Evil_businessman

The rise of the 'super malicious' insider

Humans have always been a weak link in the cybersecurity chain and a new report from DTEX Systems provides evidence that the sudden shift to remote working has directly contributed to an escalation in psychosocial human behaviors that create organizational risk.

In particular it notes the rise of 'super malicious' insiders, who accounted for 32 percent of malicious insider incidents investigated by the DTEX Insider Intelligence and Investigations (I3) team in 2021.

By Ian Barker -
Serious businessmen work together on project

Cybersecurity and the art of persuasion [Q&A]

Despite the introduction of systems based on AI and other technologies, cybersecurity remains an ultimately human problem.

It's not just a problem for IT teams either, to keep the enterprise safe security needs to be taken seriously throughout the organisation. It's the role of the CISO to ensure this but it can be a challenge to implement.

By Ian Barker -
generation gap

Cybersecurity and the generation gap

As baby boomers reach retirement age, younger people are taking their place in the workforce. But does this lead to a loss of skills that aren't being replaced?

A new study commissioned by Appgate looks at how generational differences impact cybersecurity teams and the benefits to be gained from having an inter-generational mix of staff.

By Ian Barker -
ransomware laptop

Half of global ransomware attacks target the US

Last year 48 percent of ransomware attacks were directed at targets in the United States, with industrial and energy, retail, and finance businesses among the most threatened.

Research from AtlasVPN finds that out of 2,845 witnessed ransomware attacks worldwide in 2021 1,352 were launched against targets in the US. Meanwhile one in five attacks were against European countries with France suffering 146 attacks, the UK 139 and Germany 115.

By Ian Barker -
Seal of the US Department of Justice (DOJ)

Complying with the DoJ's Civil Cyber-Fraud Initiative

Under the Department of Justice’s (DoJ) new Civil Cyber-Fraud Initiative, government contractors will be under enhanced accountability for implementing cybersecurity measures and reporting breaches and incidents. The DoJ’s unveiling of the initiative comes in response to criticism of current department security protocols, which have often wavered across the board and permitted cybersecurity-related fraud through a lack of enforcement.

The Civil Cyber-Fraud Initiative will both focus on standardizing cybersecurity procedures for government contractors to follow and curbing cybersecurity-related fraud where companies fail to report cyber incidents.

By Steven Freidkin -
money lock

Cybersecurity budgets set to increase in the next year

A new survey from Kaspersky finds 85 percent of IT decision makers in North America say their cybersecurity budget will increase anywhere up to 50 percent in the next 12 months.

The survey, carried out in October 2021 and targeting 600 IT decision makers in the US and Canada, finds 28 percent of respondents say their company annually invests anywhere from $25K-$50k in cybersecurity.

By Ian Barker -
DevSecOps

What value does Extended Detection and Response (XDR) bring to the cybersecurity market? [Q&A]

As organizations adapt to hybrid working models and modernize business practices, so too must cybersecurity programs.

We talked to Rupesh Chokshi, VP at AT&T Cybersecurity, to discuss key challenges and how XDR is becoming an important framework, helping organizations consolidate and improve security operations across the entire network, from endpoints to the cloud and beyond.

By Ian Barker -
security breach

Software developers at biggest risk of cybersecurity breaches

Software development companies are among the most at risk from breaches, according to new research from cybersecurity firm Foxtech.

The research used cyber risk scores, calculated using publicly available information and an analysis of a wide range of cyber security indicators, as an indicator of how high or low the risk of a potential cybersecurity breach is for a company.

By Ian Barker -
cybersecurity

International Computer Security Day seeks to raise awareness

It seems like a while since we've had a day dedicated to some aspect of the tech world, so if you're looking for something to celebrate in the lull between Thanksgiving and Christmas you'll be pleased to hear that today is International Computer Security Day.

This is designed to create greater awareness of computer security issues and encourage people to secure the personal information stored on their computers.

By Ian Barker -
CISO

Who needs a CISO anyway?

New research from cloud services provider Navisite finds that 45 percent of companies do not employ a Chief Information Security Officer (CISO). However, of this group 58 percent think they should have one.

Only 40 percent of respondents say their cybersecurity strategy was developed by a CISO or member of the security team, with 60 percent relying on other parts of their organization, including IT, executive leadership and compliance.

By Ian Barker -
Healthcare data

Healthcare organizations face increased risk

Healthcare organizations and patients are facing greater risk as an increase in connected devices creates an expanded attack surface according to a new report.

The study from asset management and security platform Armis surveyed 2,000 patients and 400 healthcare IT professionals across the US and shows a disconnect between the concerns of the two groups.

By Ian Barker -
Divided split chasm gulf gap

Divide between IT and OT teams stops businesses having a unified security strategy

A cultural divide between IT and operational technology (OT) teams is preventing organizations from having a unified strategy to protect both environments.

A report from Dragos and the Ponemon Institute shows only 43 percent of organizations have cybersecurity policies and procedures that are aligned with their ICS and OT security objectives.

By Ian Barker -
Lock and money

How to measure the value of cybersecurity [Q&A]

With high profile cyber attacks and data breaches continuing to make the news, security is at the top of the priority list for businesses.

But how do you know that the resources you put into cybersecurity are providing a good return on the investment? We spoke with Oliver Rochford, security evangelist at Securonix to find out.

By Ian Barker -
business-security

Why it's vital to address cybersecurity in the wider context of the business [Q&A]

It's easy to pigeonhole cybersecurity as something for the IT or security team to look after. But a major cyberattack can have a devastating impact on the business as a whole.

It's important, therefore, that security be looked at in the context of the entire enterprise. This also means considering approaches like 'assumed breach' where you accept that sooner or later attackers will succeed in getting into your network.

By Ian Barker -
decentralized network intelligence

New cryptography solution aims for 'cyber herd immunity'

Increased reliance on digital systems and remote workforces has drastically increased the attack surface threatening to compromise organizations.

Encrypting information is part of the solution but is still vulnerable if keys fall into the wrong hands. Now though Australian deep tech cybersecurity start-up Tide Foundation has come up with a decentralized solution that offers the promise of 'cyber herd immunity'.

By Ian Barker -
Load More Articles