The number of new identity records and the depth of personal information available in exfiltrated data are expanding, creating a blueprint of digital identities that threat actors can weaponize and expose identity information.
New SaltStack research survey, The State of XOps Report, Q2 2020, reveals that organizations using software to help IT and InfoSec teams collaborate and align are three times more confident in the effectiveness of their information security efforts.
The Information Security Forum (ISF) has published a major update to its Standard of Good Practice (The Standard) for IT security professionals. The guide delivers comprehensive coverage of information security controls and information risk-related guidance, providing ISF Members with a set of good practice covering all aspects of security strategy, incident management, business continuity, cyber resilience and risk management.
GoDaddy, one of the world’s largest domain registrar and a web hosting company that provides services to roughly 19 million customers around the world, has confirmed a data breach.
The latest findings of the Stott and May Cyber Security in Focus research reveal that leaders are still struggling with the skills gap and access to talent. Most respondents (76 percent) believe there is a shortage of cybersecurity skills in their company.
Chris Hallenbeck, CISO for the Americas at Tanium, has led security and IT operations, incident response, endpoint detection and built and deployed teams for incidents of national security. What initiatives has he implemented as a CISO, and how does he gauge the success of his team?
In contrast to the competitions on Russian-language cybercriminal forums profiled previously by Digital Shadows, how are competitions on English-language cybercriminal forums more generally "innocent"?
Millions of U.S. businesses forced to rapidly support home working for employees are facing significant challenges to securely manage their IT networks, according to a new report from Tanium.
The best way to prevent scripting attacks, such as those that implement Python back doors or compromise PowerShell, is to implement identity-based zero trust. In a zero trust environment, IT treats the internal network as if it were the public internet, a place where nothing can be trusted, and anything can be a threat.
