Security Top Stories

RSS

Succession planning is a key component in the architecture of your security workforce.

Some of the most basic tenets of password account management have failed, leaving us with a dreadful combination of poor user experience and inadequate security.

A cybersecurity career can offer transitioning veterans a chance to meaningful employment, and that field is experiencing a remarkable shortfall that presents organizations with a challenge to find trustworthy qualified applicants.

Insurance has long existed as a mechanism for the transferal of risk to a third party, particularly for those risks that fall outside of an organization’s direct control. However, as the threats we face evolve so must the insurance products that we purchase. Recently, the most significant dangers that have come to light and threatened to destroy a company overnight have emerged within the cybersecurity sphere. This has fueled the growing interest and appetite for cyber liability insurance.

As ransomware continues to gain notoriety, cybercriminals are looking for more ways to get the most out of the malware that they develop. Similarly, other bad actors who may lack the necessary skills to develop malware themselves are looking for a way to get in on the action. This has led to an increase in ransomware-as-a-service (RaaS), a practice in which cybercriminals put their ransomware up for sale, where it is purchased and leveraged by other criminals who are technically unable to develop their own variants.

Organizations of every type and size are always looking to make more informed decisions. In order to do better and plan for the changing world, they want to have access to as much information as possible. And, rather than implementing a new information gathering system, many are looking to mine the data already being collected by their physical security systems.

By now, we’ve all heard how the citizens of Hawaii were awoken on Saturday, January 13th with a (thankfully erroneous) alert telling residents to take shelter because of an incoming ballistic missile. While the investigations and government hearings will continue, now that we’re a couple of weeks removed from the event, it’s important to take a step back and use this opportunity to crystallize several mass notification best practices.

It’s a scenario that isn’t hard for security professionals to imagine: Someone spots a drone hovering inside your secure facility’s perimeter, over your event, or during your emergency response operation. The drone’s presence is at best a nuisance, and at worst, might damage people or property, or interfere with your principle mission. What options do you have?