The cybersecurity skills crisis continues to worsen for the fourth year in a row and has impacted nearly three quarters (70 percent) of organizations, as revealed in the fourth annual global study of cybersecurity professionals by the Information Systems Security Association (ISSA) and independent industry analyst firm Enterprise Strategy Group (ESG).

The US Senate passed a bipartisan amendment to the FY 2021 National Defense Authorization Act (NDAA) to require the Department of Homeland Security to establish a Cybersecurity State Coordinator position in every state.

Obstacles including budget concerns, time constraints, stubborn company culture, or a lack of cybersecurity best practices can seem overwhelming, especially to a smaller organization with limited resources. Fortunately, there are reasonable solutions to each of these roadblocks that can help all organizations be more secure.

The number of devices connected to the internet is expected to reach 50 billion worldwide by the end of 2030, posing dangerous risks to people, businesses and critical systems.

The number of records exposed for Q1 2020 skyrocketed to 8.4 billion –  a 273 percent increase compared to Q1 2019. 

Preventing identity-based attacks such as account takeover (ATO) fraud and Business Email Compromise (BEC) begins with securing your personally identifiable information (PII), but this seems to be increasingly difficult as cybercriminals continue to evolve.

The number of new identity records and the depth of personal information available in exfiltrated data are expanding, creating a blueprint of digital identities that threat actors can weaponize and expose identity information.

New KnowBe4 study, The Rise of Security Culture, finds that the majority of security leaders (94 percent) say security culture is important for business success, but have yet to merge their security strategies with their overall business strategies.

Threat actors are selling more than 309 million Facebook profiles for $623 on dark web sites and hacker forums. 

Risk remains the top concern for organizations adopting software-as-a-service (SaaS) models and this is an issue that is only getting worse. What is needed today is the ability to remove the dependency on human behavior and human error, bringing control back to the security team.