As the holiday shopping frenzy kicks off with Black Friday and Cyber Monday, remember that consumers aren’t the only ones hunting for opportunities. This is the prime hunting season for cybercriminals to conduct scams, fraud, impersonation, and theft
Search Results (1087)
CISOPlatform Breach Intelligence — DATE: October 16, 2025
High-signal incidents, CVEs to watch, detections to run, and a D0/D3 action plan.
Report Date
O
This content delves into a significant governance attack on a decentralized autonomous organization (DAO) in February. The DAO, like many others, operates using a governance token system where token holders gain voting rights proportional to t
Brad LaPorte provides valuable insights into the current state of cybersecurity practices, emphasizing the need for organizations to embrace continuous security testing and proactive approaches to breach mitigation. He identifies five levels of ma
In the dynamic realm of cybersecurity, the concept of Attack Surface Management (ASM) continues to undergo evolution and refinement. As organizations grapple with the challenges of securing their digital assets, questions arise regarding the matur
[ Posted on Behalf of Rajeev Shukla, Chief Strategy officer Castellum Labs]
Computing and its pervasiveness
In the last few decades more and mode devices have been connected to the internet and to each other. There has been an explosion of count of de
In the last few decades more and mode devices have been connected to the internet and to each other. There has been an explosion of count of de
Turkey may be the first customer for the Kargu series of weaponized suicide drones specifically developed for military use. These semi-autonomous devices have been in development since 2017 and will eventually be upgraded to operate collectively as
Cynet today announced the State of Breach Protection 2020 Report. The report reveals significant concerns that security decision-makers need to look into immediately while designing their Breach Protection Plans for 2020. Cybersecurity is one of the
Gartner predicted that shadow IT is 30 to 40 percent of IT spending in large enterprises, and Everest Group predicted that it can be 50 percent or more of IT Spending. This indicates that a lot of IT spendings are being bypassed to IT department. Ho
Third-Party risks are more as the Third-Party breaches continue to dominate and these breaches are expensive to organizations. Third-parties are those companies that you directly work with such as data management companies, law firms, e-mail provide
The term Security Information and Event Management (SIEM) finds its origin from the combination of Security Information Management (SIM) and Security Event Management (SEM). Where SIM focuses on the collection and long-term storage of log files, SEM
This blog lists out 6 key metrics to measure the maturity and effectiveness of your Data Loss Prevention (DLP) program. All the metrics are operational and can be measured quantitatively to help you fine-tune your DLP program.
- Number of policy ex
Typically, the activities of a malware attack occur on an execution timeline that generally consists of 3 segments—the vector, the stage, and the persistence. First, a vector, or method of exploitation is identified. This could be anything from loggi
Our talk presents attacks on the cryptography used in the cryptocurrency IOTA, which is currently the 10th largest cryptocurrency with a market capitalization of 2.8 billion USD. IOTA is billed as a next generation blockchain for the Internet of Thin
How Nation-States and Criminal Syndicates Use Exploits to Bypass Security (RSA Conference 2017)
Malware authors create millions of unique malware samples every year to bypass web filters and antivirus software. There are significant differences betwee
OSX Pirrit: Why You Should Care About Malicious Mac Adware (RSA Conference 2017)
Adware isn’t taken seriously, especially threats targeting Macs. But OSX Pirrit, which can obtain root access and has components found in malware, shows that adware can b
Lessons from a Recovering Runtime Application Self-Protection Addict (RSA Conference 2017)
This talk will detail knowledge gained from years spent building runtime application self-protection technology. RASP sounds like a silver bullet—security pixie
Recover A RSA Private key from a TLS session with perfect forward secrecy
They always taught us that the only thing that can be pulled out from a SSL/TLS session using strong authentication and latest Perferct Forward Secrecy ciphersuites is the pub
Last month, ISACA released the 4th edition of their book Security, Audit and Control Features SAP ERP. The previous version was published in 2009. Some updates include detailed security guides for assessing different SAP business processes. We had be
Join The Community Discussion
CISO Platform
A global community of 6K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.
Join CISO Community Share Your Knowledge (Post A Blog)
