Artificial intelligence has moved from a support role in cybersecurity into an operational one. Security teams that once relied on dashboards, alerts, and manual triage are now piloting AI agents that can watch telemetry around the clock, investigate

The military attacks involving Iran in the Middle East are the latest reminder that cybersecurity leadership must continually incorporate geopolitical risk into their enterprise cyber risk posture and preparedness.

Concerns for elevated risks against

Actionable Insights For CISOs:

• Expand tabletop exercises to include data extortion / leak scenarios.

• Review and harden OAuth, API, and third-party app integrations.

• Conduct phishing and vishing simulations, especially for high-privilege users.

The recent inadvertent exposure of classified U.S. military plans by top defense and intelligence leaders serves as a stark reminder that even the most capable cybersecurity tools and well-defined policies can be rendered meaningless if ignored or mi

Cybersecurity expert Chuck Brooks discusses the top five issues in threat detection and how organizations can reduce the risk of cyber-attacks in 2024.

https://search.app/Miwuwt4EtELyDj9F8

Interview by Brian Kelly

I recently sat down with Ch

In today's rapidly evolving cybersecurity landscape, organizations face constant challenges in managing their external attack surface and mitigating potential risks. One approach gaining prominence is External Attack Surface Management (EASM),

What Google is to most internet users, Shodan (http://www.shodan.io) is to hackers. It is a search engine for hackers to look for open or vulnerable digital assets. Shodan scans the entire internet and stores the open ports along with services runnin

IT-GRC solutions allows organizations to effectively manage IT and Security risks while reducing the cost and complexity of compliance. IT and Security GRC management solution are focused on leveraging near-real time information on IT and Security as

Business applications are vital for the successful functioning of any organization. Therefore, managing their information security risks are just as important as the business itself. If I ask about different measures you take to ensure security of yo

Our editorial team has handpicked some great talks from Black Hat Conference - one of the largest IT Security Conference in the world. 

Black Hat - built by and for the global InfoSec community - returns to Las Vegas for its 21st year providing attend

Crown Jewels Risk Assessment: Cost Effective Risk Identification (RSA Conference 2017)

Enterprise security risk assessments are typically shallow or expensive due to the vastness of the systems and data. But a study on sensitive data found that the or

Toward Distributed and Virtualized Enterprise Security (RSA Conference 2017)

Architectural issues with perimeter protections will be shown to create exploitable vulnerabilities for enterprise security teams. A design approach leading toward distribute

Cyber-Insurance: Fraud, Waste or Abuse? (RSA Conference 2017)

Cyber-insurance is quickly becoming one of the hottest selling products on the market and an ever-increasing variety is being offered to businesses. Did you know that a security breach caus

Threat Modeling the Trenches to the Clouds (RSA Conference 2017)

What wisdom percolates from building threat modeling practices across four organizations? This presentation will draw from hundreds of students, years of coaching, 100 formal trainings a

Collaborative Security: Securing Open Source Software ( RSA Conference 2017 )

There’s no guarantee that software will ever be free from vulnerabilities, whether it is open source or proprietary, but there is still plenty we can do. The Linux Foundatio

Our editorial team has handpicked the best of the best talks at RSA Conference - one of the largest IT Security Conference in the world. Following is the list of top Emerging Areas In Security Technology talks at RSA Conference 2016.

RSA Conference

Writing not only functional but secure applications is not a new concept or idea that has taken the Industry by storm. However, many Government and Commercial Organizations are still not adhering to or requiring their Organizations to adopt, implemen