Tenable

DECEMBER 22, 2023

As we bid adieu to 2023, we highlight major trends that impacted cybersecurity professionals in the past 12 months. Learn how the cyber world changed in areas including artificial intelligence, CNAPP, IAM security, government oversight and OT security. Cybersecurity teams were no exception.

Artificial Inteligence 75

Artificial Inteligence Technical Review Cloud Artificial Intelligence 75

Tenable

JANUARY 5, 2024

Want to learn more about protecting AI systems from malicious actors? Plus, new granular configuration recommendations for securing Microsoft 365 are out. 1 - NIST categorizes cyberattacks against AI systems Are you involved with securing the artificial intelligence (AI) tools and systems your organization uses?

Artificial Inteligence 70

Artificial Inteligence Systems Review System Generative AI 70

Palo Alto Networks

APRIL 17, 2024

In the ever-evolving landscape of cybersecurity, the specter of ransomware looms larger than ever before. Once considered merely an IT issue, ransomware has since evolved into a pervasive threat, affecting individuals, businesses and governments alike. Implement enterprise-wide Zero Trust network architecture.

Artificial Intelligence 93

Artificial Intelligence Artificial Inteligence Government Technical Review 93

Tenable

NOVEMBER 24, 2023

Uncle Sam wants your input on the latest version of the “Secure Software Development Attestation Form” that federal agencies will use to assess the security of software vendors. government will evaluate the security practices of its software vendors – and offer your two cents. And much more!

Software Review 70

Software Review Software Insurance Software Development 70

Tenable

DECEMBER 15, 2023

A group that includes the Cloud Security Alliance, CISA and Google is working to compile a comprehensive collection of best practices for secure AI use. Meanwhile, check out a draft of secure configuration recommendations for the Google Workspace suite. Partners include government agencies, such as the U.S.

Groups 71

Groups Industry Hardware Software Review 71

The Crazy Programmer

MARCH 3, 2021

Cybersecurity isn’t something new. Businesses are emphasized to protect their data systems from hackers for decades. Unfortunately, the escalating rate of digitalization that is consuming IT resources across organizations has led to basic network and device hygiene becoming one of the most neglected components of cybersecurity.

Systems Review 147

Systems Review Guidelines Compliance Firewall 147

Tenable

MARCH 8, 2024

Plus, a survey shows how artificial intelligence is impacting cybersecurity jobs. That’s according to ISC2’s survey “AI in Cyber 2024: Is the Cybersecurity Profession Ready?”, based on a poll of 1,123 cybersecurity pros. Source: “AI in Cyber 2024: Is the Cybersecurity Profession Ready?” And much more!

Infrastructure 114

Infrastructure Report Software Review Artificial Intelligence 114

Tenable

DECEMBER 29, 2023

As we reflect on the many accomplishments Tenable OT Security achieved in 2023, one thing is clear: we couldn’t have done it without the support and collaboration of our customers and partners. I can easily say 2023 was a good year for Tenable OT Security. We believe all cyber risk needs to be viewed, ultimately, as operational risk.

Systems Review 71

Systems Review Technical Review Software Review IoT 71

Tenable

MARCH 25, 2020

As COVID-19 drives many government agencies to quickly migrate from a centralized to remote workforce, new cybersecurity questions arise. Here are steps government agencies can take to manage these new cyber risks. . How can we make sure cybersecurity gaps don’t emerge in such an uncertain environment? .

Government 104

Government Systems Review Software Review Technical Review 104

Tenable

DECEMBER 9, 2020

For many global policymakers, the transformative impact of the COVID-19 pandemic has reinforced the need to adopt new cybersecurity and privacy policies. The COVID-19 pandemic and resulting global economic downturn represent new challenges for government security leaders. Here's a look at what we can expect in the year ahead.

Security 98

Security Policies Technical Review Systems Review 98

Tenable

OCTOBER 27, 2023

Check out how organizations’ enthusiasm over generative AI is fueling artificial intelligence adoption for cybersecurity. government’s cyber incident response plan. Also, why boards of directors feel more comfortable with cybersecurity. business and IT pros involved in cybersecurity. And much more!

Artificial Inteligence 63

Artificial Inteligence Artificial Intelligence Technical Review Backup 63

Palo Alto Networks

MARCH 20, 2024

For over 40 years, the President’s National Security Telecommunications Advisory Committee (NSTAC) has demonstrated a long track record of providing forward-looking private sector advice to the President of the United States on the most critical issues at the nexus of technology and national security.

Report 101

Report Artificial Intelligence Artificial Inteligence Telecommunications 101

Tenable

SEPTEMBER 8, 2023

Life is getting harder for cybersecurity pros, but there are ways to improve working conditions. Meanwhile, there’s a new, free attack-emulation tool for OT security teams. government is alerting about exploits to CVE-2022-47966 and CVE-2022-42475. Check out what a study found. Plus, the U.S.

