By Jerry Hoff For many security professionals, the idea of Zero Trust can be quite daunting. It assumes that everything – every asset, device, data flow and user–could be fraudulent, potentially marking the beginning of an attack, until enough evidence to the contrary is offered.  Even then, authentication or privileges can be automatically revoked as new data is continually collected. It starts with a relentless position on authentication and access control, which is what security…

Docker Captains are select members of the community that are both experts in their field and are passionate about sharing their Docker knowledge with others. “Docker Captains Take 5” is a regular blog series where we get a closer look at our Captains and ask them the same broad set of questions ranging from what their best Docker tip is to whether they prefer cats or dogs (personally, we like whales and turtles over here)….

Artificial intelligence and machine learning can slash the number of false alerts that tie down operations staff, speed troubleshooting of problems, and help developers and architects understand and manage fast-changing, cloud-based IT environments. But CIOs should not expect what some customers call “magic” results, such as automatically predicting and fixing any conceivable IT issue, or even just accepting any log or event steam and analyzing it without any data cleansing or normalization. AIops is the…

(ISC)2 has announced the appointment of Jon France, CISSP, as its first chief information security officer (CISO). The non-profit association of certified cybersecurity professionals said France will lead all of its cybersecurity operations. This includes providing regular risk assessments and strategic insights to (ISC)2’s senior management and the board of directors and ensuring security is ingrained in all aspects of the organization’s strategy. In addition, he will advocate best security practices for members around the…

Two-fifths (39%) of ransomware victims paid their extorters over the past three years, with the majority of these spending at least $100,000, according to new Anomali research. The security vendor hired The Harris Poll to complete its Cyber Resiliency Survey – interviewing 800 security decision-makers in the US, Canada, the UK, Australia, Singapore, Hong Kong, India, New Zealand, the UAE, Mexico and Brazil. Some 87% said their organization had been the victim of a successful attack resulting in damage,…

The latest COVID-19 variant has led to a 521% increase in phishing attacks using the virus as a lure to trick users into clicking, according to Barracuda Networks. Cyber-criminals often use newsworthy events in their social engineering attacks, and COVID-19 provided a bumper opportunity when it emerged in 2020. The security vendor observed a 667% month-on-month surge in COVID-19 phishing emails from February to March that year. It recorded another significant increase when new vaccines were released at…

By Sachin Shah, CTO of OT, Armis The distinction between information technology (IT) and operational technology (OT) is rapidly converging as the Industrial Internet of Things (iIoT) – with cross-boundary traffic pollination from enterprise-connected devices, applications, and connectivity of all types – proliferates across the Federal ecosystem. Agencies have long managed and secured these two types of technologies in distinct silos, using different approaches and solutions, sharing little data, and relying on management by distinct…

Merck has won a long-running legal battle to force its insurer to cover the costs of damages caused by the NotPetya ‘ransomware’ attacks. The pharma giant was one of many big-name multinationals hit by the destructive malware, disguised as ransomware by Russian attackers targeting Ukrainian organizations back in 2017, as they are again today. However, the malware soon spread globally, causing potentially billions of dollars of damage. Many companies, including Merck and confectionary giant Mondelez, found their…