All Posts

Map Staff Training to the Threats

“Hire or train staff for the threats,” said Paul Reid, global head of threat intelligence, OpenText. It’s a very simple concept that makes complete sense.…

Cybersecurity News: CISA adds vulnerabilities, mysterious military smartwatches, More Office problems

CISA adds 6 flaws to known exploited vulnerabilities catalog The collection comprises three Apple vulnerabilities that were patched this week, two flaws in VMware, and…

Cybersecurity News Week in Review: Microsoft confirms cyberattack, more MOVEit damage, reddit hit with ransomware

This week’s Cyber Security Headlines – Week in Review, June 19-23, is hosted by Rich Stroffolino with our guest, Janet Heins, CISO, iHeartMedia Cyber Security…

Cybersecurity News: Canadian breaches increase, new China backdoor, kinetic warfare threat

Cybersecurity breaches more than double among Canadian businesses A report released on June 13 by CDW Canada, in partnership with International Data Corp. Canada, is…

How To Get More People Into Cybersecurity

There are millions of cybersecurity jobs open. Over time, that number has just been growing. What we’re doing now does not seem to be working.…

Cybersecurity News: DoJ will go after nation-state actors, Apple fixes Triangulation zero-day, Schumer unveils strategy to regulate AI

New DoJ cyber prosecution team will go after nation-state threat actors The US DoJ has announced that its National Security Division (NSD) has a new…

The Board Shouldn’t Rely on the CISO For All Cyber Knowledge

If you rely on the CISO to educate the board, the board makes decisions based on the information they have. That’s a paraphrase from my…

Cybersecurity News: Rorschach ransomware, Australian government data leak, security market growth outpaces tech

Rorschach ransomware takes the speed crown As ransomware-as-a-service becomes a dominant cybercrime business model, varying ransomware providers need to find ways to differentiate. As a…

Make Them a Passwordless Offer They Can’t Refuse (LIVE in Denver)

Are we spending too much time listening to our users when it comes to authentication? We all know a password-only solution is weak and full…

Cybersecurity News: Reddit’s ransom, UK shuffles cyber chief, Binance reaches SEC deal

Reddit hit with ransom demand Most of the coverage about Reddit of late relates to its controversial API pricing changes. But the company also needs…

How To Make the Security Department More Approachable

The best way for people to realize that it’s OK that you made a cybersecurity mistake, is to own up to the mistakes that you’ve…

Cybersecurity News: Microsoft’s June cyberattacks, third MOVEit vulnerability, US Clop bounty

Microsoft says early June service outages were cyberattacks Microsoft said on Friday that it was indeed cyberattacks that that caused outages and affected certain of…

Cybersecurity News Week in Review: Microsoft banking warning, undetectable BatCloak malware, more MOVEit vulnerabilities

This week’s Cyber Security Headlines – Week in Review, June 12-16, is hosted by Sean Kelly with our guest, Phil Beyer, former Head of Security,…

Cybersecurity News: US federal agencies affected by MOVEit vuln, Pentagon leak suspect indicted, Suspected LockBit ransomware affiliate nabbed

US federal agencies affected by MOVEit breach US officials confirmed Thursday that several federal agencies have been impacted by the Russia-based Clop ransomware gang’s ongoing…

How to Create a Positive Security Culture

How do you create a positive security culture? It’s rarely the first concept anyone wants to embrace, yet it’s important everyone understands their responsibility. So…

Cybersecurity News: China ESXi exploit, WooCommerce vulnerability, Lockbit ransom report

China-linked APT group spotted exploiting a VMware ESXi zero-day Researchers at Mandiant have observed a China-linked cyberespionage group, which they are tracking as UNC3886, exploiting…

What the Heck Is OpenText Doing In Cybersecurity?

Most people know OpenText as an information management company. But what they don’t know is they’ve been building and acquiring assets in the cybersecurity market.…

Cybersecurity News: Amazon server outage broke fast food apps, Fortinet zero-day exploited, US intelligence confirms buying personal data

Amazon server outage broke fast food apps among other things At around 3 PM ET on Tuesday, an Amazon Web Services (AWS) cloud server outage…

After a Breach, Security and Privacy Are Very Important to Us

Why does it seem that the only time we hear about a company’s concern about security and privacy is after they’re compromised. It is only…

Cybersecurity News: Fortigate firewall flaw, BatCloak’s undetectable malware, Swiss government cyberattacks

Critical RCE flaw discovered in Fortinet FortiGate firewalls Fortinet has released these patches to address a critical security flaw in its FortiGate firewalls that could…

Security That Stops Business Flow Is Not Great Security

Make cybersecurity useful, but don’t impact the user flow. This is the charge of Benjamin Fabre (@bfabre), CEO for DataDome. To actually understand if your…

Cybersecurity News: Faked journalist hack, Strava leaks locations, Reddit API protests

Faked crypto journalists steal real crypto The analysts at ScamSniffer found that the threat group Pink Drainer successfully impersonated journalists covering cryptocurrency to steal roughly…

CISO Series Podcast LIVE at Team8 CISO Summit in Tel Aviv (6-19-23)

It’s about to happen. CISO Series Podcast returns to Tel Aviv to kick off Team8’s CISO Summit TLV 2023, a six-day event. This is a…

Cybersecurity News Week in Review: Hipponen’s malware warning, outwitting hackers, Clop’s MoveIt attack

This week’s Cyber Security Headlines – Week in Review, June 5-9, is hosted by Rich Stroffolino with our guest, Joshua Scott, Head of Security and…