Are you blocking “keyboard walk” passwords in your Active Directory?

August 16, 2024 at 12:40PM End users often create weak, easily guessed “keyboard walk” passwords, formed by keys next to each other on the keyboard like ‘qwerty’. Despite appearing secure, they pose a significant security risk and are prevalent in compromised passwords. Organizations can educate users on strong passphrases and use tools like Specops Password … Read more

Cybersecurity Compass: An Integrated Cyber Defense Strategy

August 2, 2024 at 03:20PM The Cybersecurity Compass, initially designed for CISOs, has evolved to benefit various cybersecurity professionals and stakeholders, offering strategic guidance and direction. It employs a metaphorical framework, aiming to fortify organizations against cyber threats and assist in incident response. The shift to a more inclusive approach reflects a broader applicability within … Read more

In Other News: European Banks Put to Test, Voting DDoS Attacks, Tenable Exploring Sale

August 2, 2024 at 10:06AM Cybersecurity news roundup by SecurityWeek covers significant stories this week: attackers bypassing Google’s Workspace email verification, European Central Bank conducting a cyber resilience test, privacy and security risks in location-based dating apps, Meta’s PromptGuard bypassed, Armexa’s Industrial Resiliency Integrated Solution launch, CISA and FBI’s note on DDoS attacks and election … Read more

Cowbell Secures $60 million Series C Funding From Zurich Insurance Group

July 29, 2024 at 05:47PM Cowbell, a cyber insurance provider for small and medium-sized enterprises, has secured a $60 million Series C equity investment from Zurich Insurance Group. This investment will support Cowbell’s expansion in international markets, strengthen cyber resilience services, and enhance partnerships. Zurich’s CEO praised Cowbell’s data-centric approach to cyber risk management and … Read more

Ransomware Has Outsized Impact on Gas, Energy & Utility Firms

July 19, 2024 at 09:06AM Ransomware attacks on critical infrastructure sectors are escalating, with 67% of operators in the oil, energy, and utility sectors affected in 2023. Attacks on these sectors impact an average of 62% of systems and exploit software vulnerabilities as the primary attack vector. Recovery costs continue to rise, emphasizing the urgency … Read more

MxD Research Reveals Major Disconnect Between Perceived and Actual Cybersecurity Capabilities in US Manufacturing

July 17, 2024 at 04:55PM The report from MxD and the National Center for Cybersecurity in Manufacturing highlights the urgent need for the U.S. manufacturing sector to enhance its cybersecurity posture. It reveals that manufacturers are overestimating their capabilities and identifies key areas where additional resources can strengthen cybersecurity infrastructure. The report also emphasizes the … Read more

Top 5 Mistakes Businesses Make When Implementing Zero Trust

July 17, 2024 at 04:40PM The press release highlights the growing trend of organizations adopting Zero Trust architectures in response to evolving cybersecurity threats. It emphasizes the challenges and common mistakes organizations face when implementing these strategies, such as overlooking organizational culture, underestimating human risk, neglecting the supply chain, failing to plan for sustainable success, … Read more

QBE Insurance Launches Global Cyber Coverage With QCyberProtect

July 17, 2024 at 04:10PM QBE Insurance has unveiled QCyberProtect, a comprehensive global cyber policy offering tailored coverage for emerging cyber risks. The policy includes a network of cyber experts and QCyberPrepare, a risk management tool. Currently available in 10 countries, the policy will be launched in more countries. QBE North America, part of QBE … Read more

Don’t be complacent on cybersecurity resilience

July 16, 2024 at 10:26AM The 2024 Cisco Cybersecurity Readiness Index report provides valuable insight into the challenges of protecting sensitive data and applications from cyber threats. The report reveals that only a small percentage of organizations have mature cybersecurity defenses and highlights the need for proactive measures to prevent cyberattacks and minimize potential damage. … Read more

Darktrace Launches Managed Detection & Response Service to Bolster Security Operations

June 11, 2024 at 05:17PM Darktrace has launched its Darktrace Managed Detection & Response (MDR) service, combining its detection and response capabilities with its global analyst team’s expertise to empower customers with effective human-AI collaboration. The service offers expanded hands-on analyst support across various environments, proactive threat containment, and 24/7 managed detection and response. For … Read more