IT Governance

OCTOBER 26, 2021

This Sunday is both Halloween and the end of National Cyber Security Awareness Month – and what better way to mark the occasion than with some cyber security horror stories? In this blog, we look at three ways in which fraudsters trick victims into handing over their sensitive data. Who’s behind the mask?

Phishing 145

Phishing Security Ransomware Security awareness 145

IT Governance

NOVEMBER 28, 2023

A DORA Regulation overview – part 2: incident management Cliff Martin is the head of cyber incident response within GRCI Law. He joined the Group in April 2021, bringing experience from the defence industry, where he dealt with both operational technology and IT complexities. Could you share some statistics on this trend?

Risk 52

Risk Compliance Government Security 52

IT Governance

MARCH 26, 2020

One area you might not have considered is how to maintain compliance with the GDPR (General Data Protection Regulation) and UK DPA (Data Protection Act) 2018. The ICO (Information Commissioner’s Office) has published a handy guide to what you need to know about data protection during the pandemic.

GDPR 93

GDPR Compliance Phishing Risk 93

IT Governance

FEBRUARY 27, 2020

Technological defences and staff training are two of the most frequently touted measures for preventing data breaches, but their effectiveness is dependent on the way organisations implement them. That means creating a detailed cyber security policy. What is a cyber security policy? How data will be backed up.

Security 96

Security Passwords Access Risk 96

IT Governance

APRIL 29, 2020

But before you get too excited, remember that we’ve not yet met the requirements that would allow the government to relax its rules. You can’t argue with that if you think our health should be our top priority, but keeping the status quo will of course continue to affect our jobs, our organisational security and our wellbeing.

Security 84

Security Phishing Communications Government 84

IT Governance

OCTOBER 23, 2018

There is no escaping the threat of data breaches. Organisations are being warned about data breaches in the media, regulators are demanding improved information security and the public is getting more vocal when organisations make mistakes. Data backups are like toilet plungers: you never need them until suddenly you do.

Data breaches 102

Data breaches Security Phishing Information Security 102

eSecurity Planet

APRIL 20, 2023

Vulnerability assessment is the process of finding and analyzing gaps or weaknesses in a network, application, or organization’s IT and security systems. 8 Types of Vulnerability Assessments To obtain a thorough vulnerability assessment of an organization’s security systems and networks, security teams need to test a range of systems.

Cloud 80

Cloud Data breaches Risk Security 80

IBM Big Data Hub

JULY 7, 2023

Threats to your data are virtually everywhere these days, and too often, data compromises seem almost inevitable. But with a proactive approach to data security, organizations can fight back against the seemingly endless waves of threats. Data breaches can be disastrous for organizations.

Security 40

Security Data breaches Data Privacy Compliance 40

ForAllSecure

MAY 17, 2023

Chris Gray of Deep Watch talks about the view from the inside of a virtual SOC, the ability to see threats against a large number of SMB organizations, and the changes to cyber insurance we’re seeing as a result. So they’re often unprepared when a nation state APT choses to focus on them. The same model happens.

Insurance 40

Insurance Privacy Ransomware GDPR 40

Adam Levin

NOVEMBER 17, 2020

According to Adobe Analytics’ recent holiday forecast , online sales are projected to surge 33% year over year to a record $189 billion as “Cyber-week turns to Cyber-months” amid the ongoing COVID-19 pandemic. So, whether you plan to shop on the web or a brick and mortar store, extra vigilance is warranted. Update your browsers.

Retail 97

Retail e-Delivery Passwords Phishing 97

KnowBe4

APRIL 4, 2023

It's not every day you hear about a purely social engineering-based scam taking place that is looking to run away with tens of millions of dollars. But, according to security researchers at Abnormal Security, cybercriminals are becoming brazen and are taking their shots at very large prizes.

Phishing 76

Phishing Security awareness Cybersecurity Education 76

IT Governance

FEBRUARY 11, 2019

When you’re that hopeless at creating login credentials, there’s not much a VPN can do to help. There are tens of millions of people who use even worse passwords, such as ‘Password’ or ‘123456’. There are tens of millions of people who use even worse passwords, such as ‘Password’ or ‘123456’. The man’s password?

