Pinning ransomware gangs is a game of 'whack-a-mole'

Dismantling international criminal enterprises takes a combination of law enforcement, intelligence and allies. But gangs rebrand to evade detection.

By Samantha Schwartz • May 26, 2021

No invite needed: CISA threat hunting authority spans government networks

The SolarWinds and Microsoft Exchange hacks reinforced the government's need for a holistic view of the threat landscape.

By Samantha Schwartz • May 20, 2021

Explore the Trendline➔

CISO Strategy

Corporate stakeholders want to better understand the risk calculus of their technology stacks, answering the lingering question: Are we a target? 

By Cybersecurity Dive staff

What 5 security chiefs learned from COVID-19

From vaccine development to barren grocery story shelves, CISOs speaking at RSA Conference 2021 discussed how they navigated security in a complex threat landscape.

By Samantha Schwartz • May 19, 2021

Security spending to rise, buoyed by cloud: Gartner

Cloud security was the "smallest, but fastest growing" market, according to the research firm. 

By Samantha Schwartz • May 18, 2021

White House cybersecurity order lands with a plea for private sector help

Federal action alone is not enough, the White House said, though higher government standards could improve private sector security. 

By Samantha Schwartz • May 13, 2021

What happens if threat data isn't shared?

Threats only have meaning if companies decide they do; if an organization does not deem a threat serious enough, they can go unshared. 

By Samantha Schwartz • April 30, 2021

Cybersecurity careers: Makeshift beginnings, technical pursuits

As the field becomes more visible, thanks to large cyberattacks and breaches invading mainstream media, more curious minds will seek employment.

By Samantha Schwartz • April 28, 2021

Who is making enterprise security decisions?

A leader should sign off on security systems and protocols. However, protection is weaker if decisions bottleneck with one person.

By Sue Poremba • April 26, 2021

Global supply chains grapple with international cyberpowers

Cybersecurity intertwines industry with geopolitics. Governments will have to grapple with how to balance national security, business continuity and intellectual property protection.

By Samantha Schwartz • April 26, 2021

Security officials want continuity, accountability from national cyber director

The role will form "the fabric" between the private and public sectors and act as liaison between Congress and the White House.

By Samantha Schwartz • April 23, 2021

Marijuana is becoming more accepted. Will cybersecurity employers play along?

As more states legalize recreational use, employers in the public and private sectors may need to change how they hire for cybersecurity.

By Samantha Schwartz • April 20, 2021

Mondelez revamped boring security training

Anything security does to agitate users, in terms of their accessibility or ease of use, will harden resistance to training.

By Samantha Schwartz • April 15, 2021

White House announces CISA, national cyber directors

The appointments coincide with the discretionary funding request the White House submitted on Friday. 

By Samantha Schwartz • April 12, 2021

How to support overworked, understaffed security operations

Strapped for resources, companies can either have their security practitioners wear too many hats, or outsource the responsibilities. 

By Samantha Schwartz • April 12, 2021

SolarWinds compromise leaves Senate questioning agency cyber defenses

Existing cyber defense programs fell short in detecting and defending U.S. agencies, a shortcoming that exacerbated SolarWinds fallout.

By Samantha Schwartz • March 19, 2021

Information sharing works, but a key obstacle awaits: reluctance

The private sector owns the majority of the attack surface. Brand-name IT and security companies have the ability, and a degree of responsibility, to contribute their expertise to national defense.

By Samantha Schwartz • March 18, 2021

Federal $1.9 trillion relief bill clears path for more security, modernization funds

The appropriations in the law come as the federal government and private industry respond to two major hacks: SolarWinds and Microsoft Exchange.

By Samantha Schwartz • Updated March 11, 2021

63% of security professionals, execs concerned with SolarWinds hack, survey finds

Before companies overhaul the typical process for building and securing software, SOCs have to figure out if they were a collateral victim of a supply chain hack.

By Samantha Schwartz • March 9, 2021

White House prioritizes software security, assesses OT

"If you can't see a network quickly, you certainly don't have a prayer defending a network," said Deputy National Security Advisor Anne Neuberger.

By Samantha Schwartz • March 8, 2021

What OT security experts want from their IT counterparts

While IT and OT have been converging for more than a decade, the culture of cybersecurity is stuck in a silo, limiting the abilities of OT security practitioners.

By Samantha Schwartz • March 5, 2021

IT, security jobs in demand through 2029: report

Reliance on remote work will drive up employment in areas such as information security and software development, according to projections from the U.S. Bureau of Labor Statistics.

By Roberto Torres • Feb. 22, 2021

SolarWinds attack poses long-term threat of disruption, White House says

The SolarWinds hack compromised at least nine federal agencies and 100 private sector companies, said Deputy National Security Advisor Anne Neuberger in a briefing Wednesday. 

By Samantha Schwartz • Feb. 18, 2021

One-third of analysts ignore security alerts, survey finds

With an ever-increasing number of alerts, identifying what to ignore is an impossible mission without scalable technology.

By Samantha Schwartz • Feb. 16, 2021

Are businesses underinvesting in cybersecurity?

The issue isn't how large of a cybersecurity investment an organization makes, but rather, if it is spending funds properly.

By Sue Poremba • Feb. 16, 2021

White House taps Neuberger to lead SolarWinds government response

The SolarWinds attack has opened a deeper conversation about the role of the federal government in coordinating cybersecurity policy and sharing intelligence with the private sector.

By David Jones • Feb. 11, 2021