DSS compliance is crucial for any business that processes, stores, or transmits cardholder data. But who exactly is responsible for implementing and enforcing PCI DSS requirements? This blog post will unpack PCI data security standard controls, who owns them, the penalties for non-compliance, and how a Governance, Risk management, and Compliance (GRC) platform like ZenGRC can help streamline compliance.
Read Post
upguard

Programmable Logic Controllers and Cybersecurity Risk

Feb 26, 2024 By Caitlin Postal In UpGuard
Considered the "brain" of industrial automation, programmable logic controllers (PLCs) are an important factor in industrial control systems (ICS), especially for critical infrastructure in the public sector. PLCs are an industrial computer used to control automated devices in a variety of industries, including industrial manufacturing and critical infrastructure. This article offers suggestions for PLC security risks, as well as cybersecurity standards for risk mitigation.
Read Post
riskoptics

2024's Best GRC Platforms for Enterprises: An Expert Ranking

Feb 26, 2024 By RiskOptics In RiskOptics
In today’s highly complex business landscape, enterprises are ever more aware of the need for robust governance, risk management, and compliance (GRC) capabilities. Hence the demand for effective GRC platforms has never been higher. These platforms not only assure that organizations stay on the right side of regulations. They also secure your business against a plethora of cyber threats and streamline governance processes.
Read Post
riskoptics

The EU AI Act Explained: Implications for Your Business

Feb 25, 2024 By RiskOptics In RiskOptics
The European Union’s Artificial Intelligence Act emerged at the end of 2023 as a landmark law for the digital age and for the regulation of artificial intelligence. It is the world’s first comprehensive AI legislation to govern the ethical development and safe use of AI technologies. The “EU AI Act,” as it’s known, strives to impose a balanced framework as businesses automate manual tasks and deploy AI algorithms to drive efficiency and innovation.
Read Post
upguard

TPRM Strategies for India's Digital Personal Data Protection Act

Feb 23, 2024 By Leah Sadoian In UpGuard
India established a framework for protecting and processing personal data called the Digital Personal Data Protection Bill. After passing both houses of Parliament, this bill evolved into the Digital Personal Data Protection Act (DPDP) in 2023. This act creates a robust and comprehensive framework to protect sensitive information while supporting India's economic growth and digital transformation.
Read Post
algosec

Introduction to Cloud Risk Management for Enterprises

Feb 23, 2024 By Rony Moshkovich In AlgoSec
Every business needs to manage risks. If not, they won’t be around for long. The same is true in cloud computing. As more companies move their resources to the cloud, they must ensure efficient risk management to achieve resilience, availability, and integrity. Yes, moving to the cloud offers more advantages than on-premise environments. But, enterprises must remain meticulous because they have too much to lose.
Read Post
securitysenses

Risk Management in Aviation Logistics: Mitigating Challenges for Seamless Operations

Feb 22, 2024 By SecuritySenses In SecuritySenses
As a trusted partner to the United States Government, aviation logistics consists of and involves the complex coordination of various activities to ensure the timely and efficient movement of goods and movement of people by way of air. With increased demand for faster, more expeditious forms of transportation, air transportation has grown exponentially and therefore the logistics sector faces multiple challenges that can disrupt operations and even sometimes result in jeopardizing safety.
Read Post
SecurityScorecard

3 2 1... Impact! Early Results under the SEC's Cybersecurity Governance Rule

Feb 22, 2024 By SecurityScorecard In SecurityScorecard
In July 2023, the SEC adopted a new rule requiring disclosure of “material” cybersecurity incidents and detailed information on cybersecurity risk management, strategy and governance by public companies. With the new rule taking effect in December and annual reports due for public release and consumption in the first few months 2024, companies are scrambling to closely review and hone their cyber programs to address these new reporting requirements.
Read Post
nucleus

5 Things to Consider Before Using SSVC Vulnerability Prioritization Framework

Feb 22, 2024 By Kevin Swartz In Nucleus
Vulnerability prioritization is one of the most important steps in managing cybersecurity risks effectively. Ideally, security teams would address every vulnerability immediately upon detection. However, the reality is far from ideal because of the overwhelming number of vulnerabilities and their escalating volume among other challenges, like severity spectrum differences requiring nuanced assessment, evolving threats, or resource constraints.
Read Post
ionix

