Articles Tagged with ''risk management''

Charles Burns, head of global security and engagement at Uber, opened day two of ISC West with a keynote titled, “How Uber is Scaling Enterprise Risk Management at the Speed of Global Transportation.”

According to new data released by Cybersecurity Insiders, 72% of organizations experienced an increase in endpoint and IoT security incidents in the last year, while 56% anticipate their organization will likely be compromised due to an endpoint or IoT-originated attack with the next 12 months. 

As with any new disruptive innovation, we must strive to strike a balance between risk and reward. While it’s exciting to ponder the possibilities of a world powered by 5G and an constellation of connected things, we must first establish a secure foundation to support these innovations. A software-based, Zero Trust security framework represents our best chance at securing the Edge from the connected things of tomorrow.

On September 1 and 2, DHS Policy’s Targeted Violence and Terrorism Prevention program (TVTP) hosted the 5th Digital Forum on Terrorism Prevention for approximately 60 mostly Atlanta-based civil society leaders. This year’s Forum gave these leaders an opportunity to learn directly from technology and marketing experts on how to combat terrorist use of the internet. Community leaders attended multiple sessions over the two-day Forum, including: “The Threat—Narratives & Recruitment in the Online Space;” “Responses to Terrorism;” “Research, Trends & Data;” “Tech Talk & Toolkit;” and “Online to Offline Interventions & Referrals.”

The Cybersecurity and Infrastructure Security Agency (CISA) and Multi-State Information Sharing and Analysis Center (MS-ISAC) are releasing a joint Ransomware Guide meant to be a one-stop resource for stakeholders on how to be proactive and prevent these attacks from happening and also a detailed approach on how to respond to an attack and best resolve the cyber incident. CISA and MS-ISAC observed there are vast products and resources available, but very few that have them all in one place.

How does Uber's Global Security team ensure top-notch safety and security programs that enable global ride-hailing?

ESET researchers uncovered a new APT group that has been stealing sensitive documents from several governments in Eastern Europe and the Balkans since 2011. Named XDSpy by ESET, the APT group has gone largely undetected for nine years, which is rare. The espionage group has compromised many government agencies and private companies. The findings were presented today at the VB2020 localhost conference.

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) is issuing an advisory to alert companies that engage with victims of ransomware attacks of the potential sanctions risks for facilitating ransomware payments. This advisory highlights OFAC’s designations of malicious cyber actors and those who facilitate ransomware transactions under its cyber-related sanctions program.