Strategy: Page 29
-
Bjork, Marten. Retrieved from Unsplash.
How companies can defend against credential theft
Unique passwords are the best defense against credential stuffing. But users, unless forced to act differently, will stick with what makes access easy.
By Sue Poremba • Sept. 14, 2021 -
InfoSec teams under pressure to compromise security for productivity: report
Younger workers are fueling a backlash against corporate security policies designed to protect companies from malicious attacks, a study from HP Wolf Security shows.
By David Jones • Sept. 9, 2021 -
Explore the Trendline➔
.shock via Getty Images
TrendlineRisk Management
An esclation of cyber risks facing businesses and government has made cyber resilience a major priority.
By Cybersecurity Dive staff -
Permission granted by Screenshot via BlueVoyant
What ransomware negotiations look like
Fear can overwhelm the decision of whether to pay a ransom. But in negotiations, companies have to take a backseat.
By Samantha Schwartz • Sept. 9, 2021 -
iStock.com/pixelfit
Sponsored by Code42Are you ready for the second wave of digital transformation?
In the second wave of digital transformation, understanding Insider Risk is more important than ever.
Sept. 7, 2021 -
Adeline Kon/Cybersecurity Dive
ColumnBehind the Firewall: What to do if your vendor has a security incident
A vendor with a checkered past with security incidents is not automatically disqualified from future contracts. Rather, there is a playbook for due diligence.
By Naomi Eide , Samantha Schwartz • Sept. 3, 2021 -
IT-OT crossover relitigates who is responsible for ICS security
If companies can effectively combine their IT and OT SOCs, they could be better equipped to uncover a fuller view of the kill chain.
By Samantha Schwartz • Sept. 2, 2021 -
Alex Wong via Getty Images
What cyber insurance CEOs want to see from customers
Insurers joined high-profile CEOs at the White House summit last week to discuss how to improve national cybersecurity. For one insurance CEO, the industry needs three points of improvement.
By Samantha Schwartz • Aug. 31, 2021 -
Sarah Silbiger via Getty Images
Why a ban on ransom payments will not work
Those most impacted by an attack are motivated to pay. In some cases, it's not the victim company but its customers who want service restored.
By Samantha Schwartz • Aug. 27, 2021 -
Photo by MART PRODUCTION from Pexels
Companies are investing in security operations but limited by talent gaps
For some CISOs, the onus to attract talent is on them and the standards they make.
By Samantha Schwartz • Aug. 25, 2021 -
gilaxia via Getty Images
OpinionWhy most companies don't understand speed is vital to cybersecurity
In cybersecurity folk wisdom, frequent releases are scary and the foundation for security failure. Why is there this disconnect between cybersecurity superstition and reality?
By Kelly Shortridge • Aug. 24, 2021 -
Joe Raedle via Getty Images
In the event of a cyber incident, think like a lawyer
While security professionals may not be deeply involved in the legal aspects of a cyber incident, they have to be aware of attorney-client privileges.
By Samantha Schwartz • Aug. 17, 2021 -
Adeline Kon/Cybersecurity Dive
Column
Behind the Firewall: Security investments that will stick post-pandemic
As long-term strategies for remote work solidify, VPNs, EDR and other tools are here to stay.
By Katie Malone , Samantha Schwartz • Aug. 16, 2021 -
Rebecca Pifer/Cybersecurity Dive
Should healthcare organizations pay to settle a ransomware attack?
The decision goes beyond finances: In healthcare, it's a moral judgement, too. "I don't think there's a single yes or no," said Michael Coates, former Twitter CISO.
By Rebecca Pifer • Aug. 13, 2021 -
Dean Mouhtaropoulos via Getty Images
Criminal middlemen administer access to privileged accounts
Ransomware attacks stem from a specialized division of labor selling stolen credentials and providing unauthorized access to the enterprise, according to an IntSights report.
By David Jones • Aug. 12, 2021 -
Stefan Zaklin / Stringer / via Getty Images via Getty Images
White House cyber strategy takes shapeHow the $1.2 trillion infrastructure bill invests in cyber
As part of the larger cyber funding injection, the legislation sets aside $100 million, allocated over five years, for the Cyber Response and Recovery Fund.
By Samantha Schwartz • Aug. 12, 2021 -
Patrick Lux via Getty Images
Is XDR the next best security solution?
SOCs are still learning about extended detection and response and how to apply it to an existing security stack. But when properly deployed, it's an asset for incident response.
By Samantha Schwartz • Aug. 11, 2021 -
How human instinct can interfere with cyber crisis response
In a gut reaction to a security incident, users may make the wrong move to avoid losing data.
By Samantha Schwartz • Aug. 10, 2021 -
ijeab/Getty Images Plus via Getty Images
It's time to bridge the gap between security and development
More than 80% of developers knowingly release applications with insecure code, but experts say security and development don't have to be at odds.
By Brian Eastwood • Aug. 9, 2021 -
Samantha Schwartz/Cybersecurity Dive
CISA takes aim at information sharing woes, launches public-private super group
The Joint Cyber Defense Collaborative is Jen Easterly's first major initiative as CISA's second-ever director.
By Samantha Schwartz • Aug. 6, 2021 -
Mark Wilson via Getty Images
Don't ask whether to pay a ransom — ask how attackers could get in
Paying a ransom does not always mitigate damage from the attack or unlock encrypted systems.
By Samantha Schwartz • Aug. 3, 2021 -
Retrieved from Flickr/Amtec Photos.
Preparedness, checklists, leadership buy-in: How to build a rapid IT response
Navigating cyberattacks and outages means companies rely on IT leaders to respond quickly, as business continuity hinges on functioning systems.
By Roberto Torres • Aug. 2, 2021 -
Adeline Kon/Cybersecurity Dive
Column
Behind the Firewall: 5 security leaders share incident response plans
With a strong plan in place, security teams can jump immediately into action when a cyber incident occurs to — hopefully — mitigate the damage.
By Katie Malone • July 30, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
White House cyber strategy takes shapeBiden orders voluntary cybersecurity performance goals for electric utilities, other critical sectors
The president on Wednesday signed a national security memorandum that also expands and formally establishes a cross-sector Industrial Control System Cybersecurity Initiative, which was piloted by the electric sector.
By Robert Walton • July 30, 2021 -
Matthew Stockman/Getty via Getty Images
Ransomware, supply chain attacks put cyber insurers on notice
Malicious cyber activity will force the insurance industry to raise premiums, raise standards and, in some cases, negotiate ransom payments, newly released data from Coalition shows.
By David Jones • July 28, 2021 -
Tomohiro Ohsumi via Getty Images
Engineers need cybersecurity training, too
Companies will undergo a shift in cyber culture, eventually combining the data engineers and network security professionals use to search for vulnerabilities.
By Samantha Schwartz • July 22, 2021
Previous
