Storage devices remain a key vector for data loss and malware. How can organizations gain visibility and enforce granular control over what gets read, written,…
User-based access controls are inadequate. Attackers know that users inherit their full permissions. When ransomware executes under a user’s account, its game over. Traditional role-based…
In today’s cybersecurity news… European airport disruption due to cyberattack check-in and baggage software Disruptions and delays continue at several major airports including London’s Heathrow,…
This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests Jack Kufahl, CISO, Michigan Medicine, and Nick Espinosa, host,…
In today’s cybersecurity news… Google patches sixth Chrome zero-day exploited in attacks this year Emergency security updates were released to patch this sixth one, which…
In today’s cybersecurity news… Insight Partners warns thousands after ransomware breach Venture capital and private equity firm Insight Partners is notifying 12,657 people that their…
In today’s cybersecurity news… House lawmakers move to extend two key cyber programs US house lawmakers unveiled a short-term funding bill extending the 2015 Cybersecurity…
In today’s cybersecurity news… Android moving to “risk-based” security updates Since August 2015, Google has published a monthly Android Security Bulletin (ASB) listing vulnerabilities fixed…
Asset visibility remains a persistent challenges in cybersecurity. Despite working on this challenge for decades, CISOs continue to struggle with knowing what assets exist in…
In today’s cybersecurity news… ShinyHunters hits Vietnam National Credit Information Center The attack was confirmed by the Vietnam Cyber Emergency Response Team, and Resecurity’s HUNTER…
This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests Rob Teel, CTO, Oklahoma Department of Commerce and Howard…
In today’s cybersecurity news… SonicWall SSL VPN flaws now being actively exploited Following up on a story we covered in August, cybersecurity firm Rapid7 says…
Since we started CISO Series, we understood selling cybersecurity products is quite difficult. But, it’s compounded by the trend that large companies, not smaller ones,…
In today’s cybersecurity news… The npm incident: nothing to fret about? In Wednesday’s show we passed along the story that an attacker compromised a developer’s…
In today’s cybersecurity news… Thousands had data leaked in blood center ransomware attack New York Blood Center confirmed a January ransomware attack exposed sensitive data…
Everyone talks about the need for prevention in cybersecurity. But the dirty secret is it’s rarely practiced because it introduces productivity friction. Will prevention always…
In today’s cybersecurity news… GhostAction campaign targets GitHub On September 2nd, GitGuardian discovered that the account for a GitHub project they use internally, FastUUID, was…
At Blackhat 2025, I asked cybersecurity professionals about what you can only learn from dealing with a real cybersecurity incident. Some related that the psychological…
We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.