Search Results (735)
The OWASP Top 10 is a ranked list of the ten application security risk categories that OWASP's Top Ten project team judges most critical, based primarily on contributed testing data and, for two of the ten slots, a community practitioner survey. The
EU cybersecurity enforcement isn't letting up. For organizations running critical infrastructure, that reality bites, because documentation gaps aren't just administrative headaches anymore. They're expensive ones. NIS2 documentation requirements now
Actionable Insights For CISOs:
Adopt advanced threat-intelligence and behavioural analytics:
Deploy or integrate security tools that go beyond signature-based detection — e.g. EDR/XDR, behaviour-based anomaly detection, sandboxing of unknown fi
In this interview with Peter Ulrich, Denver’s information technology audit manager, we explore relationships between auditors and security teams in government.
Back in 1789, Benjamin Franklin wrote a letter to a French scientist named Jean-Bap
This is my completely informal, uncertified, unreviewed and otherwise completely unofficial blog inspired by my reading of our next Threat Horizons Report, #11 (full version) that we just released (the official blog for #1 report, my unofficial blogs
Unmasking Threats with Rule Validation and Scoring
Think about securing your home. You’ve installed surveillance cameras, sensors, and even a guard dog. But what happens when someone manages to sneak in? Wouldn’t it be great to have a system that not
Do I go to my Cloud Service Provider (CSP) for cloud security tooling or to a third party vendor?
Who will secure my cloud use, a CSP or a focused specialty vendor?
Who is my primary cloud security tools provider?
This question asked in many ways ha
In the ever-evolving landscape of cybersecurity, organizations are constantly seeking effective solutions to manage their external attack surface and mitigate risks. One approach gaining traction is the utilization of open-source tools for reco
Embark on a journey into the world of cybersecurity resilience, where External Attack Surface Management (EASM) intersects with the powerful insights of the MITRE ATT&CK Framework. In this exploration, we unravel the key capabilities of EASM solut
This blog post discusses conducting successful cybersecurity crisis drills, emphasizing the importance of scenario planning and participation by key stakeholders.
Here is the verbatim discussion:
So we're like how do we do that wel
As our world embraces a digital transformation, innovative technologies bring greater opportunities, cost efficiencies, abilities to scale globally, and entirely new service capabilities to enrich the lives of people globally. But there is a catch.
We have handpicked the best talks at RSA Conference - one of the largest IT Security Conference in the world. Following is the list of top talks on Cloud Security & Virtualization at RSA Conference USA 2018.
RSA Conference held its event in San Franci
CISO Platform recognizes World's Top 100 IT Security Influencers who have/are impacting the information security industry's in various ways. This list includes top researchers, industry experts, leading entrepreneurs, a must follow for infosec indu
This time we will speak about SAP in particular. So, what is SAP? First of all, SAP is a German company that develops and sells business software. SAP is famous for its ERP system - the most widespread business application. However, SAP provides much
Writing not only functional but secure applications is not a new concept or idea that has taken the Industry by storm. However, many Government and Commercial Organizations are still not adhering to or requiring their Organizations to adopt, implemen
Join The Community Discussion
CISO Platform
A global community of 6K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.
Join CISO Community Share Your Knowledge (Post A Blog)
