The math of an annual test cycle

Start with the arithmetic a CISO actually has to defend in a board meeting. If an environment is tested once a year, and the test itself takes one to three weeks to scope, execute, and report, the organization has cur

By Enrico Milanese

Afew years ago, a casino was breached via a smart fish tank thermometer. Related: NIST’s IoT security standard

It’s a now-famous example of how a single overlooked IoT device can become an entry point for attackers — and a cautio

This is how you handle cybercrime digital extortion! Coinbase was compromised by trusted 3rd party partners, which exposed customer data — but customer keys to their assets were still safe. The cyber criminals then attempted to extort $20 million fro

In today's dynamic business environment, incident response has become increasingly critical across various sectors, from physical emergencies like riots and wars to IT-related issues such as cybersecurity breaches and network disruptions. Swift and e

The discussion centers on the evolving role of CISOs in the wake of significant cybersecurity incidents, such as the SolarWinds breach. The conversation explores the responsibilities of CISOs, the interaction between different departments, and the ne

On January 19, 2023, it was reported that thousands of PayPal accounts have been hacked. This news has caused concern among PayPal users who are now wondering if their own accounts have been compromised. In this blog post, we will provide an overview

Digital Footprint is the information about the organization that exists on the Internet due to their online activity. Organizations’ digi

CyberSecurity Maturity of Indian Industries Show Grim Picture: Large Banks Score 61 & Online/FinTech Startups Score 8 (Out Of 100), As Per FireCompass Report

India, August 31, 2017 – FireCompass, a Cyber Security product company that specializes in

Security researchers have done a good amount of practical attacks in the past using chosen plain-text attacks on compressed traffic to steal sensitive data. In spite of how popular CRIME and BREACH were, little was talked about how this class of atta

Au Natural: Adventures in NLP  and Threat Intel (RSA USA 2017)

In July 2016, Google released their Cloud Natural Language API; multilingual entity extraction sounded like a fun thing to play with and it was cheap. This led to a series of experiments t

Emerging Vendors are the vendors who have been innovative and has given the fresh perspective to the conventional security methods. In very less time, these start-ups have been able to make their name in the APT space. Here is the list of the Top Eme

Firewall in simple terms acts as a barrier to prevent unauthorized access or malicious traffic within a system or in a network. The rapid growth of new innovative technology and alongside with the massive growth of new security threat, the tradition

Hello, dear readers! Today I would like to talk about Oracle Security.

On August 11, Mary Ann – Oracle's CSO - published an incredibly shocking post about security researchers which was promptly deleted (either by herself or somebody else). The post w

Achieved Solution Benefits

To mitigate risk

• Prevent access breaches through privileged accounts
• Monitor activities carried out by privileged users
• Enforce accountability for use of generic privileged accounts
• Enforce granular access restrictions as