Banking industry lobbyists are pressuring the SEC to gut the four-day breach disclosure rule — an essential safeguard for shareholders and potential victims. Their arguments are misleading, self-serving, and designed to protect profits over public tr
Cybersecurity is on the brink of significant transformation as we approach 2025, grappling with escalating complexities driven by advancements in technology, increasing geopolitical tensions, and the rapid adoption of AI and IoT. In this blog, I’m ex
ISO 27001 compliance is one of the most recognized international standards for information security management. Organizations worldwide seek certification to protect sensitive data, gain customer trust, and meet regulatory requirements. However, achi
In the rapidly evolving landscape of data protection and cybersecurity, the India Privacy Act stands as a significant legislative milestone. To shed light on its nuances and implications, CESO platform recently hosted a panel discussion featuring
Welcome, everyone, to a riveting exploration of External Attack Surface Management (EASM) and its pivotal role in modern cybersecurity. As we navigate the ever-evolving digital landscape, it's imperative to understand the genesis of EASM and the c
In the ever-evolving landscape of cybersecurity, security architects emerge as the linchpins of organizational defense, wielding their expertise to navigate complex systems and ensure robust security postures. However, their efforts are often hamp
Third party vendors and suppliers often have access to your network and your organisation's confidential information. The best way to prevent a data breach is to have robust program to assess how your third parties are managing their risk and protect
[Posted on Behalf of Steve King, Director, Cybersecurity Advisory Services at Information Security Media Group (ISMG) ]
Why did the CapitalOne hacker do what she did?
Following forensic analysis related to the Capital One breach, a spokesperson for t
Gartner predicted 30% breaches due to Shadow IT by 2020. This is just one part of how critical this risk area is for the enterprise space. We have put together some of the top resources from Gartner on Shadow IT along with the links to the detailed
With the increased growth in the usage of the internet, mobile applications, and the Internet of Things, applications become ubiquitous but their security is low key. Deploying an effective WAF will be one of the baseline measures organizations can t
It is an arduous task to convince management to sanction information security budgets. An additional hurdle arises from the fact that most security professionals have a technical background, and hence face difficulties in clearly explaining to execut
Breaking Closed Systems with Code-Signing and Mitigation Techniques
Code signing is abundant in the enterprises and consumer space. This session will review the current landscape showing attacks against several open (Windows, Android, Mac) and close
"The good guys need to be right all the time. The bad guys just need to be right once."
From recent Target shops in US being compromised with 40 million shopper's card details, last minute shoppers are well discouraged. So is action after being com
Top steps during the implementation of a Cloud Security project
As security is an important aspect of any project it is necessary to align security plan with business goals. There are a perspective series of steps that may be taken to secure the clou
APT (Advanced Persistent Threats) is the talk of the town. There is too much of noise and confusion. Everybody wants to make money. Quite a few uses FUD (Fear Uncertainty and Doubt) to sell their products. I wanted to highlight the APT secrets which