Asset Importance: The Overlooked Factor in Cyber Risk Prioritization

Feb 22, 2024 By Nadav Levy In IONIX
This blog post delves into a critical yet often neglected aspect of cyber risk analysis —adding organizational context by understanding and prioritizing the importance of assets. Without considering the unique business context of an organization, security teams cannot effectively prioritize and remediate what matters most to their organization.
Read Post
SecurityScorecard

Top 10 Cybersecurity Questions to Ask Your Vendors: A step-by-step guide to reduce supply chain risk

Feb 22, 2024 By SecurityScorecard In SecurityScorecard
A cybersecurity vendor questionnaire is vital in assessing the competency and reliability of potential partners. It serves as a comprehensive tool to evaluate various aspects crucial for safeguarding sensitive data and infrastructure. Through detailed inquiries about security protocols, compliance measures, incident response plans, and past breach incidents, the questionnaire helps gauge the vendor’s commitment to robust cybersecurity practices.
Read Post
SecurityScorecard

Beating LockBit at its Own Game: Law enforcement's takedown of a prolific ransomware group

Feb 22, 2024 By SecurityScorecard In SecurityScorecard
After a years-long investigation, this week the FBI and law enforcement agencies in the UK and Europe took over the main website of the cybercrime group known as LockBit. Law enforcement additionally arrested LockBit associates in Poland, Ukraine, and the U.S. and the U.S. Treasury imposed sanctions on Russian nationals affiliated with the group. The joint operation re-engineered LockBit’s online system to mimic the countdown clock used by the group in its extortion attempts.
Read Post
bitsight

Less Is More: Consolidating Your Third Party Risk Management Tools

Feb 21, 2024 By Anders Norremo and Qionglu Lei In BitSight
Proudly serving over 3,000 enterprises globally, Bitsight works closely with risk leaders across industries to help them protect their businesses. CISOs and third-party risk professionals face pressing challenges, from regulations to efficiency to maintaining supply chain resilience—all calling for smarter, easier, and more integrated solutions.
Read Post
kovrr

How Private Equity Firms Can Streamline Portfolio Optimization With CRQ

Feb 21, 2024 By Kovrr In Kovrr
Private equity (PE) firms have a unique power in the global marketplace, independently fostering innovation, creating jobs, and propelling economic growth. These entities infuse capital into a spectrum of industries throughout the business life-cycle, intent on delivering superior returns to investors while effectively navigating the complexities of the broader threat landscape.
Read Post
riscosity

A Comprehensive Guide to Open-Source Security

Feb 21, 2024 By Anirban Banerjee In Riscosity
Open source security is a term used to describe the process of protecting your organization’s data and network from attack by using open-source software. It refers to the use of open-source software (OSS) for data protection. Open source software is free to use, meaning that anyone can access it without paying fees. This allows organizations to take advantage of the collective knowledge and experience of thousands of people who have contributed code or worked on projects together.
Read Post
riskoptics

2024's Top GRC Solutions: Finding the Best for Your Business

Feb 21, 2024 By RiskOptics In RiskOptics
Implementing an effective governance, risk, and compliance (GRC) framework has become essential for businesses seeking to manage risk and assure regulatory compliance. That’s easier said than done, unfortunately. Given today’s challenging regulatory and security environments, organizations need robust GRC capabilities to align governance, risk, and compliance activities. The key is finding the right GRC platform to meet your specific GRC needs.
Read Post
riskoptics

Troubleshooting Vulnerability Scan Failures: A Quick Guide

Feb 21, 2024 By RiskOptics In RiskOptics
In the digital age, assuring the security and integrity of IT infrastructure is paramount for businesses of all sizes. Vulnerability scanning plays a crucial role in identifying weaknesses in systems and networks, and forms the backbone of any robust cybersecurity strategy. What happens, however, when this critical step fails or encounters issues?
Read Post
SecurityScorecard

Chinese Hacking Group Targets US Critical Infrastructure

Feb 20, 2024 By SecurityScorecard In SecurityScorecard
Earlier this month, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) issued a joint warning that the hacking group known as “Volt Typhoon” has been lurking in US critical infrastructure systems for at least five years.
Read Post
cycognito

The Long Tail of the Supply Chain: Leveraging Exposure Management to Mitigate Risk from Current or Former Vendors

Feb 20, 2024 By Emma Zaballos In CyCognito
Every organization must prioritize the security of its systems and the protection of its customers’ sensitive information, but exposure doesn’t only happen through applications your own team develops and controls. Incidents like the recent exposure of customer data by Juniper Networks serve as stark reminders of the challenges and risks associated with managing the exposure of software, hardware, and services that you use.
Read Post
riskoptics

How to Define Objectives Under ISMS?

