Securing Our Nation: How the Infrastructure Investment and Jobs Act Delivers on Cyber Resiliency
Blog Published: 09/15/2022
Originally published by CrowdStrike here. Written by Jeff Worthington, CrowdStrike. Designed to improve our nation’s critical infrastructure, the act is one of the largest federally funded grant programs in history. It provides significant funding to improve your cybersecurity posture so you c...
Cryptominer Detection: A Machine Learning Approach
Blog Published: 09/15/2022
Originally published by Sysdig here. Written by Flavio Mutti, Sysdig. Cryptominers are one of the main cloud threats today. Miner attacks are low risk, low effort, and high reward for a financially motivated attacker. Moreover, this kind of malware can pass unnoticed because, with proper evasi...
ZTNA vs VPN – How to Burst a Cyber Myth
Blog Published: 09/16/2022
Originally published by Skyhigh Security here. Written by Vishwas Manral, Chief Technologist & Head of Cloud Native Security, Skyhigh Security. I hear a lot of myths about what Zero Trust Network Access (ZTNA) is and how it compares to VPN. Some of it is true, and a lot of it is far from t...
Your Guide to FedRAMP Pen Test Guidance 3.0
Blog Published: 09/16/2022
Originally published by Schellman here. Written by Josh Tomkiel, Schellman. For the first time since 2017, the FedRAMP Project Management Office (PMO) has updated the Penetration Testing Guidance document. For Cloud Service Providers (CSPs) seeking FedRAMP Authority to Operate (ATO), that’s ...
How to Protect Your Data When Ransomware Strikes
Blog Published: 09/12/2022
Originally published by Lookout here. Written by Hank Schless, Senior Manager, Security Solutions, Lookout. Ransomware is not a new attack vector. In fact, the first malware of its kind appeared more than 30 years ago and was distributed via 5.25-inch floppy disks. To pay the ransom, the victi...
Your Cloud Footprint is Growing: Here’s How to Scale Cloud Governance
Blog Published: 09/14/2022
Written by Umair Khan, Marketing Director, Stacklet For today’s businesses, cloud footprints have grown—and keep getting larger. Increasingly, that means many teams and departments are running implementations across multiple cloud providers, services, and regions. From a cloud governance or po...
The Chipmunks Are Coming: Appreciating the Motivation of Threat Actors
Blog Published: 09/19/2022
Originally published by ShardSecure here. Written by Marc Blackmer, VP of Marketing, ShardSecure. I like birds, but more on them in a moment. At the point in time of our story, I’d worked from home for about 10 years, and the shine of my basement office had worn away. One summer, I thought...
How to Leverage the NIST Framework for a More Effective SAP Security Strategy
Blog Published: 09/13/2022
Originally published by Onapsis here.Business applications like SAP are responsible for running the enterprise, powering operations and fueling the global economy. Considering 77% of the world’s transactional revenue touches an SAP system and 92% of the Forbes Global 2000 uses SAP, a successfu...
Edge Computing and IoT: Security Through Zero Trust
Blog Published: 09/13/2022
Originally published by CXO REvolutionaries here. Written by Bryan Green, Chief Information Security Officer, Zscaler. Though they're often used interchangeably, internet of things (IoT) and operational technology (OT) refer to adjacent but fundamentally different technologies. Both share comm...
Verizon’s 2022 Mobile Security Index Report – Confirming What We All Suspected
Blog Published: 09/14/2022
Originally published by Thales here. Written by Todd Moore, VP, Encryption Products, Thales.What happens when you combine a pandemic that forces most businesses into a remote work environment, coupled with increased mobile device use for many daily tasks? On the one hand, you get increased pro...
Insider Risk Management: Security Starts Within
Blog Published: 09/14/2022
Originally published by DoControl here. Written by Corey O'Connor, DoControl. When it comes to addressing insider risk, security starts within. Protecting sensitive company data from exfiltration and misuse requires a combination of the right people, process, and technology. Managing insider r...
How Long Does It Take to Complete a SOC 2 Audit?
Blog Published: 09/15/2022
Originally published by A-LIGN here. Written by Stephanie Oyler, Vice President of Attestation Services, A-LIGN. A SOC 2 report is a third-party validation that attests to an organization’s ability to protect data and information. It’s widely accepted across industries and provides a singular ...
How to Solve Complex Cloud Security Problems with AI
Blog Published: 09/16/2022
Written by Morey J. Haber, Chief Security Officer, BeyondTrust. Artificial intelligence (AI) and, to a lesser extent, machine learning (ML) have become increasingly prevalent as a solution to solve complex cybersecurity problems. While the cloud has made this more practical due to shared resou...
NIST Post-Quantum Competition: And the Round 3 Finalists Are…
Blog Published: 09/19/2022
Originally published by Entrust here. Written by Samantha Mabey, Entrust. If you’ve been following the NIST Post-Quantum (PQ) Cryptography Competition, then you likely know the round 3 finalist have recently been announced. In the off chance you’re not familiar, here’s a little background: Qu...
Data Breaches Can Cost Far More than Money
Blog Published: 09/20/2022
Originally published by PKWARE here. Every year, cyber-attack statistics grow larger and more threatening. In 2021 alone, the average number of cyberattacks and data breaches increased by 15.1 percent over 2020. This sharp increase should prompt organizations to consider when—not if—they w...
Comments on NIST Special Publication 1800-35B, ‘Implementing a Zero Trust Architecture’ Volume B
Blog Published: 09/21/2022
Originally published by Gigamon here. Written by Ian Farquhar and Orlie Yaniv, Gigamon. Editor’s note: As a supplier of network software and hardware to multiple U.S. government agencies, Gigamon reviews and comments on many draft standards and documents issued by government agencies. This has...
The Anatomy of Wiper Malware, Part 1: Common Techniques
Blog Published: 09/21/2022
Originally published by CrowdStrike here. Written by Ioan Iacob and Iulian Madalin Ionita, CrowdStrike. This blog post is the first in a four-part series in which an Endpoint Protection Content Research Team will dive into various wipers discovered by the security community over the past 10 ye...
Attention CISOs: The Board Doesn’t Care About Buzzwords
Blog Published: 09/22/2022
Originally published by Lookout here. Written by Paul Simmonds, Global Identity Foundation. We live in an IT world surrounded by buzzwords that are largely marketing gimmicks. Zero Trust, for example, is a concept no one actually understands and is slapped onto everything, including deriva...
Do You Really Need a Service Mesh?
Blog Published: 09/22/2022
Originally published by Tigera here. Written by Phil DiCorpo, Tigera. The challenges involved in deploying and managing microservices have led to the creation of the service mesh, a tool for adding observability, security, and traffic management capabilities at the application layer. While a s...
Monitor Your SaaS Environment for Three Common SaaS Misconfigurations
Blog Published: 09/23/2022
Originally published by AppOmni here. Written by John Whelan, Senior Director of Product Management, AppOmni. SaaS is ubiquitous across the enterprise and accounts for approximately 70% of software usage in companies. And SaaS usage is growing, with thousands of SaaS applications available...
