Supply chain attacks renew focus on limiting privileged access to cloud data

Supply chain attacks and rapid shifts to cloud data storage have led companies to reduce access by third-party vendors and employees to sensitive data.

By David Jones • Jan. 29, 2021

GDPR regulators are sinking their teeth into violators. 2020's fines are proof.

The European regulation took about a year before major fines were introduced. Watchdogs are in a grey area of harnessing better privacy standards and having zero tolerance for negligent or intentional violations.

By Samantha Schwartz • Jan. 28, 2021

Explore the Trendline➔

Risk Management

An esclation of cyber risks facing businesses and government has made cyber resilience a major priority. 

By Cybersecurity Dive staff

Biden campaign cyber chief named federal CISO

Cybersecurity veterans praised the appointment, highlighting Chris DeRusha's extensive government and private sector experience, useful for navigating SolarWinds fallout.

By David Jones • Jan. 27, 2021

Cyberthreat trends in the remote work landscape

With more workers logging in from home, companies face new cybersecurity challenges and opportunities.

By David Jones • Jan. 25, 2021

Cybersecurity market set to reach $60B in 2021: report

Unknown threats, like the ones emerging from the SolarWinds hack, are shaping the future of investments.

By Samantha Schwartz • Jan. 22, 2021

Technology's greatest supply chain challenge? Establishing trust

Geopolitics play a role in how the private sector purchases technology, influencing what on- and offshore vendors companies decide to trust.

By Samantha Schwartz • Jan. 21, 2021

Cyber defense panel sees more private sector coordination following SolarWinds

Defense and intelligence experts say federal agencies need to strengthen private sector support, intelligence sharing to prevent the next big nation-state attack. 

By David Jones • Jan. 20, 2021

How one hospital is defending against ransomware

By the time the Ryuk ransomware alert was issued, Rush Memorial Hospital had at least two risk mitigation measures: improved backup as a service and a systems engineer with an evasion plan. 

By Samantha Schwartz • Dec. 22, 2020

SolarWinds breach reminds companies to be proactive in managing trust, disclosure

Legal and forensics experts warn CISOs about supply chain monitoring and transparency amid fallout from historic attack. 

By David Jones • Dec. 22, 2020

After years in the lab, IBM ready to take homomorphic encryption into the mainstream

Increased use of hybrid cloud and a successful pilot program help build the case for processing highly-encrypted data in transit.

By David Jones • Dec. 18, 2020

COVID-19 vaccine supply chain has cyberthreats hidden in plain sight

Outdated systems throughout vaccine distribution logistics carry unprecedented cyberthreats. 

By Samantha Schwartz • Dec. 16, 2020

National defense bill is heavy on cyber. What it means for the private sector.

The recommendations are intended to remedy areas of distrust and construct a more resilient cyber infrastructure, regardless of sector.

By Samantha Schwartz • Dec. 7, 2020

Why some industries are more secure than others

Threats go beyond industry and target organizations depending on business size. Company size is a factor, but so is investment in cyber defense. 

By Sue Poremba • Dec. 7, 2020

NERC expands IT-focused cybersecurity program as hackers target grid operations tech

Previously focused on utility operations IT, the Cybersecurity Risk Information Sharing Program will now include two pilots scanning for threats to operational technologies.

By Robert Walton • Dec. 4, 2020

What security experts expect from Biden's cyber strategy

The private sector is playing a more active role in national security. Now, security professionals are hungry for even more cross-sector collaboration.

By Samantha Schwartz • Dec. 3, 2020

Proactive technology upgrades prevent security nightmares, report finds

Successful enterprises stay one step ahead of bad actors, retain talent and get support from top company executives.

By David Jones • Dec. 1, 2020

Technologists grapple with privacy, bias as AI inches closer to customers

Industry must contend with the ethical challenges of building AI as the technology expands in physical and digital customer touchpoints.

By Roberto Torres • Nov. 30, 2020

CISA's head was fired. How a leadership vacancy impacts the private sector

"I know that most, if not all, of my colleagues would currently pass on opportunities in the public sector, which is a shame," said RunSafe Security's Joe Saunders.

By Samantha Schwartz • Nov. 19, 2020

For Wells Fargo, tech, security and innovation drives risk management

Companies must look closely at technology as an operational risk, but neglecting innovation opens more windows for bad actors to enter, a Wells Fargo executive said. 

By Katie Malone • Nov. 19, 2020

Remote work chipped away at zero trust skepticism, increased adoption

Organizations can adopt zero trust systematically. The "peanut butter spread" approach doesn't apply here.

By Samantha Schwartz • Nov. 13, 2020

How companies are meeting the challenge of a changing cyberthreat landscape

Security teams don't have as much access to remote work devices, which obscures network visibility. Cybercriminals capitalized on the opportunity.

By Sue Poremba • Nov. 11, 2020

2020 gave cybersecurity more opportunity. Now CISOs have to seize it

CISOs influence risk appetite and budget. Technology trends, threats, regulations and the pandemic are out of their control.

By Samantha Schwartz • Nov. 6, 2020

Trump, Biden want strong cyber but differ on offense vs. defense

The presidential nominees understand the urgency around cyber efforts but are split on national data protection.

By Katie Malone • Oct. 29, 2020

The cloud is threatening firewalls. Is it time to let them go?

With the cloud, applications or network infrastructures change daily. It's not the perennial update developers and security professionals had to tolerate. 

By Samantha Schwartz • Oct. 28, 2020

Security accounts for just 5.7% of IT spend: Gartner

The range of IT security spending is between 1.7% to 11.5% of IT budgets, but "this is not necessarily good or bad," said Gartner's Tom Scholtz.

By Samantha Schwartz • Oct. 28, 2020