TL;DR for CISOs: CISA added three Linux kernel flaws to its Known Exploited Vulnerabilities catalog on September 18 with a Septemb
The Cybersecurity Vault — Episode 29, with guest Edna Conway, former Chief Security Officer at Cisco, VP-Chief Security & Risk Officer for Microsoft Cloud, and who currently sits on multiple Boards of Directors and actively advises industry executive
After the United States and Israel began a bombing campaign on Iran, leading to the decapitation of its political and military leaders, the Middle East has erupted into waves of kinetic warfare. But what should we expect about cyber?
Iran has a formid
Actionable Insights For CISOs:
Prioritize Defense-in-Depth
Implement layered security across all system levels.
Maintain a detailed understanding of assets, data flows, and vulnerabilities.
Regularly update threat models to reflect evolving t
The world is abuzz with Microsoft’s announcement today of the introduction of their Majorana 1 chip. It could represent a series of important breakthroughs in producing powerful quantum computers.
The chip represents a radically different architectur
In the presentation, the focus is on the transformative impact of artificial intelligence (AI) in cybersecurity, particularly in the context of malware generation and adversarial attacks. AI promises to revolutionize the field by enabling scalable so
In today's digital age, ensuring children's safety online has become more crucial than ever. At the forefront of this effort is the Kid Security Forum, dedicated to raising awareness about cybersecurity risks among schoolchildren nationwide. Through
Multiple U.S. government agencies have cautioned that the Black Basta ransomware group is actively targeting the healthcare sector along with 12 out of 16 critical infrastructure segments.
The FBI, CISA, and HHS issued an advisory on a Friday, re
Frequently Compared Vulnerability Assessment Tools
We are super excited to have Terry Cutler (voted #1 Top Influencer in CyberSecurity by IFSEC Global 2018) do a web conference as part of our Kids Cyber Safety Initiative. As a part of his talk he will talk about internet safety for students, social
RSA conference is one of the leading security conference worldwide. It creates tremendous opportunity for vendors, users and practitioners to innovate, educate and discuss around the current security landscape. WAF is specialized firewall designed
Google Play Store provides thousands of applications for monitoring your children/family members. Since these apps deal with highly sensitive information, they immediately raise questions on privacy and security. Who else can track the users? Is this
Machine learning is a powerful new tool that can be used for security applications (for example, to detect malware) but machine learning itself introduces many new attack surfaces. For example, attackers can control the output of machine learning mod
Components of Google BeyondCorp
Device & Hosts
Breaking Kernal address space layout rendomization: KASLAR with Intel TSX
Kernel hardening has been an important topic, as many applications and security mechanisms often consider the kernel their Trusted Computing Base (TCB). Among various hardenin
HEIST: HTTP encrypted information can be stolen through TCP windows
Over the last few years, a worryingly number of attacks against SSL/TLS and other secure channels have been discovered. Fortunately, at least from a defenders perspective, these att
This Guide examined the field of security architecture from the point of view of security governance. It explains how security architecture governance can be created as a sub-field of security governance and how the principles and structure of the sa
Top steps during the implementation of a Cloud Security project
As security is an important aspect of any project it is necessary to align security plan with business goals. There are a perspective series of steps that may be taken to secure the clou
Requirement for solutions related to Database security
A CISO should define the requirement for solutions related to Database security by first understanding the business and threat environment and decide on the most applicable threats and security p