Feb 19, 2024 By RiskOptics In RiskOptics
In today’s digital age, protecting your organization’s information assets is paramount. An information security management system (ISMS) plays a crucial role in this endeavor, providing a structured approach to managing and protecting company information. This article explores how an ISMS supports risk management, its key elements, the main security objectives, and how to define and make your organization’s information security objectives both measurable and actionable.
Read Post
riskoptics

Competing with ZenGRC: A Look at the Market's Top Players

Feb 18, 2024 By RiskOptics In RiskOptics
In the evolving landscape of governance, risk management, and compliance (GRC) management, organizations increasingly rely on sophisticated software to navigate regulatory environments and mitigate risks. Among these solutions ZenGRC has emerged as a prominent player, but it does operate in a competitive market with capable alternatives.
Read Post
upguard

Using TPRM to Protect Intellectual Property in University Research

Feb 16, 2024 By Nicholas Sollitto In UpGuard
University-industry collaborations and other joint research ventures offer access to resources, expertise, funding, and other benefits for university researchers. However, through the use of unvetted software, password sharing, and other actions these external partnerships can expose the university and its intellectual assets to substantial cybersecurity threats, such as unauthorized access, data breaches, and other cyber attacks.
Read Post
upguard

In-House vs Outsourced Third-Party Risk Management

Feb 16, 2024 By Nicholas Sollitto In UpGuard
Today’s cybersecurity landscape is teeming with third-party threats: supply chain risks, regulatory compliance requirements, third-party security flaws, malicious insiders, and more. Whether your organization’s risk appetite craves conservative or aggressive third-party relationships, these risks make third-party risk management (TPRM) necessary.
Read Post
upguard

TPRM & FINRA Compliance: Regulatory Notice 21-29

Feb 16, 2024 By Nicholas Sollitto In UpGuard
The United States Congress first authorized the Financial Industry Regulatory Authority (FINRA) to protect American investors and oversee the broker-dealer industry in 2007. FINRA is an independent regulatory organization that upholds its obligation and ensures a fair market by establishing rules to regulate business activities and improve the security of member firms and other market participants. With few exceptions, most broker-dealer firms must register with FINRA.
Read Post
bitsight

5 Cyber Governance Tips for Board Members, Inspired by New Bitsight-Google Study

Feb 15, 2024 By Noah Stone In BitSight
Cybersecurity has become a critical part of corporate governance, with board members increasingly held accountable for the digital safety of their organizations. Amid rising breach costs, new cybersecurity regulations like those from the U.S. Securities and Exchange Commission (SEC), and new studies finding widespread cybersecurity failures, the impact of board-level cyber governance decisions is significant.
Read Post
kovrr

Transforming Cybersecurity Risk Assessments Into Actionable Plans With CRQ

Feb 15, 2024 By Kovrr In Kovrr
‍Market success has often demanded that business leaders take risks. Some of the most profitable executives are those who have pursued bold initiatives, recognizing, despite the dangers, the potential rewards. However, as organizations grow and become more complex, the costs of these risks rise, demanding a more data-driven approach to its management.
Read Post
riskoptics

Navigating the Future of AI Governance: A Guide to NIST AI RMF, ISO/IEC 42001, and the EU AI Act

Feb 15, 2024 By RiskOptics In RiskOptics
In the rapidly evolving landscape of artificial intelligence (AI), governance, risk, and compliance (GRC) professionals somehow need to navigate the increasingly complex challenges of trustworthy development, deployment, and monitoring of AI systems.
Read Post
nucleus

National Cyber Security Centre (NCSC) Vulnerability Management Guidance Checklist

Feb 15, 2024 By Kevin Swartz In Nucleus
As of February 12, 2024, the National Cyber Security Centre (NCSC) has released Version 2.0 of its vulnerability management guidance. This update provides organizations with the latest strategies and practices to identify, assess, and manage cybersecurity vulnerabilities effectively. The NCSC’s updated guidance on vulnerability management outlines the importance of proactively managing vulnerabilities to secure technical estates.
Read Post
SecurityScorecard

What is the Zero Trust Security Model?