Technical Review 67

Technical Review Systems Review Software Review Survey 67

Tenable

JANUARY 19, 2024

government to critical infrastructure organizations: If the drones you’re using were made in China, be careful. These drones represent a “significant risk” because the data they collect could end up in the hands of the Chinese government, the U.S. Dive into six things that are top of mind for the week ending January 19. The upside?

Infrastructure 71

Infrastructure Malware Government Technical Review 71

Tenable

JUNE 23, 2023

Also, review concrete guidance on cloud system administration and on designing cloud apps with privacy by default. That’s why a recent IANS Research blog post about building an incident response process for ransomware caught our eye. Learn all about the DOJ’s reward for CL0P ransomware leads. And much more!

Cloud 53

Cloud Systems Review Data Disaster Recovery 53

Tenable

FEBRUARY 9, 2024

The Volt Typhoon hacking gang is stealthily breaching critical infrastructure IT environments so it can strike on behalf of the Chinese government, cyber agencies say. critical infrastructure IT and operational technology security teams, listen up. So said cybersecurity agencies from the U.S., Critical Infrastructure. ”

Weak Development Team 66

Weak Development Team Infrastructure Generative AI Artificial Inteligence 66

Tenable

JULY 14, 2023

government for defending CI/CD pipelines. 1 – CISA and NSA issue CI/CD defense guidance Looking for recommendations and best practices to improve the security of your continuous integration / continuous delivery (CI/CD) pipelines? Learn about the guidance from the U.S. Plus, check out the 25 most dangerous software weaknesses.

Weak Development Team 52

Weak Development Team Software Review Software Technical Review 52

Tenable

OCTOBER 4, 2023

Infrastructure Investment and Jobs Act created the State and Local Cybersecurity Grant Program (SLCGP) to help state, local, tribal and territorial (SLTT) governments address an ever-evolving cybersecurity threat landscape. million to SLTT governments. million to SLTT governments.

Programming 63

Programming Meeting How To Government 63

Tenable

DECEMBER 6, 2023

Tenable Research has published two blogs on CitrixBleed, our initial analysis of the vulnerability as well as a Frequently Asked Questions (FAQ) blog providing added context surrounding the in-the-wild exploitation by threat actors including multiple ransomware groups. ransomware group in their exploitation of CitrixBleed.

Systems Review 73

Systems Review Authentication Analysis Malware 73

Tenable

NOVEMBER 25, 2022

Get the latest on the Hive RaaS threat; the importance of metrics and risk analysis; cloud security’s top threats; supply chain security advice for software buyers; and more! . Understanding the Ransomware Ecosystem: From Screen Lockers to Multimillion-Dollar Criminal Enterprise ” (Tenable blog). What would this look like?

Metrics 52

Metrics Cloud Backup Software Review 52

Tenable

NOVEMBER 4, 2022

Get the latest on salary trends for CISOs and cybersecurity pros; CISA’s call for adopting phishing-resistant MFA; the White House’s ransomware summit; and more! and Canada improved this year compared with 2021 as employers paid up to retain their cybersecurity chiefs amidst a shortage of qualified candidates for these jobs.

Trends 102

Trends Authentication Recruiting Banking 102

Tenable

SEPTEMBER 2, 2022

Securing machine learning systems. Shifting security left – meaning, starting security checks earlier in the software development process – has been widely hailed. Most companies expect developers to do security code reviews, but many don’t provide them with security training. And much more!

Security 52

Security Software Review Artificial Inteligence Technical Review 52

Tenable

JANUARY 20, 2023

Plus, NIST mulls major makeover of its Cybersecurity Framework. Also, the struggle to develop secure apps is real. Then check out how Uncle Sam plans to use AI and ML to boost cybersecurity. Almost 70% of organizations' SDLCs are missing critical security processes. Learn all about the spike in CISO job satisfaction.

Software Review 62

Software Review Artificial Inteligence SDLC Technical Review 62

AWS Machine Learning - AI

JANUARY 26, 2024

Many customers are looking for guidance on how to manage security, privacy, and compliance as they develop generative AI applications. We first delve into the vulnerabilities, threats, and risks that arise from the implementation, deployment, and use of LLM solutions, and provide guidance on how to start innovating with security in mind.

Artificial Inteligence 120

Artificial Inteligence Generative AI Security Applications 120

Palo Alto Networks

FEBRUARY 29, 2020

Cyber Canon Book Review: “CISO Compass: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers” by Todd Fitzgerald (published December 3, 2019). Book Reviewed by: Ron Woerner, Bellevue University, Professor. Bottom Line: I recommend this book as a Cybersecurity Canon candidate.

