FTX, risk management, and attack surfaces - Visibility is the Key
The FTX crypto disaster is a great lesson in risk management. It brings into focus the importance of knowing where your valuables are and how they are being managed.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Crossword's Trillion protects Spanish Public Administration against threat of digital identity and credentials misuse
Spain's National Cryptological Centre deploys Trillion solution to provide a central view of threats across the public administration, and protect hundreds of thousands of users.
New Features: Third Party Cyber Risk Quantification & Data Transparency
Third party cyber risk can be a lot like the wild wild west - it’s hard to predict where your next loss will come from. We know that third-party cyber events can lead to millions of dollars of loss revenue, remediation costs, regulatory fines & more. That’s why Kovrr has made significant updates to their platform to help put a financial quantification on risk derived from your organization’s third parties.
How to Improve CISO & Board Member Communication
Here is how to establish successful 2-way communication between the board members and CISOs: Beating the learning curve If you’re a board member, it’s not considered okay if you show up to a meeting without knowing what’s EBITA. But it's perfectly acceptable for you to not know security, which is not good. So it’s your responsibility to educate yourself on cybersecurity. Similarly, CISOs need to learn to express technical things in business language. Seeing the CISO as a true business partner
What's the Difference Between Red Teaming and Penetration Testing?
When discussing cybersecurity, “penetration testing” and “red teaming” are two terms that are often used interchangeably but are two entirely separate concepts. If you are considering implementing additional cybersecurity protocols within your organization, it’s essential to understand the unique role and function of each of these processes and how they can benefit your organization.
SecurityScorecard Provides Comments to FERC's Proposed Risk-Based Cybersecurity Rulemaking
SecurityScorecard, the global leader in cybersecurity ratings, commented on the Federal Energy Regulatory Commission’s (FERC or “Commission”) proposal to establish rules for incentive-based rate treatments for certain voluntary cybersecurity investments by utilities. Cybersecurity is among the greatest threats to the resilience and reliability of America’s critical infrastructure, including its electricity infrastructure.
Key Cybersecurity Trends in 2023
Here are 3 key insights for 2023 I’ve gained after talking to dozens of CISOs and CIOs: Their budgets are not decreasing. Even though we see volatile and turbulent market conditions ahead, most CISOs’ budgets are not decreasing. It’s good news that the industry continues to thrive despite the economic headwinds. They are focusing on public and private sector collaborations. Many governments are amping up their security investments in light of the Ukraine conflict.
What's new in UpGuard // Cyber Vendor Risk Management Product Releases
Check out the latest product releases from UpGuard!
Why is a cybersecurity risk assessment necessary?
The cybersecurity landscape is constantly evolving. Criminals are always searching for new ways to compromise enterprise systems, looking for weaknesses in their security.
KillNet Operations Against U.S. Targets Persist With Attempted Airport Website Attacks
In October, BleepingComputer reported that the websites of several airports were experiencing service disruptions after the KillNet threat actor group announced that they would target airports throughout the U.S.