Feb 14, 2024 By SecurityScorecard In SecurityScorecard
Traditional security paradigms are increasingly falling short against sophisticated cyber threats in the dynamic and challenging cybersecurity landscape. This has led organizations to adopt the zero-trust security model, a paradigm shift that assumes no internal or external entity is to be trusted without verification.
Read Post

Applying Vulnerability Intelligence to CVSS and SSVC Frameworks

Feb 14, 2024 By Nucleus In Nucleus
In this presentation, we explore the intersection of vulnerability intelligence and prioritization frameworks such as CVSS and SSVC as a means for strategically and rapidly prioritizing vulnerabilities to stay ahead of exploitation risks. We delve into the process of applying real-time threat intelligence tailored to the vulnerability landscape to enhance decision-making, optimize resource allocation, and ensure a precise and proactive defense against cyber threats.
View Video
SecurityScorecard

Love in the Time of Cyber Threats: Romance Scams and Dating App Cybersecurity

Feb 13, 2024 By SecurityScorecard In SecurityScorecard
As the digital attack surface expands, organizations and individuals worldwide face the nonstop threat of cyberattacks, phishing scams, and other cyber vulnerabilities. And with Valentine’s Day here, romance scams — especially ones originating online — are intensifying. With that in mind, SecurityScorecard’s researchers took a close look at the world of dating app security and romance scams to protect people—and their hearts—during Valentine’s Day.
Read Post
nucleus

Nucleus Security Raises $43 Million Series B Funding to Lead Innovation in Enterprise Risk-Based Vulnerability Management

Feb 12, 2024 By Nucleus In Nucleus
Nucleus Security announces it has secured $43 million in Series B funding led by Arthur Ventures and Lead Edge Capital. This milestone marks a significant leap forward in the company's mission to redefine how enterprises manage risk exposure from vulnerabilities across infrastructure, cloud, and application portfolios in one unified platform.
Read Post
kovrr

Cyber Risk Progression Feature Empowers CISOs to Highlight Success Over Time

Feb 12, 2024 By Kovrr In Kovrr
‍ For chief information security officers (CISOs), understanding how their organization's unique cyber risk landscape has evolved is paramount. Chronological analysis not only enables risk trends to emerge with more clarity but also provides the essential context required for more informed decision-making.
Read Post
nucleus

How Nucleus Security's $43M Series B Funding Powers Enterprise Risk-Based Vulnerability Management Innovation

Feb 12, 2024 By Steve Carter In Nucleus
We at Nucleus Security are thrilled to share our journey and vision following our recent $43 million Series B funding round. This investment, led by Arthur Ventures and Lead Edge Capital, is a testament to our commitment to leading the charge in vulnerability management innovation and our dedication to protecting digital infrastructures worldwide. Read the full press release here.
Read Post
SecurityScorecard

Cloud Security Best Practices

Feb 8, 2024 By SecurityScorecard In SecurityScorecard
In the swiftly evolving landscape of technology, cloud computing stands as a pivotal innovation, reshaping how we store, access, and manage data across the digital expanse. This paradigm shift towards cloud services offers unparalleled efficiency and flexibility, transforming the very foundation of our digital interactions. However, this transition also introduces complex security challenges that demand a nuanced and proactive approach to safeguard sensitive information against cyber threats.
Read Post
SecurityScorecard

Cybersecurity For The Internet of Things (IoT)

Feb 8, 2024 By SecurityScorecard In SecurityScorecard
The Internet of Things (IoT) has ushered in an era where devices are interconnected across the internet, enabling them to communicate and share data with ease. This innovation has dramatically transformed everyday life, introducing conveniences that were once the stuff of science fiction. Now, we can monitor our homes through cameras connected to our networks, control appliances from our smartphones, and receive real-time updates from our cars and health-monitoring smartwatches.
Read Post
cyberint

Finance's Cyber Armor: External Risk Mitigation and Management

Feb 8, 2024 By Gemma Goldstein In Cyberint
Businesses of all types face a variety of direct and indirect cybersecurity risks that originate from external sources. Protecting against them is where External Risk Mitigation and Management, or ERMM, comes into play. Here’s a look at the role that the ERMM process plays in providing the intelligence, scoping and discovery capabilities that modern organizations need.
Read Post
riscosity

Data Security Posture Management (DSPM): The Meaning, Importance, and How it Works

Feb 7, 2024 By Security Guest Expert In Riscosity
DSPM or Data Security Posture Management is the modern approach to securing the information ecosystem. It represents a pivotal shift from the traditional castle-and-moat approach focused on IT devices to one that is focused on data.
Read Post
bitsight

