Strategy
-
Matt Kapko/Cybersecurity Dive
CISA director pushes for vendor accountability and less emphasis on victims’ errors
Stakeholders need to address why vendors are delivering products with common vulnerabilities, which account for the majority of attacks, Jen Easterly said.
By Matt Kapko • April 25, 2024 -
stefanovsky via Getty Images
Enterprises are getting better at detecting security incidents
Google Cloud’s Mandiant saw significant improvements in how organizations track down threats, yet hackers are still abusing common threat vectors.
By David Jones • April 23, 2024 -
Explore the Trendline➔
ar-chi via Getty Images
TrendlineRisk Management
Now, public companies have to detail their cybersecurity risk management in annual filings, raising awareness on what many cyber experts already knew — security issues are business issues.
By Cybersecurity Dive staff -
sodafish via Getty Images
Cyber insurance gaps stick firms with millions in uncovered losses
A CYE analysis of 101 breaches across various sectors revealed insurance gaps resulting in an average of $27.3 million in uncovered losses per incident.
By Alexei Alexis • April 22, 2024 -
iStock via Getty via Getty Images
Majority of businesses worldwide are implementing zero trust, Gartner finds
Programs are typically sponsored by C-suite executives, while the CISO is often tasked with execution, according to Gartner.
By David Jones • April 22, 2024 -
ar-chi via Getty Images
Opinion
The art of threat modeling: 3 frameworks to know
Organizations should use the frameworks in a manual or automated way to better understand the security threats they’re up against, Gartner’s William Dupre writes.
By William Dupre • Updated April 24, 2024 -
Leon Neal / Staff via Getty Images
ChatGPT grabs the shadow IT crown: report
Generative AI tools emerged as the latest villain in the enterprise battle to curb SaaS bloat and rationalize software portfolios, Productiv analysis found.
By Matt Ashare • April 16, 2024 -
vchal via Getty Images
Top officials again push back on ransom payment ban
In lieu of a ban, the Institute for Security and Technology advises governments to achieve 16 milestones, most of which are already in place or in the works.
By Matt Kapko • April 15, 2024 -
gorodenkoff via Getty Images
CISA to big tech: After XZ Utils, open source needs your support
The attempted malicious backdoor may have been part of a wider campaign using social engineering techniques, the open source community warned.
By David Jones • April 15, 2024 -
shutterstock.com/Virrage Images
Sponsored by SynopsysDevSecOps, done right, can achieve both speed and security in software development
You don’t have to choose between speed or security if you do DevSecOps correctly. Learn how.
April 15, 2024 -
gorodenkoff via Getty Images
CISO role shows significant gains amid corporate recognition of cyber risk
A report from Moody’s Ratings shows CISOs and other senior-level cyber executives have become key decision makers within the C-suite.
By David Jones • April 9, 2024 -
onurdongel via Getty Images
Industry stakeholders seek 30-day delay for CIRCIA comments deadline
Industry officials are asking for additional time to comb through hundreds of pages of detailed rules about disclosure of covered cyber incidents and ransom payments.
By David Jones • April 8, 2024 -
Permission granted by Fortinet
Sponsored by FortinetThe top 5 SecOps strategies to strengthen business in 2024
Learn the importance of specialized security fueled by artificial intelligence and machine learning, why comprehensive coverage from attacks is critical and how to embrace new methods of supporting your IT teams.
April 8, 2024 -
adventtr via Getty Images
Cybersecurity venture funding remains weak, near three-year low
Quarterly funding levels hit $2.3 billion in Q1 2024, a far cry from the $8 billion high the market achieved in the final quarter of 2021, according to Pinpoint Search Group.
By Matt Kapko • April 5, 2024 -
Mshake via Getty Images
What’s missing for SMBs? A solid cybersecurity culture
Small businesses can be especially vulnerable to cyberattacks because of their limited resources, and few have employees on staff who truly understand the value of secure business operations.
By Sue Poremba • April 1, 2024 -
Courtesy of Billington CyberSecurity Summit
Water woes: A federal push for cyber mitigation is highlighting the sector’s fault lines
The water utility industry says they recognize the heightened threat environment, but the current federal push fails to account for their resource constraints.
By David Jones • March 28, 2024 -
Laser1987 via Getty Images
CISA issues notice for long-awaited critical infrastructure reporting requirements
CIRCIA will require covered entities to promptly disclose major cyber incidents and ransomware payments.
By David Jones • March 27, 2024 -
sodafish via Getty Images
Marsh launches group captive insurance firm for cyber
The company wants to provide larger, financially stable companies with alternatives for managing risk, after years of volatility in pricing and coverage.
By David Jones • March 25, 2024 -
Photo illustration: Industry Dive; US Securities and Exchange Commission
How companies describe cyber incidents in SEC filings
The words businesses use in cybersecurity disclosures matter. They can channel confidence in the recovery process, potential impacts and legal liabilities.
By Matt Kapko • March 19, 2024 -
Sponsored by Palo Alto Networks
Security consultation is a non-negotiable for M&A activity
Over 20% of external cloud services change monthly. Without visibility, it is easy to lose track of changes and prevent risks. Get the report to learn more.
By Matt Kraning, CTO, Cortex, Palo Alto Networks • March 18, 2024 -
Andrew Brookes
Audit committees rank cybersecurity as top priority amid SEC crackdown
Cyberattacks are just one of several rapidly changing threats confronting audit committees, according to the Center for Audit Quality and Deloitte.
By Jim Tyson • March 14, 2024 -
Sean Gallup / Getty Images News via Getty Images
Google Cloud CISO spots asymmetric advantage for AI in defense
Organizations have the upper hand in using generative AI for security because it’s trained on data they own and context they tune against it, Phil Venables says.
By Matt Kapko • March 13, 2024 -
Nick van Bree via Getty Images
Ransomware festers as a top security challenge, US intel leaders say
U.S. intelligence leaders warn ransomware activity is growing, despite high profile efforts to seize threat actors’ infrastructure.
By Matt Kapko • March 12, 2024 -
Just_Super via Getty Images
What’s behind the demand for MDR and IAM systems
It's not just the front door businesses need to protect. Organizations also have to recognize the damage threat actors can do once they’re inside.
By Sue Poremba • March 7, 2024 -
Matt Kapko/Cybersecurity Dive
CrowdStrike dodges pricing war with Palo Alto Networks
CEO George Kurtz called out CrowdStrike's largest competitor, dismissing Palo Alto Network's strategy of free incentives. "Free is never free," he said.
By Matt Kapko • March 6, 2024 -
Naomi Eide/Cybersecurity Dive
AWS CISO: Generative AI is just a tool, ‘not a magic wand’
Attackers and defenders have access to the same capabilities in generative AI. Clear advantages for either side have yet to materialize.
By Matt Kapko • March 5, 2024
