A Secure Access Service Edge (SASE ) Guide for Leaders

A Secure Access Service Edge (SASE ) Guide for Leaders

Why SASE? What started out as a temporary business solution to the pandemic is here to stay. ESG’s 2021 SASE Trends report found that 62% of respondents will work remotely or in a hybrid manner. To support this “new normal,” enterprises have adopted the cloud in staggering numbers—98% of respondents stated they use public cloud services. Now, CISOs and security leaders are tasked with securing a growing attack surface in complex, distributed network environments. Users…

Read More

Cyber Insurance Market 2022: FAQs & Updates with iBynd

Cyber Insurance Market 2022: FAQs & Updates with iBynd

Q: What are the most important cyber insurance policy coverages for businesses? Notification and expense coverageAfter customer data is compromised, there are state-regulated notification requirements an organization must follow. Cyber insurance companies help navigate and handle the notifications and expenses associated with them such as hiring a forensics expert to identify the cause of the breach, monitoring the affected individuals’ credit score, and paying costs to restore stolen identities. Business interruptionRemember when Kaseya, a US…

Read More

Lessons from the Russian Cyber Warfare Attacks

Lessons from the Russian Cyber Warfare Attacks

Cyberwarfare tactics may not involve tanks and bombs, but they often go hand-in-hand with real combat. The Russian invasion of Ukraine is a prime example. Before Russian troops crossed the border, Russian hackers had already taken down Ukrainian government websites. And after the conflict started, the hacktivist group Anonymous turned the tables by hacking Russian media to shut down propaganda about the war. In these unprecedented times of targeted attacks against governments and financial institutions,…

Read More

Transport Layer Security (TLS): Issues & Protocol

A Secure Access Service Edge (SASE ) Guide for Leaders

Transport layer security (TLS) is the modern version of the now-deprecated secure socket layer (SSL) protocol. Due to multiple vulnerabilities within SSL, organizations require a more robust protocol to coincide with the increasing number of web-based technologies. For example, unlike SSL, TSL allows you to negotiate encryption on regular ports and protocols such as IMAP and POP. This enables secure communication over a wide range of ports and protocols. This has led to TLS becoming…

Read More

Apply a Zero Trust Security Model to Industrial Control Systems (ICS)

Apply a Zero Trust Security Model to Industrial Control Systems (ICS)

Challenges with applying zero trust Applying zero trust principles comes down to segmenting the network, using authentication technology to verify the requestor before making any service available, enabling secure point-to-point networking, and monitoring device and entity behavior. This breaks down where technological limitations prohibit these capabilities. Sensor ship with a built-in back door. These devices must be calibrated in the field. The engineer installing them sets the operating level when the device is installed. Many…

Read More

Improving Software Supply Chain Cybersecurity

Improving Software Supply Chain Cybersecurity

Consider these key attack vectors: Open source code Mostly commonly, developers copy open source code from shared public libraries like Github to get everyday components. Why waste valuable time writing code to take a message from one field to another when someone else has already done it? The ease of use is why 90% of modern applications leverage open source code. However, the unchecked nature of open source code can lead to crippling attacks like…

Read More

Major Email Phishing Stats & Examples from 2021

Major Email Phishing Stats & Examples from 2021

With an influx of remote workers due to the pandemic, gaps in cloud security were exploited. Cybercriminals continued to leverage blind spots in email services’ built-in security—nearly 75% of all threats blocked by Trend Micro in 2021 were email threats. Unfortunately, built-in security for popular email services, like Microsoft 365 and Google Workspace, is simply not enough to stop malicious emails from infiltrating enterprises. In 2021 alone, Cloud App Security detected and blocked more than…

Read More

ICS & OT Cybersecurity Attack Trends

ICS & OT Cybersecurity Attack Trends

Trend Micro also found that enterprises suffered multiple attacks and disruptions over a 12-month period. 72% of respondents reported experiences at least six ICS/OT disruptions due to cyberattacks. Despite multiple disruptions—and the consequences of such—Trend Micro found that less than half of organizations (48%) take actions to reduce future risks. Maturity of cybersecurity implementation Enterprises may be struggling to fend off multiple attacks due to the maturity of their cybersecurity program. Trend Micro used the…

Read More

Share Your Cloud Risk Management Assessment Plan with the Board

Share Your Cloud Risk Management Assessment Plan with the Board

Quantifying and qualifying cyber risk is a longstanding challenge for CISOs. It was already a challenge for on-premise infrastructure when you knew what assets you had and where all the data lived. Cloud migration raises the bar, making it even more challenging to pinpoint cyber risk with a growing digital attack surface composed of distributed infrastructure and independently managed cloud resources used across the company. To help empower CISOs to more succinctly present their cloud…

Read More

Trend Micro CEO Discusses Need for a Unified Cybersecurity Platform

Trend Micro CEO Discusses Need for a Unified Cybersecurity Platform

Trend Micro CEO Discusses Need for a Unified Cybersecurity Platform Risk Management In the face of evolving cyberattacks, an ever-expanding digital attack surface, and a global skills shortage, organizations need a more unified approach to managing cyber risk. Trend Micro co-founder & CEO Eva Chen discusses our vision and strategy for delivering a unified cybersecurity platform. By: Trend Micro June 23, 2022 Read time:  ( words) Undoubtedly, COVID-19 has been a big accelerant for digital…

Read More
1 7 8 9 10 11 16