Zero Trust model creator John Kindervag puts it like this: “The point of Zero Trust is not to make networks, clouds, or endpoints more trusted; it's to eliminate the concept of trust from digital systems altogether.” He came up with the model in 2010, at a time when many businesses were just beginning to put foundational cybersecurity controls in place and over-relied on the assumed security inside their enterprise-owned network boundaries.
A new US Government Accountability Office (GAO) study found two-thirds of school districts had facilities with physical barriers that may limit access to students with disabilities.
Lawmakers of the state of New York have passed legislation to pause the use of facial recognition technology in schools until 2022. The moratorium was introduced by State Senator Brian Kavanagh (D-Manhattan and Brooklyn) and Assemblymember Monica Wallace (D-Lancaster).
Navy Vice Adm. Nancy A. Norton, the director of Defense Information Systems Agency (DISA) and commander of Joint Force Headquarters-Department of Defense Information Network, outlined the way ahead for a cybersecurity paradigm shift that will help the U.S. military maintain information superiority on the digital battlefield.
A new Rapid7 research found that the security of the internet overall is improving. The number of insecure services such as SMB, Telnet, rsync, and the core email protocols, decreased from the levels seen in 2019. However, vulnerabilities and exposures still plague the modern internet even with the increasing adoption of more secure alternatives to insecure protocols, like Secure Shell (SSH) and DNS-over-TLS (DoT).
The Cybersecurity and Infrastructure Agency (CISA) and the National Security Agency (NSA) have issued an activity alert due to the recent malicious cyber activity against critical infrastructure (CI) by exploiting internet-accessible operational technology (OT) assets.
With telecommuting here to stay, now is the perfect time to re-examine just how much network access you are giving your users and machines. You might be shocked to see how open your network really is. Most organizations allow more access than their users or machines will ever need or should ever have – this excessive trust is what allows attackers who get into the network to spread and cause a lot of damage.
Despite intentions of returning to onsite operations in 2020, many employees remain concerned about their organization’s plans to ensure their health and safety. In June 2020, Traction Guest did a two-part survey consisting of 300 employees and 300 enterprise risk management, physical security and facilities management professionals in companies with at least 1,000 employees.
Brian W. Lynch, a former FBI and Vanguard executive with leadership experience in security, risk, law enforcement, and anti-terrorism, will become the new Executive Director of Safety and Security at RANE (Risk Assessment Network + Exchange).
Honeypots were the first form of deception technology. IT security researchers started using them in the 1990s, with the intent to deceive malicious actors who had made it onto the network into interacting with a false system. In this way, honeypots could gather and assess the behavior of the malicious actors. They were not created for threat detection. However, things have changed a great deal in the years since honeypots were created – including deception technology.
RSS