Authentication 78

Authentication Passwords Phishing Access 78

ForAllSecure

APRIL 4, 2023

James Campbell, CEO of Cado Security , shares his experience with traditional incident response, and how the cloud, with its elastic structure, able to spin up and spin down instances, is changing incident response. There’s been a major data breach, and you’re booked on the next night flight out, at 6am.

Cloud 40

Cloud Government Access IT 40

Schneier on Security

NOVEMBER 8, 2017

Hearing on "Securing Consumers' Credit Data in the Age of Digital Commerce". Subcommittee on Digital Commerce and Consumer Protection. Mister Chairman and Members of the Committee, thank you for the opportunity to testify today concerning the security of credit data. Before the. 1 November 2017.

Personal data 83

Personal data Computer and Electronics Privacy Data breaches 83

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? Welcome to the hacker by original podcast from for all secure, it's about challenging our expectations about the people who hack for a living.

IoT 52

IoT Communications Security IT 52

ForAllSecure

APRIL 22, 2021

It seems everything smart is hackable, with IoT startups sometimes repeating security mistakes first made decades ago. How then does one start securing it? Welcome to the hacker by original podcast from for all secure, it's about challenging our expectations about the people who hack for a living.

IoT 52

IoT Communications Security IT 52

ForAllSecure

MARCH 14, 2022

Can you hack an airplane? Turns out that you can. That’s why the Aerospace Village at DEF CON exists, to expose various groups of people to each other, and to collectively start to work on solving these problems before they negatively impact our lives. A satellite in orbit?

Computer and Electronics 52

Computer and Electronics Government Communications Cybersecurity 52

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Encryption 52

Encryption Artificial Intelligence Marketing Security 52

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Encryption 52

Encryption Artificial Intelligence Marketing Security 52

eSecurity Planet

DECEMBER 9, 2021

We make IT, security, or any business decision by weighing the risks and the rewards. Or as is often the case with security, what costs can we skip and still escape big penalties later? Unfortunately for those of us indulging in wishful thinking, the likelihood and costs of data breaches continue to increase.

Insurance 116

Insurance Ransomware Data breaches Cloud 116

ForAllSecure

AUGUST 30, 2022

What if you could simulate an ongoing attack to test your teams’ readiness? You can with a cyber range. SimSpace, a cyber range company, joins The Hacker Mind podcast to explain how using both live Red Teams and automated cyber ranges can keep your organization ahead of the attackers. Well, you can.

Military 40

Military Energy and Utilities Government IT 40

ForAllSecure

JANUARY 15, 2021

And what parallels might infosec learn from COVID-19? I suppose such things happen, but what I remember was her telling her surprise when the system booted up and the Windows 95 splash screen came up … wait, what? Using older software within your own software always carries risk. What if they don’t? Then nothing.

IT 52

IT Manufacturing Government Paper 52

ForAllSecure

JANUARY 15, 2021

And what parallels might infosec learn from COVID-19? I suppose such things happen, but what I remember was her telling her surprise when the system booted up and the Windows 95 splash screen came up … wait, what? Using older software within your own software always carries risk. What if they don’t? Then nothing.

IT 52

IT Manufacturing Government Paper 52

ForAllSecure

MARCH 8, 2023

When I was a kid, I really wanted to direct motion pictures. I wanted to both write and direct, having no idea how to get from my humble home to Hollywood. I did get a film degree in college, along with an English degree, but after college, well, knowing how the sausage was made, I wasn’t keen on going to Hollywood.

Cloud 40

Cloud Marketing IT Security 40

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Encryption 52

Encryption Artificial Intelligence Marketing Security 52

CGI

AUGUST 11, 2015

Cyber dashboards demonstrate value to executives. Organizations can spend a lot of money on cybersecurity, where the people, processes and tools all need to work together. Cyber threats are constantly changing, which means toolsets are changing as well, and cyber professionals need constant training. But why is this?

Education 40

Education Cybersecurity Data breaches Phishing 40

eSecurity Planet

DECEMBER 19, 2023

After receiving input from industry experts and doing my own analysis of the year’s driving forces, I identified five major cybersecurity trends. Government actions will increase: Expect more government regulations, state-sponsored cyberattacks, and increased documentation required to protect CISOs.

