Actionable Insights for CISOs

1. Treat AI as dual-use: Defender and threat

Insight: Brooks highlights that both AI and machine-learning tools enable defenders—and adversaries.

Action steps:

• Inventory all AI/ML tools in your environment and map them

Cyber attacks have evolved, and so should the method of managing IT infrastructure.

With everything interconnected in digital environments today, even a single misconfigured server, an old patch, or a lost access control can open the welcome mat for a

It started in a rugby box.

There I was, watching the match from a VIP suite—surrounded by a handful of other cybersecurity leaders. The beers were cold, the banter flowing, but one comment cut through the noise:

“Cybersecurity’s no longer about tech

Key Questions Explored:

• How real do you think the discussion about AI-powered cyber attacks is?
• How much of it is hyped and how much is real?
• How are regulatory changes affecting the cybersecurity environment?
• How should the introduction of AI in th

Recently, a friend posted a wonderful piece attributed to their hero, the CISO. I disagreed and immediately felt like a party pooper. But, I had to do it.

Here’s why.

In business today, the role of a CISO is crucial. With the consistency and severity

Simply put,penetration testing as a service or PTaaS is a continuous guard against cyber threats, offering an ongoing cycle of testing that traditional penetration tests don’t provide. This service combines the insights of security experts with the e

 The conversation delves into the complexities of cybersecurity management, including the responsibilities of CISOs, the implications of security breaches, and potential changes in insurance coverage. It explores the challenges faced by CISOs in nego

As technology continues to evolve, so too the threats to the security of enterprises. As we enter 2023, the threat landscape for enterprises is becoming increasingly complex, fast-moving, with cyber threats growing in both volume and sophistication.

Phishing is the fraudulent practice of sending emails or other messages purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers. This article highlights some m

[Posted on behalf of Dinesh Kumar Aggarwal Founder | CISO | Architect | Cyber Security Practitioner | Information Security Blogger & Speaker]

Every year, cyber security scenario is perky with new technologies, trends and vendors and yet year after y

RSA conference is one of the leading security conference worldwide.  It creates tremendous opportunity for vendors, users and practitioners to innovate, educate and discuss around the current security landscape.

Application security testing are tools

According to an alert published by FBI on January 2019, Business Email Compromise (BEC) and Email Account Compromise (EAC) have10 Billion losses since October 2013. Traditionally, social engineering and Phishing techniques have been the most common w

At BlackHat Europe, Alexander Polyakov, CTO at ERPScan, and Mathieu Geli delivered a presentation detailing security issues and misconfigurations affecting the oil and gas industry. In the interview, they highlighted particular vulnerabilities in SAP

We have developed the myth that technology can be an effective fortress – We can have security.

Traditional focus on:

• Better Firewalls
• Boundary Intrusion Detection
• Critical Offsite Capacity
• Compliance Certification

 Myths:

• IT staff = security staff
• Complianc