Security Operations

Business Operations | News, how-tos, features, reviews, and videos

Employee discontent: Insider threat No. 1

CISOs who focus only on detection technology — and don’t engage with the human side of the security equation — are missing a key ingredient for insider risk management.

May 21, 2024 8 mins

CSO and CISO Human Resources Threat and Vulnerability Management

Some strategies for CISOs freaked out by the specter of federal indictments

Experts at this year's RSA Conference offered strategies to help CISOs cope with the prospect of facing federal indictments over their handling of cyber incidents.

May 10, 2024 7 mins

CSO and CISO Legal Security Practices

Administrator of ransomware operation LockBit named, charged, has assets frozen

A Russian national alleged to have been the administrator of the notorious and prolific LockBit ransomware provider faces international charges. A $10-million reward for the suspect’s arrest has been offered.

May 7, 2024 3 mins

Advanced Persistent Threats Hacking Ransomware

Close the barn door now! Avoid the risk of not monitoring retained access before it’s a problem

There’s usually a strict protocol for granting access to systems or data to a new employee or contractor. But there are perils in not keeping tabs on that access as that person moves around or leaves.

Apr 30, 2024 6 mins

Access Control CSO and CISO Data and Information Security

Marriott admits it falsely claimed for five years it was using encryption during 2018 breach

Marriot revealed in a court case around a massive 2018 data breach that it had been using secure hash algorithm 1 and not the much more secure AES-1 encryption as it had earlier maintained.

Apr 29, 2024 6 mins

Data Breach Encryption Legal

Navigating personal liability: post data-breach recommendations for CISOs

CISOs can avoid being liable for data breaches by following legal advice, communicating effectively with internal and external stakeholders, and demonstrating commitment to avoid future incidents.

Apr 29, 2024 8 mins

CSO and CISO Data Breach Legal

UK law enforcement busts online phishing marketplace

The coordinated takedown has infiltrated the fraud service and made several arrests based on data found on the platform.

Apr 18, 2024 4 mins

Legal Phishing

Are you a toxic cybersecurity boss? How to be a better CISO

Horrible bosses are everywhere but cybersecurity appears to be particularly problematic, leading to talent-retention issues and security risks. Here’s how not to be a toxic CISO.

Apr 18, 2024 9 mins

CSO and CISO Human Resources Risk Management

Understanding CISA’s proposed cyber incident reporting rules

CISA’s massive rulemaking will create the first US cyber incident and ransomware payment reporting mechanism that promises to radically overhaul the workloads of most cybersecurity professionals.

Apr 17, 2024 10 mins

Cyberattacks Laws and Regulations Ransomware

10 tips to keep IP safe

Your company's intellectual property—whether that's patents, trade secrets or just employee know-how—may be more valuable than your physical assets. Here's to establish basic policies and procedures for IP protection.

Apr 16, 2024 18 mins

DLP Software Data and Information Security Intellectual Property