Practitioner's Corner: Managing Hidden Risk and Shadow IT

Feb 6, 2024 By Ryan Swimm In BitSight
When it comes to managing hidden risk and shadow IT, our primary challenge as cybersecurity practitioners is securing the organization’s data and applications while empowering users to perform their duties efficiently. After all, one survey found that 67% of employees aren’t completely satisfied with their workplace tools and technologies—often resulting in the adoption of unsanctioned applications.
Read Post
kovrr

Monitoring Progress With CRQ for Cybersecurity Performance Management

Feb 6, 2024 By Kovrr In Kovrr
Rome wasn't built in a day. It took architects, city planners, and laborers many years to construct it, making small developments every day. Just as with Rome, cybersecurity programs, too, require significant time and investment to come to fruition. ‍ However, without knowing their initial cyber risk exposure, it can be challenging for stakeholders to comprehend the full value that cybersecurity initiatives have already delivered to the organization.
Read Post
SecurityScorecard

DDoS Attacks: What You Need To Know

Feb 6, 2024 By SecurityScorecard In SecurityScorecard
In the intricate web of digital security threats, one particularly disruptive technique stands out: the Distributed Denial of Service (DDoS) attack. This form of cyber assault involves numerous compromised systems, often referred to as bots or zombies, which are used to overwhelm a target website with an avalanche of requests. The result? Legitimate users find themselves unable to access the site, leading to significant operational disruptions.
Read Post
SecurityScorecard

Hacker Subcultures: Unmasking the Motivations and Methods

Feb 5, 2024 By SecurityScorecard In SecurityScorecard
The world of cybersecurity is vast and teeming with a wide array of hackers who possess distinct motivations, objectives, and methods. Unfortunately, public awareness of these differences is nearly non-existent. Some individuals employ their skills for noble purposes, while others are driven by malicious intent. Let’s delve into several subcultures within the realm of hackers, exploring their unique characteristics and their roles in shaping the cybersecurity landscape.
Read Post
SecurityScorecard

Bolstering Cyber Resilience in the US Water Sector: A Call to Action

Feb 5, 2024 By SecurityScorecard In SecurityScorecard
Tomorrow, February 6, 2024, the House Homeland Security Committee will hold a hearing on securing US water systems from cyberattacks. Following last year’s widely publicized attack on the municipal water system in Aliquippa, Pennsylvania, Congress, the Cybersecurity and Infrastructure Security Agency (CISA), and industry leaders have rightly increased their focus on the unique risks facing water systems across the country.
Read Post
upguard

Protecting Student-Athlete Data: TPRM for Collegiate Athletics

Feb 1, 2024 By Leah Sadoian In UpGuard
American college athletics is a foundational pillar of higher education institutions and a profitable business model for universities. The National Collegiate Athletic Association (NCAA), which regulates college athletics, reported that in 2020, Division I schools earned $15.7 billion in athletics revenue. In 2023, NCAA Division I school Ohio State University reported a record-breaking revenue of over $275 million from its athletic department alone.
Read Post
SecurityScorecard

From Confusion to Clarity: Red Sift Breaks Down Google and Yahoo's Email Security Requirements

Feb 1, 2024 By SecurityScorecard In SecurityScorecard
Many people around the world right now are confused as to whether their organization is ready for Google and Yahoo’s new requirements for bulk senders. So don’t worry, you’re not alone. Back in October the announcement was made that there would be consequences for organizations sending more than 5,000 emails a day who didn’t have their email security in order. But what are the consequences? And who really needs to worry?
Read Post
SecurityScorecard

Decoding Cyber Security Innovations with SecurityScorecard CEO Alex Yampolskiy

Feb 1, 2024 By SecurityScorecard In SecurityScorecard
As part of a multi-part series with NightDragon, Nasdaq, and J.P. Morgan, SecurityScorecard founder and CEO Dr. Aleksandr Yampolskiy sat down with NightDragon CEO Dave DeWalt and unveiled his deep-rooted passion for cybersecurity. Tracing back to an early encounter with a computer virus as a child, Yampolskiy discusses how this pivotal moment sparked an enduring curiosity, driving him toward a distinguished academic path.
Read Post
nucleus

Nucleus Product Update 4.1

Feb 1, 2024 By Sonia Blanks In Nucleus
Welcome to the Nucleus Product Update 4.1. It’s a new year with new things to get excited about together. Here’s to making 2024 a great one! 🥳 This update outlines lots of Nucleus happenings you don’t want to miss, including: We’re also including a link to our latest webinars, which are value-packed sessions you don’t want to miss. Get the details for all updates below.
Read Post

Copyright © 2024 OpsMatters™. All rights reserved.