Fortifying the Weakest Link: How to Safeguard Against Supply Chain Cyberattacks

September 26, 2024 at 07:55AM Cybercriminals are exploiting vulnerabilities in widely-used IT and security tools, leading to major security incidents. Recent examples include attacks on Ivanti enterprise VPNs, TeamCity, and Fortra GoAnywhere MFT. These incidents underscore the importance of safeguarding against supply chain cyberattacks. Strategies to mitigate these risks include advanced supplier risk management, securing … Read more

Will Smaller Companies Buckle Under the SEC’s New Requirements?

July 12, 2024 at 10:13AM The SEC’s new incident reporting requirements are raising concerns among security professionals and government bodies. Arguments include duplication of existing legislation, challenges in early disclosure of breach information, and the burden on smaller companies. Small organizations can mitigate the impact by familiarizing themselves with major security frameworks and building a … Read more

Tips for Securing the Software Supply Chain

April 9, 2024 at 01:52PM Software supply chain attacks are a growing concern for CISOs due to their ease of execution and high payoff for attackers, posing significant risks to organizations. These attacks, whether widely known or obscure, create considerable risk and require comprehensive security strategies. Experts recommend managing vendor risk, implementing security frameworks, software … Read more