Building a cyber-resilient enterprise informed by threat intelligence is not an easy task. Risks and requirements are often as unique and diverse as organizations themselves. Determining factors like industry, size, and market contribute to one simple truth: a one-size-fits-all approach to incorporating threat intelligence does not exist. Some invariants, however, do remain; successful threat intelligence programs must staff the right people in the right positions. Below, I’ll introduce four core threat intelligence focuses to consider as businesses plan and allocate budgets for 2021:
Only with the widespread adoption of new technologies and systems will the country see long-term public safety success. With this fast-moving dynamic, not every new technology is ready for the challenges presented by a pandemic, and for many organizations it’s now about balancing effectiveness with timeliness, and diligence without panic.
Deepfakes, either as videos or audio recordings, are the next iteration of advanced impersonation techniques that bad actors can use to abuse trust and manipulate people into complying with their requests.
Organizations' migration to the cloud is a broad term that encompasses many different trends: (1) Moving existing applications from private data centers to AWS, Azure, or the Google Cloud Platform as cloud service providers (CSPs), often referred to as lift-and-shift or infrastructure-as-a-service (IaaS); (2) Completely restructuring how applications are built to make heavier use of prepackaged services available on these cloud service platforms – often referred to as lift-and-reshape, serverless, or platform-as-a-service (PaaS); (3) Choosing to forgo running copies of standard applications instead of having the application vendor host them is sometimes referred to as drop-and-shop or software-as-a-service (SaaS).
Today, securing large venues is a topic enterprise security professionals are grappling with in real-time. Securing these facilities, requires managing occupancy, implementing contact tracing and other solutions, including managing privacy, for the safety of future visitors and fans, but also for the safety and security of venue teams, players and staff.
Spoofed websites are a common avenue for cyberattacks. To better understand the scope of this phenomenon, it’s important for security professionals and organizations to know just how widespread the problem is.
Security alerts are imperative for effectively mitigating and preventing cyberattacks. But, a key challenge of modern threat protection solutions is the sheer number of alerts they generate – leading to “alert fatigue.”
To learn more about the dangers of alert fatigue, we talk to Mark Kedgley, CTO at New Net Technologies (NNT).
While the technical root causes are the same, the impact of an IoT botnet attack on consumer versus enterprise and industrial devices is vastly different. An attack on a consumer gadget could be limited to a privacy issue, whereas the effect of a successful breach on a commercial device can have a significant production or safety cost. That’s why it’s more critical than ever for IT and OT security professionals to understand and be prepared to defend against this growing threat.
Despite the ongoing threat of coronavirus, 2020 has been a year of protest. From Minnesota to Belarus, growing social, economic and political change has driven protesters to the streets. However, according to research from the Center of Strategic and International Studies (CSIS), this is no new phenomenom but part of a growing trend. Since 2009, CSIS data shows the number of global mass protests has increased annually by an average of 11.5%.
Veterans have a lot of offer potential security roles and bring many intangibles to the table. Here are some tips that may help guide the hiring conversation and help envision where a veteran can help your company.