All Articles

Introduction

The cloud has become more than just a technology choice; it is now a core enabler of business growth. From startups to global enterprises, organizations are turning to cloud solutions to innovate faster, scale efficiently, and stay compet

We had a community session on "The CISO's Role: Evolving Expectations In Cybersecurity" featuring Matthew Rosenquist (CISO at Mercury Risk & Compliance) & David Randleman (Field CISO at FireCompass).

The rapidly evolving expectations of cybersecurit

Gain insights into the fundamental challenges hindering organizations from achieving cybersecurity objectives, particularly in terms of visibility and noise reduction. Discover how prioritizing key metrics can enhance threat detection and response

Explore the fundamental concept of attack surface management and its role in fortifying organizational cybersecurity. Brad sheds light on the importance of evaluating and controlling the attack surface to mitigate potential threats effectively.

The life of a cybersecurity professional is characterized by a constant battle against evolving threats and vulnerabilities. In today's complex and sophisticated landscape, there's no silver bullet solution to fix all our problems. Instead, we mus

The cybersecurity landscape has undergone fundamental shifts, with attackers targeting organizations of all sizes and deploying continuous, sophisticated tactics. In response, the industry is witnessing a movement towards continuous defense strate

We are surrounded!  Smart devices are everywhere and being integrated into all facets of our lives, from toothbrushes to automobiles.  Entire cities are becoming ‘smart’, as are factories, governments, global retail, freight logistics, and all nation

[Posted on behalf of Steve King Director, Cybersecurity Advisory Services at Information Security Media Group (ISMG) ISMG]

Lessons from past financial crises might prepare us for the long and short-term effects of COVID-19 on the economy and the Cyb

Always thought of writing this blog, since the COVID-19 menace started literally scaring all of us. For me today is the 10th day of following social distancing, the need of the hour. The 1st week itself was very hectic from work perspective. Enabling

By @NileshGavali, CISSP, Security+

Covid-19 – Teleworking Guideline

As You all are aware that not only, we should fear Corona Virus but also Security Viruses (Malware, Ransomware, Worms, etc.) so hygiene is most important part of IT team. Encouraging o

This Article was shared by Nachiket Sathaye, Information Security Consultant, Ultradefence Solutions

“We are PCI Compliant, now we are secured”- While assisting customers with their PCI DSS Compliance, I always come across teams making this statement

In its June 2, 2016 notification, RBI has issued new cybersecurity guidelines, which says that scheduled commercial banks (private, foreign and nationalized banks listed in the schedule of RBI Act, 1934) must proactively create or modify their polici

Now that we have covered PeopleSoft Architecture, it is time to continue with PeopleSoft security and describe some attack vectors against PeopleSoft system discovered by ERPScan researchers. The first one is an attack on back-end systems.

First, we s

Here is a comprehensive checklist to Evaluate SIEM Vendors. We highly appreciate this community contribution.
by Sunil Soni, CISO, Punjab National Bank

Vendor Selection Framework For Integration Of Threat Intelligence With SIEM

Key Selection Cr

End point Protection Solution:

 Managing the End point is one of the key areas where security to be built strongly. As this is the entry point, arresting at this level would help and make our  network stable.  So Data at rest (end storage), data durin

The IT GRC solution brings enterprise-wide processes(workflow, data repository, regulatory mapping etc.) onto a single platform with an objective of better control of data, its faster retrieval and processing to enable enhanced decision making and tr

White Hat Hackers

White Hat Hackers
Hackers that use their skills for good are classified as white hat. These white hats often work as certified Ethical Hackers, hired by companies to test the integrity of their systems. Others, operate without compa