TL;DR for CISOs: BeyondTrust disclosed that a suspected China-nexus group exploited a Remote Support zero-day from August 29, and at
TL;DR for CISOs: Critical infrastructure led the wee
CISO Platform Breach Watch
Coverage day: Monday, July 20, 2026 (US Eastern). A neutral, practitioner briefing for security leaders. The goal is to
The cybersecurity threat landscape on July 22, 2025 revealed multiple critical secur
The cybersecurity threat landscape on July 19, 2025 revealed 3 significant security incidents
Date: July 10, 2025
Analysis Period: July 9, 2025
Classification: Technical Intelligence Report
Distribution: Internal Use
July 9, 2025, marked a significant date in the cybersecurity l
My article on Help Net Security highlighting how the banking industry is leveraging their powerful lobbying groups to try and undermine the U.S. Securities and Exchange Commission 4-day cybersecurity reporting rule, which has been in place for over a
The ISO 27001 standard is a widely adopted international standard for information security management systems (ISMS). The Digital Personal Data Protection Act (DPDP Act) is an Indian law that regulates the processing of personal data.
Here
The discussion focuses on the ethical and practical considerations for CISOs when disclosing cybersecurity incidents. The conversation examines the role of intent, the responsibilities of corporate leadership, and the expectations of shareholders in
Introduction:
In a recent CISO Panel Discussion, cybersecurity heavyweights Matthew Rosenquist, Jim Routh, and Michael W. Reese delved into the intricacies of the SolarWinds Breach, unraveling its legal implications and the far-reaching ramifications
We are hosting a community Panel discussion on "Cybersecurity Breach At SolarWinds: Legal Implications And CISO Ramifications". Panelists include Matthew Rosenquist (CISO, Eclipz.io Inc), Jim Routh (Former CISO JP Morgan & Chase, Chief Trust Officer
[Posted on Behalf of Steve King, Director, Cybersecurity Advisory Services at Information Security Media Group (ISMG) ]
Biometrics, while an element of data security, is a unique attribute that should be treated in an extraordinary fashion.
Password
Advanced Threat Protection (ATP) is used to protect against sophisticated, highly skilled, well funded and motivated threat actor . The solution uncovers advance threats across Endpoints, Network, Email and Cloud. These solutions are used to detect a
Don’t boil the ocean. Start with that.
Before I dipped my toes into security I did a stint as an application administrator. I was responsible for managing system and application monitoring. More performance and capacity monitoring than anything but th
• Ability to discover sensitive data across all platforms:
A DLP solution should be able to discover sensitive data across applications, storage towers, systems and devices. It should have inbuilt rules to identify sensitive data as required by vario
Gaana.com, one of the popular music streaming service got hacked. It is reported that 10 million username, email addresses, MD5-encrypted password, date of births, and other personal information has been stolen.
It is reported by their CEO that the
Due to financial implications caused by several recent high-profile data leakage incidents,enterprises are facing increasing pressure for implementation of stringent norms pertaining to governance and compliance reporting. Today, adhering to governme
