Last month’s ASUS APT attack doesn’t come as a surprise to any security-conscious industry watcher – this highlights a long-standing flaw in many software supply chains today. Attackers have been engaged in spoofing websites, stealing credentials and gaining unauthorized access for years. Injecting malicious code into legitimate tools that are designed to protect represents the next evolution in putting companies and their customers at risk.
Both the government and the private sector are scrambling for talent. Thousands of information-security jobs are going unfilled as the industry in the U.S. struggles with a shortage of properly trained professionals. By one estimate, there will be 3.5 million unfilled cybersecurity jobs by 2021.
A recent study found that healthcare organizations are most susceptible to phishing attempts, with employees clicking one in seven simulated emails sent.
With the demand for highly skilled cybersecurity experts growing every day, the University of Guelph will launch a new graduate degree in cybersecurity and threat intelligence to train the next generation on how to stop cyberattacks before they happen.
The Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) has released its new Security of Soft Targets and Crowded Places–Resource Guide. It provides information on a wide range of free capabilities available via CISA that can be incorporated into the security practices of organizations of all sizes, not just soft targets and crowded places.
The Asia-Pacific region led in the number of data compromises investigated in 2017, accounting for 35% of instances and overtaking North America at 30%, down from 43%.
The Health Information Sharing and Analysis Center (H-ISAC) announced that Errol Weiss will become the organization’s first Chief Security Officer (CSO).
