To Fight Cyber Extortion and Ransomware, Shift Left

To Fight Cyber Extortion and Ransomware, Shift Left

Continue reading the Ransomware Spotlight series: Ransomware is a ‘noisy’ threat. When it hits, there’s no hiding it: attackers lock up systems and issue explicit instructions about what organizations need to do—and pay—to set their data and devices free. That’s why most bad actors engage in cyber extortion only once they’re ready to be exposed, after they’ve already achieved other malicious goals such as exfiltrating data, setting up clandestine command and control structures, or selling…

Read More

Cybersecurity Laws Begin with Federal First

Cybersecurity Laws Begin with Federal First

Intensifying cyberattacks and heightened awareness of the risks they pose is driving the creation of new cybersecurity laws around the world, including in the U.S. at both the federal and state levels. Some of these new measures are sector-specific, others apply more broadly, and all of them add to existing privacy and data protection regimes such as the Health Insurance Portability and Accountability Act (HIPAA) for healthcare, the Gramm-Leach-Bliley Act (GLBA) for financial services, and…

Read More

Cyber Threat Intelligence: The Power of Data

Cyber Threat Intelligence: The Power of Data

In an increasingly connected and digital world, cyber threats have emerged as a significant challenge that can jeopardize your organization’s reputation, financial stability, and overall operational efficiency. In fact, according to a 2022 report by IBM, the average cost of a data breach is now $4.35 million. Given the growing prominence and impact of cyber threats, Chief Risk Officers (CRO) need to pay close attention to cyber threat intelligence and its role in enhancing your…

Read More

5 Types of Cyber Crime Groups

5 Types of Cyber Crime Groups

The adage “teamwork makes dreamwork” extends to cybercriminals as well. To launch more successful cyberattacks, malicious actors with different specialized skills have conglomerated to form Cybercrime as a Service (CaaS). We’re now seeing people and groups specialize in various parts of the attack lifecycle. This means that we’re likely going to see less mistakes made leading to detections, and we should expect multiple groups colonizing an infected network. Within CaaS there are five types of…

Read More

Choosing a Hybrid Cloud Security Solution 101

Choosing a Hybrid Cloud Security Solution 101

The accelerated shift to the cloud was mostly borne out of necessity due to the influx of remote workers and changing customer demands requiring more business agility. According to Forrester, 94% of US enterprise infrastructure decision makers are using at least one type of cloud deployment. While there is a push to be cloud-native, the reality is that most companies will keep their “crown jewels” or critical systems on private clouds or on-prem, while leveraging…

Read More

Cyber Insurance Coverage FAQ with DataStream CEO

Cyber Insurance Coverage FAQ with DataStream CEO

Common perception now points to the COVID-19 epidemic as the demarcation point for our new era for cybersecurity. This expansion of remote work and cloud services has widened the attack surface significantly and placed security leaders in a position to approach cybersecurity and cyber risk more proactively. However, the “new normal” hasn’t just affected the how IT security teams operate, as we’re seeing a hardening of the cyber insurance market. This is due to an…

Read More

3 Shifts in the Cyber Threat Landscape

3 Shifts in the Cyber Threat Landscape

Around the world, 2022 was a year of instability and conflict which added to the daily challenges faced by cybersecurity professionals. But they weren’t the only ones feeling the strain. Bad actors were also forced to adapt, trying to maintain “business as usual” by exploring new infiltration methods and by targeting more lucrative victims. Even if 2023 proves to be more predictable than last year, the cyber threat landscape is already undergoing big changes. To…

Read More

Prevent Ransomware with Cybersecurity Monitoring

Prevent Ransomware with Cybersecurity Monitoring

Ransomware and other cyberattacks routinely take advantage of misconfigurations in cloud and IT systems and accounts. Tools that enable continuous, automated cybersecurity monitoring help close those gaps and strengthen overall attack surface risk management Continue reading the Ransomware Spotlight series:Ransomware Recovery Plan for 2023Fight Ransomware with a Cybersecurity AuditSecurity Patch Management Strengthens Ransomware Defense With authorities cracking down on cybercriminals, organizations refusing to pay cyber ransoms, and media stories touting ransomware’s decline, it could seem…

Read More

How Your Cybersecurity Strategy Enables Better Business

How Your Cybersecurity Strategy Enables Better Business

Historically, cybersecurity has the reputation of getting in the way of doing business. Few people are happy when required to change a password, or when told a proposed new application needs additional safeguards before it can be deployed. A recent Trend Micro global survey, Risk and Reward, found that 84% of respondents say cyber policies are impacting employees’ ability to do jobs in office; business being slower, difficulty accessing info, and general access to the…

Read More

Policy as Code vs Compliance as Code

Policy as Code vs Compliance as Code

Developments in automation and orchestration of IT systems have been steadily changing in the past decade. There has been a shift from manual to automated management across several dimensions—including server configuration, networking, and even business processes. One key area where automation is playing an increasingly important role is compliance. When it comes to policy and compliance, automation comes in the form of policy as code and compliance as code. What is policy as code? Policy…

Read More
1 2 3 16