Technical Review 55

Technical Review Systems Review Security Leadership 55

Cloudera

MARCH 3, 2022

Whether the enterprise uses dozens or hundreds of data sources for multi-function analytics, all organizations can run into data governance issues. Bad data governance practices lead to data breaches, lawsuits, and regulatory fines — and no enterprise is immune. . Everyone Fails Data Governance. In 2019, the U.K.’s

Government 96

Government Enterprise Systems Review Data 96

Tenable

FEBRUARY 3, 2023

Also, check out our ad-hoc poll on cloud security. issues framework for secure AI Concerned that makers and users of artificial intelligence (AI) systems – as well as society at large – lack guidance about the risks and dangers associated with these products, the U.S. And much more! 1 - Amid ChatGPT furor, U.S.

ChatGPT 52

ChatGPT Artificial Intelligence Artificial Inteligence Technical Review 52

Tenable

JULY 28, 2023

On July 26, the SEC voted 3-2 to adopt new rules which would require several new cybersecurity disclosures from publicly traded companies. Here’s what cybersecurity leaders need to know. Currently, many public companies provide cybersecurity disclosure to investors. Which companies are affected?

Technical Review 52

Technical Review Systems Review Compliance Report 52

Tenable

AUGUST 5, 2022

That’s the bad news the Cybersecurity and Infrastructure Security Agency’s Cyber Safety Review Board delivered in a recent report. Drive best practices for security hygiene, such as automated vulnerability management, asset inventorying and vulnerability mitigation, as well as secure software development practices.

Development Team Review 52

Development Team Review Software Review Systems Review Technical Review 52

Tenable

OCTOBER 23, 2020

On October 20, the National Security Agency (NSA) published a detailed security advisory to inform defenders about Chinese state-sponsored "cyber actors" exploiting known vulnerabilities. Three of the five vulnerabilities listed in this advisory were also in the NSA alert. Prior Advisories.

Government 94

Government WAN Systems Review Windows 94

Xebia

FEBRUARY 19, 2021

We all know that the hardening of a system or implementing 2FA does not magically improves the security of an organisation. Also for the successful improvement of security in your organisation, a holistic approach is needed. Implementing and improving security demands your approach to cover both people, process and technology.

Agile 130

Agile Culture Technical Review Systems Review 130

Palo Alto Networks

DECEMBER 21, 2020

Palo Alto Networks welcomes the European Commission’s release on 16 December of a set of proposals related to cybersecurity, including a new cybersecurity strategy and a proposal for revision of the Directive on Security of Network and Information Systems ( NIS 2 ).

Artificial Inteligence 96

Artificial Inteligence Policies IoT Analysis 96

Tenable

SEPTEMBER 1, 2023

Moreover, new quantum-resistant algorithms are due next year. 1 – NCSC: Be careful when deploying AI chatbots at work When adopting AI chatbots powered by large language models (LLMs), like ChatGPT, organizations should go slow and make sure they understand these tools’ cybersecurity risks. National Cyber Security Centre.

ChatGPT 62

ChatGPT Artificial Inteligence Tools Malware 62

Tenable

AUGUST 19, 2020

Independent business risk study shows cybersecurity is seldom fully integrated into business strategy – and it needs to be. The first question she asks you is: “How secure are we?” . If you’ve spent more than a minute in cybersecurity, you know why answering this question is far more challenging than it might seem. .

Technical Review 102

Technical Review Study Software Review Systems Review 102

Tenable

AUGUST 26, 2022

26 | The “platformization” of hybrid cloud security. Tackling IT/OT cybersecurity challenges. Tips for complying with HIPAA’s cybersecurity rule. 1 - IDC sees shift to “platformization” of hybrid cloud security. That’s according to IDC’s “Worldwide Cloud Workload Security Forecast, 2022-2026.” . And much more!

Weak Development Team 52

Weak Development Team Software Review Technical Review Budget 52

InfoBest

MAY 25, 2023

In today’s digital landscape, where cyber threats are on the rise, ensuring robust cybersecurity measures in custom software development projects is more important than ever. Why is Cybersecurity Important in Software Development? Maintaining Trust Cybersecurity is critical to maintaining user trust.

Software Development 52

Software Development Software Review Weak Development Team Software 52

Tenable

DECEMBER 2, 2022

Get the latest on Log4Shell’s global remediation status; the need for metaverse security rules; a shutdown of “pig butchering” domains; tips for secure IoT products; an informal poll about AD security; and more! . government advisory on APT exploit of Log4Shell to breach agency. Log4j guidance from the U.S.

IoT 52

IoT Systems Review Guidelines Technical Review 52