Latest

Cybercrime

Yet Again, Vulnerabilities Found in a Router

Jeremy Kirk  •  July 14, 2020

It's common for security researchers to be ignored when reporting a software vulnerability. The latest example - vulnerabilities found by Independent Security Evaluators in a router made by China-based Tenda.

Business Email Compromise (BEC)

The New Email Security Imperative

Tom Field  •  September 17, 2020

The 'work from anywhere' experience has fundamentally changed how we work - and how cyber adversaries leverage email as an attack vector. Daniel McDermott and Gar O'Hara of Mimecast outline a holistic approach that focuses on email defense, awareness and response.

Governance & Risk Management

Zero Standing Privilege: How to Achieve it

Tom Field  •  August 25, 2020

Increasingly, cyber attacks are taking advantage of privileged accounts, and traditional PAM controls are not enough to defend against them. Tim Keeler of Remediant discusses the role of Zero Standing Privilege and just-in-time privileged account defense.

Fraud Management & Cybercrime

Enhancing Approval Rates: Best Practices In An Accelerated eCommerce Environment

Information Security Media Group  •  July 28, 2020

View this OnDemand webinar on the role that merchants and issuers play in enhancing approval rates.

Endpoint Security

Several Prominent Twitter Accounts Hijacked in Cryptocurrency Scam

Scott Ferguson  •  July 15, 2020

Several prominent business executives and politicians, including Joe Biden, Elon Musk and Bill Gates, had their Twitter accounts hijacked in what appears to be a cryptocurrency scam, according to news reports. Some security experts believe that two-factor authentication protections failed.

Governance & Risk Management

Remote Workforce Security - the Long Game

Information Security Media Group  •  May 21, 2020

"Risk acceptance" was the operative term as organizations quickly deployed remote workforces in response to the global crisis. But now, as this deployment becomes a long-term option, enterprises need to take a future-focused view toward identity, cloud, and the attack surface. Forcepoint's Homayun Yaqub offers tips.

Application Security

AST as the Key to DevSecOps Maturity

Information Security Media Group  •  May 15, 2020

DevSecOps is in its "awkward teenage years," says Matthew Rose of Checkmarx. But with new tooling and automation - particularly application security testing tools - he sees the practice maturing quickly and delivering improved outcomes.

Application Security

Zero Trust: 3 Critical Considerations

Tom Field  •  May 4, 2020

Done right, a zero trust architecture can reduce the complexity of one's environment while also improving cybersecurity protection and efficiency. Bob Reny of ForeScout focuses on three critical considerations: visibility, compliance and control.

COVID-19

Webcast: Keeping Remote Workers Safe and Your Work Secure

Information Security Media Group  •  May 4, 2020

Learn how to protect employees from malicious web content.

Business Continuity Management / Disaster Recovery

Webinar | 4 Actions to Secure Work from Home Employees

Information Security Media Group  •  April 27, 2020

This informational webinar will outline 4 actions you can take today to keep employees secure and productive during these challenging times, with tips straight from your identity and access management peers.

3rd Party Risk Management

Fraud Thrives in a Crisis - Why The Insurance Community Needs to Stay Vigilant

Dennis Toomey, Global Director, Counter Fraud Analytics and Insurance Solutions, BAE Systems Applied Intelligence  •  April 21, 2020

Alongside the sad and vast expense of legitimate claims, it is an unfortunate fact that in times of economic hardship, people have a history of taking any opportunity to exploit financial institutions for ill-gotten gain.

Fraud Management & Cybercrime

Social Engineering's Role in Cyber Fraud - And What We Are Doing About It

James Hatch, BAE Systems Applied Intelligence  •  March 26, 2020

As outlined in our Vision for Tackling Cyber Fraud last year, social engineering - a prime example of industrialized criminal deception - is leaving modern society vulnerable in two separate ways.