Faster is better, especially for businesses. Cloud-native technologies — while they deliver customer-facing applications and new features faster than ever — come with potential challenges, like complex dependencies. For every deployment, there are new potential errors, slowness or outages.
Monitoring solutions...
Federal authorities are warning of attacks on healthcare sector firms that use ConnectWise's remote access tool ScreenConnect. Hackers compromised a locally hosted version of the tool used by a large national pharmacy supply chain and managed services provider in 2023.
In an extremely competitive and fast-growing field of more than 70 industry participants with revenue greater than $1 million, Frost & Sullivan independently plotted 17 leaders in growth and innovation in the XDR space in this Frost Radar analysis.
The 2023 Frost Radar for XDR was published on August 22, 2023, and...
At a time when financial services CISOs and other security leaders are responsible for complying with increasing data privacy and security mandates, leaving any corner of your environment exposed has the potential to turn security risk into business risk.
Download this whitepaper to learn;
6 benefits to...
Application Control For Dummies, Carbon Black Special Edition, is primarily a discussion of application control technologies. The book first looks at the history of application control along with a more thorough look at the threat landscape.
Download this eBook to learn how to:
Protect air-gapped...
Globally, the average data breach costs firms of all kinds $4.45 million (a breach in the U.S. costs
$9.4 million). Damage to your brand and reputation could make that loss look like peanuts.
Public-facing endpoints and certain back-end systems are often overlooked by traditional
negative security model solutions...
Robert Blumofe, executive vice president and CTO at Akamai, expects social engineering, phishing, extortion and AI-driven attacks to dominate the threat landscape. He advised enterprises to use FIDO2-based MFA, zero trust, microsegmentation and API security to reduce risks.
In the latest weekly update, ISMG editors discussed how the surge in API usage poses challenges for organizations, why good governance is so crucial to solving API issues and how The New York Times' legal action against OpenAI and Microsoft highlights copyright concerns.
Sharan Hiremath, senior product manager at JFrog, delved into the escalating challenge of supply chain attacks. With a focus on the surge in open-source vulnerabilities, he outlined key factors contributing to the rise of attacks and offered insights into threat mitigation strategies.
Forrester analyst Sandy Carielli highlights key API security aspects in Forrester's report titled The Eight Components of API Security," which covers governance, discovery, testing, authentication and protection from API breaches as many organizations are grappling with the maturity of these areas.
Looking ahead to 2024, cybersecurity professionals and experts in artificial intelligence shared with ISMG their hopes for strong, responsible regulations and new partnerships with private sector stakeholders and international collaborators to keep pace with the evolving threat landscape.
In conjunction with a new report from CyberEd.io, Information Security Media Group asked some of the industry's leading cybersecurity and privacy experts about 10 top trends to watch in 2024. Ransomware, emerging AI technology and nation-state campaigns are among the top threats.
Hacks on healthcare sector entities reached record levels in 2023 in terms of data breaches. But the impact of hacks on hospital chains, doctors' offices and other medical providers - or their critical vendors - goes much deeper than the exposure of millions of health records.
The DFIR landscape is constantly evolving, driven by technological advancements and new cyberthreats. "Tsurugi," developed by Giovanni Rattaro, senior cybersecurity expert, and Marco Giorgi, senior DFIR analyst, is an open-source Linux distribution project designed for blue teams.
A recently spotted hacking group with a penchant for using open-source tools has been using a less-than-novel tactic: exploiting SQL injection flaws. So warn researchers who recently detected attacks by the group, which has the codename GambleForce and appears to focus on gambling and retail firms.
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing cuinfosecurity.com, you agree to our use of cookies.