Who is making enterprise security decisions?

A leader should sign off on security systems and protocols. However, protection is weaker if decisions bottleneck with one person.

By Sue Poremba • April 26, 2021

Global supply chains grapple with international cyberpowers

Cybersecurity intertwines industry with geopolitics. Governments will have to grapple with how to balance national security, business continuity and intellectual property protection.

By Samantha Schwartz • April 26, 2021

Security officials want continuity, accountability from national cyber director

The role will form "the fabric" between the private and public sectors and act as liaison between Congress and the White House.

By Samantha Schwartz • April 23, 2021

Marijuana is becoming more accepted. Will cybersecurity employers play along?

As more states legalize recreational use, employers in the public and private sectors may need to change how they hire for cybersecurity.

By Samantha Schwartz • April 20, 2021

Mondelez revamped boring security training

Anything security does to agitate users, in terms of their accessibility or ease of use, will harden resistance to training.

By Samantha Schwartz • April 15, 2021

White House announces CISA, national cyber directors

The appointments coincide with the discretionary funding request the White House submitted on Friday. 

By Samantha Schwartz • April 12, 2021

How to support overworked, understaffed security operations

Strapped for resources, companies can either have their security practitioners wear too many hats, or outsource the responsibilities. 

By Samantha Schwartz • April 12, 2021

SolarWinds compromise leaves Senate questioning agency cyber defenses

Existing cyber defense programs fell short in detecting and defending U.S. agencies, a shortcoming that exacerbated SolarWinds fallout.

By Samantha Schwartz • March 19, 2021

Information sharing works, but a key obstacle awaits: reluctance

The private sector owns the majority of the attack surface. Brand-name IT and security companies have the ability, and a degree of responsibility, to contribute their expertise to national defense.

By Samantha Schwartz • March 18, 2021

Federal $1.9 trillion relief bill clears path for more security, modernization funds

The appropriations in the law come as the federal government and private industry respond to two major hacks: SolarWinds and Microsoft Exchange.

By Samantha Schwartz • Updated March 11, 2021

63% of security professionals, execs concerned with SolarWinds hack, survey finds

Before companies overhaul the typical process for building and securing software, SOCs have to figure out if they were a collateral victim of a supply chain hack.

By Samantha Schwartz • March 9, 2021

White House prioritizes software security, assesses OT

"If you can't see a network quickly, you certainly don't have a prayer defending a network," said Deputy National Security Advisor Anne Neuberger.

By Samantha Schwartz • March 8, 2021

What OT security experts want from their IT counterparts

While IT and OT have been converging for more than a decade, the culture of cybersecurity is stuck in a silo, limiting the abilities of OT security practitioners.

By Samantha Schwartz • March 5, 2021

IT, security jobs in demand through 2029: report

Reliance on remote work will drive up employment in areas such as information security and software development, according to projections from the U.S. Bureau of Labor Statistics.

By Roberto Torres • Feb. 22, 2021

SolarWinds attack poses long-term threat of disruption, White House says

The SolarWinds hack compromised at least nine federal agencies and 100 private sector companies, said Deputy National Security Advisor Anne Neuberger in a briefing Wednesday. 

By Samantha Schwartz • Feb. 18, 2021

One-third of analysts ignore security alerts, survey finds

With an ever-increasing number of alerts, identifying what to ignore is an impossible mission without scalable technology.

By Samantha Schwartz • Feb. 16, 2021

Are businesses underinvesting in cybersecurity?

The issue isn't how large of a cybersecurity investment an organization makes, but rather, if it is spending funds properly.

By Sue Poremba • Feb. 16, 2021

White House taps Neuberger to lead SolarWinds government response

The SolarWinds attack has opened a deeper conversation about the role of the federal government in coordinating cybersecurity policy and sharing intelligence with the private sector.

By David Jones • Feb. 11, 2021

Hidden messages, hacking tests entice tech talent

By creatively engaging prospective employees during the hiring process, some businesses successfully found the right fit.

By Katie Malone • Feb. 5, 2021

FireEye reports record revenue in first report since Red Team hack

The company's discovery of the SolarWinds attack has fueled additional customer demand, which should be reflected in deferred revenue during 2021.

By David Jones • Feb. 3, 2021

CISOs at SMBs bogged down by small teams, budgets

To choose a new security solution, CISOs with small teams rely on an employee with existing experience with a technology, a Cynet report shows. 

By Samantha Schwartz • Feb. 2, 2021

Supply chain attacks could open up vendor competition, Moody's says

The continued proliferation of ransomware attacks could lead cyber insurers to reexamine coverage terms. 

By David Jones • Feb. 2, 2021

How to translate threats and risk to C-suite

When communicating with the C-suite or shareholders, CISOs have to speak equal parts security and bottom line. 

By Samantha Schwartz • Feb. 1, 2021

Tomorrow’s cyber workforce has security skills built-in. That could limit businesses

Cybersecurity truths: The talent pool is growing but not fast enough and there will always be a variety of paths that lead to the same place.

By Samantha Schwartz • Jan. 29, 2021

Biden campaign cyber chief named federal CISO

Cybersecurity veterans praised the appointment, highlighting Chris DeRusha's extensive government and private sector experience, useful for navigating SolarWinds fallout.

By David Jones • Jan. 27, 2021