Cybersecurity 136

Cybersecurity Cloud Ransomware Risk 136

eDiscovery Daily

SEPTEMBER 30, 2018

If you’re in the Chicago area, you can still make it for nearly all of the conference or attend on a one-day pass. Do you ever get that nagging feeling that there’s not much else you can do to advance your career? You will hear stories and sage advice on things that you can start doing TODAY to bust through and succeed.

e-Discovery 47

e-Discovery Education Computer and Electronics Privacy 47

eSecurity Planet

OCTOBER 5, 2021

But even when passwords are secure, it’s not enough. Recently, hackers leaked 87,000 Fortinet VPN passwords , mostly from companies who hadn’t yet patched a two-year-old vulnerability. Where to look when MFA isn’t enough. Initially, security vendors only offered two-factor authentication. Something you have.

Authentication 94

Authentication Passwords Access Computer and Electronics 94

KnowBe4

APRIL 25, 2023

Well Stanford created a small virtual world with 25 ChatGPT-powered "people." This article prompted me to buy the new black XL T-shirt you see in the blog. Some people call them "recursive" agents because they run in a loop, asking the LLM questions, each one based on the result of the last, until the model produces a full answer.

Insurance 67

Insurance Security awareness Phishing Ransomware 67

eDiscovery Daily

OCTOBER 21, 2019

If you’re in the Chicago area, you can still make it for nearly all of the conference or attend on a one-day pass. This panel discussion will feature a speaker from the EDRM, a speaker from Relativity, and one or two industry leaders. .; e-Discovery Disasters and How to Avoid Them: Don’t Let This Happen to You.

e-Discovery 45

e-Discovery e-Delivery GDPR Education 45

eSecurity Planet

APRIL 6, 2023

Ransomware is a type of malicious program, or malware, that encrypts files, documents and images on a computer or server so that users cannot access the data. Ransomware is the most feared cybersecurity threat and with good reason: Its ability to cripple organizations by locking their data is a threat like no other.

Ransomware 88

Ransomware Encryption Cybersecurity Risk 88

ForAllSecure

NOVEMBER 18, 2021

IIain Paterson and Justin Macorin join The Hacker Mind podcast to share insights from their SecTor 2021 talk on hacking behavioral biometrics. The researchers predict that soon it'll be hard to tell a human user at the keyboard, or at the mouse, from a bot or AI-driven entity. And in a moment you’ll hear what they have to say.

Authentication 52

Authentication Passwords Artificial Intelligence IT 52

KnowBe4

APRIL 18, 2023

CyberheistNews Vol 13 #16 | April 18th, 2023 [Finger on the Pulse]: How Phishers Leverage Recent AI Buzz Curiosity leads people to suspend their better judgment as a new campaign of credential theft exploits a person's excitement about the newest AI systems not yet available to the general public. With PhishER you can: NEW!

Phishing 84

Phishing Security awareness Passwords Risk 84

KnowBe4

JULY 5, 2023

But I don't think an attack of such magnitude as the one identified by security researchers at Internet security monitoring vendor Bolster. This latest impersonation campaign makes the case for ensuring users are vigilant when interacting with the web – something accomplished through continual Security Awareness Training.

Phishing 73

Phishing Security awareness Passwords Computer and Electronics 73

ForAllSecure

JANUARY 19, 2022

Passwords are everywhere, but they probably weren't intended to be used as much as they are today. Is there something more secure? Either they’re too weak -- and therefore trivial to guess--, or we reuse them, which means an attacker can use them to gain access to multiple sites. I’m glad you have that.

Passwords 52

Passwords Authentication Access Data breaches 52

The Last Watchdog

AUGUST 25, 2020

Overnight, this supplier was forced to make the switch to 90 percent of its employees working from home. As jarring as this abrupt shift to remote work has been for countless companies, government agencies and educational institutions, it has conversely been a huge boon for cyber criminals. Threat actors haven’t missed a beat.

Risk 134

Risk Cloud Analytics Security 134