What to do in the age of the critical breach

April 25, 2024 at 05:19AM In March 2024, the UK government faced criticism for its response to cyber-espionage attacks by group APT31. The National Cyber Security Centre reported inadequate resilience in critical infrastructure. The upcoming webinar by Tim Phillips and Rubrik CISO Richard Cassidy will address cyber security threats and recovery strategies for organizations. Sign … Read more

FBI: Cybercrime Losses Exceeded $12.5 Billion in 2023

March 7, 2024 at 09:34AM The FBI’s IC3 reported a 10% increase in cybercrime complaints in 2023, totaling over 880,000 in the US with $12.5 billion in losses, a 22% rise from 2022. Phishing dominates complaints, with investment fraud and BEC causing the highest losses. Ransomware affected critical sectors, with LockBit and BlackCat being active … Read more

Passwords are Costing Your Organization Money – How to Minimize Those Costs

March 5, 2024 at 10:56AM Passwords are crucial for security but can also incur significant costs. Forgotten passwords and resets affect productivity, costing organizations time and money. Help desk queries and support staff add to expenses. Weak passwords also pose security risks, leading to data breaches and financial implications. Using MFA, SSO, training employees, and … Read more

How to Prioritize Cybersecurity Spending: A Risk-Based Strategy for the Highest ROI

February 29, 2024 at 07:09AM Staying ahead in cybersecurity is crucial for IT leaders in protecting organizations. The text discusses the impact of data breaches, increasing cybersecurity spending, and maximizing cybersecurity resources. It highlights the importance of a risk-based approach, focusing on external attack surfaces, end user credentials, vulnerability remediation, and threat intelligence to optimize … Read more

Enterprises Worry End Users Will be the Cause of Next Major Breach

February 16, 2024 at 05:04PM The increase in data breaches and cyberattacks has made these incidents more visible than ever. Security professionals are reconsidering their security strategies and investments due to heightened focus. Despite deploying various security tools, many organizations lack confidence in their ability to withstand attacks. The threat landscape is evolving, and the … Read more

Savvy Launches Identity-First Security Offering to Combat Toxic Combinations Driving SaaS Risk

January 17, 2024 at 07:36AM Savvy, a SaaS security platform provider, has introduced Identity-First Security to address risks stemming from identity access management permissions, user behavior, and business context. The offering aims to combat SaaS application-related security risks by providing comprehensive visibility and automated security guardrails to guide users in real time. For more details, … Read more

The biggest cybersecurity and cyberattack stories of 2023

January 2, 2024 at 10:10AM In 2023, cybersecurity saw numerous significant events, including 23andMe suffering a data breach impacting 6.9 million users, major ransomware attacks on Danish hosting providers and DISH Network, and government-sponsored advanced attacks on iOS devices. Notably, GoDaddy’s multi-year breach and widespread data theft using a zero-day vulnerability in MOVEit Transfer were … Read more

10 Years After Yahoo Breach, What’s Changed? (Not Much)

January 2, 2024 at 09:02AM Yahoo experienced the biggest data breaches in history, yet experts caution that after a decade, we have not heeded the lessons from these incidents. Based on the meeting notes, it seems that the discussion highlighted the significant data breaches experienced by Yahoo customers, which were considered some of the largest … Read more

Refocusing on Cybersecurity Essentials in 2024: A Critical Review

December 27, 2023 at 09:24AM In 2023, ransomware attacks and zero-day vulnerabilities in supply chains were the leading cyber threats, prompting the need for organizations to reassess their cybersecurity strategies. Despite increased spending in 2024, concerns about the effectiveness of security investments persist. To enhance security posture, organizations should prioritize data integrity, identity management, and … Read more

Strengthening Resilience: Navigating the Cybersecurity Landscape

December 22, 2023 at 12:07PM Businesses worldwide face a surge in cyber threats, with ransomware attacks increasing by over 1,000% since 2019. Aon’s global survey identifies cyberattacks as the top risk for organizations, leading to a shift in cybersecurity investment in the Middle East. Organizations must prioritize a holistic, proactive approach to cyber resilience, including … Read more