TL;DR for CISOs: CISA added both PHP2Shell flaws to its Known Exploited Vulnerabilities catalog on October 26 and set an October 29
Search Results (1087)
What PTaaS Actually Means, Technically
Penetration Testing as a Service refers to a delivery model, not a testing technique. The service wraps penetration testing in a platform: a dashboard where findings appear as they are discovered, a subscription
Does this process flow look familiar? It is the compounding failure due to an absence of cybersecurity fundamentals.
When innovation plows forward without the benefit of cybersecurity, there will eventually be tears, finger pointing, denial, and loss.
Remember when I said don’t install browser extensions, as they have unimaginable access to your private data and secrets? Well, password managers definitely fall into that category as well!
In general, never install a browser extension, seriously –
The Cybersecurity Vault - episode 49, with guest Bob Zinga. Bob discusses the impending risks of quantum computing undermining data confidentiality.
In this compelling episode, we dive into the challenges of quantum cybersecurity risks and the pivotal
In an age where generative AI is transforming industries and reshaping daily interactions, helping ensure the safety and security of this technology is paramount. As AI systems grow in complexity and capability, red teaming has emerged as a central p
In the ever-evolving landscape of cybersecurity, Attack Surface Management (ASM) emerges as a crucial cornerstone for organizations seeking to fortify their defenses against emerging threats. ASM transcends traditional boundaries, intersecting w
We did 3 panel discussions in 3 cities, engaging over 25+ CISOs on the Gartner Hype Cycle for Security Operations that is used by CISOs to identify the hype and expectations and insight into what technologies and trends are likely to become more impo
[Posted on Behalf of Pushkal Mishra, AVP IT & CISO HDFC ERGO Health Insurance Ltd ]
There has been a wide adoption of A.I. (Artificial Intelligence) in the last few years. You might have seen them in chat rooms or on companies’ websites providing y
Our editorial team has handpicked some great talks from Black Hat Conference - one of the largest IT Security Conference in the world.
Black Hat - built by and for the global InfoSec community - returns to Las Vegas for its 21st year providing attende
In this talk, we will unveil the new in-house capabilities of a nation state actor who has been observed deploying both Android and iOS surveillance tooling, known as Stealth Mango and Tangelo. The actor behind these offensive capabilities has succes
To keep up with the growing demand of always-on and available-anywhere connectivity, the use of cellular, in comparison to its wireless mobile connectivity counterpart in the electromagnetic spectrum, is rapidly expanding. My research in the IoT spac
2018 started with our community meets for Security Priority Planning for 2018.. and through our live survey we gathered some interesting insights. Technologies that are part of Key Focus Area for a CISO in 2018 are Security Analytics, SOC Implementat
Speaker: Ajin Abhraham [ Security Engineer @Immunio ]
What Will You Learn ?
- Appsec Challenges
- State Of Web Framework Security
- How WAF Works
- WAF Problems
- Evolution : WAF -> SAST -> DAST -> IAST -> RASP
- Types Of RASP
- Monkey Patching
- Lexical Analysis & Token Gen
Make IR Effective with Risk Evaluation and Reporting
Today, determining risk of a cyberattack is the generic vulnerability or malware rating ignoring aspects of how the business is impacted. Understanding the vulnerability state of the network, repu
Our editorial team has handpicked the best of the best talks at RSA Conference - one of the largest IT Security Conference in the world. Following is the list of top talks on Mobile Security at RSA Conference 2016.
RSA Conference held its 25th annua
Our editorial team has handpicked the best of the best talks at RSA Conference - one of the largest IT Security Conference in the world. Following is the list of top talks on Hacking & Attack Technique at RSA Conference 2016.
RSA Conference held its
Watch Video: (Webinar) "Beyond tools-Exploiting the application Logic"
( Read more: Checklist to Evaluate a DLP Provider )
What will you Learn ?
- Importance of Threat Modelling and Design Reviews
- Identifying Logical Vulnerabilities
- Case Studies of the log
Second critical category. Default passwords for access to the application
For the two previous weeks we’ve been discussing the top-9 critical areas and the 33 steps to be taken for security assessment. Ultimately, we’ve covered patch management flaw
Top Steps During Implementation Of A Firewall Project
- Clearly defined requirements such as type of firewall, architecture, performance requirements, compliance requirement, sizing, reporting, and minimum specifications are important for identifying
CISO Platform
A global community of 6K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.
Join CISO Community Share Your Knowledge (Post A Blog)

