CIO

JANUARY 9, 2024

Achieving and sustaining compliance with the Payment Card Industry Data Security Standard (PCI DSS) is a daunting challenge for hotels because they handle many complex payment business cases. For example, consider the numerous new booking options and services to improve the customer’s experience during the reservation process and their stay.

Hotels 264

Hotels Technical Review Compliance Systems Review 264

CIO

OCTOBER 26, 2022

Digitalization is a double-edged sword for banks, especially when it comes to security. As interactions and transactions become more interconnected, even the simplest processes like opening a new account or making a balance transfer become riddled with security concerns. Avaya’s research report reveals three critical ways to do so.

Authentication 246

Authentication Banking Data Software Review 246

Tenable

JANUARY 26, 2024

1 - Using AI securely: Global cyber agencies publish new guide Is your organization – like many others – aggressively adopting artificial intelligence to boost operational efficiency? If so, you might want to check out a new guide published this week about how businesses can use AI securely.

Artificial Inteligence 115

Artificial Inteligence Artificial Intelligence Weak Development Team Technical Advisors 115

Tenable

APRIL 12, 2024

Plus, a new survey shows cybersecurity pros are guardedly optimistic about AI. And the NSA is sharing best practices for data security. Cybersecurity and Infrastructure Security Agency (CISA) in its Emergency Directive 24-02 , sent to federal civilian agencies last week and made public this week. And much more!

Generative AI 116

Generative AI Malware Trends Government 116

Xebia

NOVEMBER 14, 2023

Security should be considered from the initial stages of designing a product rather than as an afterthought. Security requirements may vary depending on the use case; for instance, a banking solution would have different security needs compared to a solution for a local bakery. Initially, it was TLS 1.0,

Azure 162

Azure Authentication Systems Review Policies 162

TechCrunch

MAY 30, 2021

Oren Yunger is an investor at GGV Capital , where he leads the cybersecurity vertical and drives investments in enterprise IT, data infrastructure, and developer tools. He was previously chief information security officer at a SaaS company and a public financial institution. Oren Yunger. Contributor. Share on Twitter.

Security 345

Security Compliance Weak Development Team Enterprise 345

Palo Alto Networks

FEBRUARY 7, 2024

{{interview_audio_title}} 00:00 00:00 Volume Slider 10s 10s 10s 10s Seek Slider “AI’s Impact in Cybersecurity” is a blog series based on interviews with a variety of experts at Palo Alto Networks and Unit 42 with roles in AI research, product management, consulting, engineering and more. Chris shared an intriguing example: password theft.

Artificial Inteligence 109

Artificial Inteligence Artificial Intelligence Analysis Fashion 109

CIO

OCTOBER 20, 2022

In fact, CIO has reported that it takes only a few minutes for experienced hackers to set up a social engineering attack against enterprises (and their managed service providers) that consider themselves to be secure and protected. What methods are cybersecurity experts using to minimize the impact of these attacks? Let’s dig deeper.

Security 352

Security VOIP Malware Banking 352

Tenable

MARCH 8, 2024

Plus, a survey shows how artificial intelligence is impacting cybersecurity jobs. An example: When the FBI recently infiltrated the Hive ransomware group’s infrastructure, it found that only about 20% of Hive's victims had filed a law enforcement report. based on a poll of 1,123 cybersecurity pros. And much more!

Infrastructure 115

Infrastructure Report Software Review Artificial Intelligence 115

TechCrunch

OCTOBER 13, 2022

Now, cybersecurity startup Nudge Security is emerging from stealth to help organizations tackle what they think is the biggest cybersecurity weakness: people. For example, if an employee downloads Dropbox but the organization uses Google Drive, Nudge will start a dialogue to understand why that decision has been made.

Social 212

Social Software Engineering Authentication Engineering 212

CIO

OCTOBER 20, 2023

Cybersecurity has been identity-centric since the first username and password appeared. The locked office door separated business assets from the rest of the world, making it the unsung cybersecurity hero in this early era. Today, we can’t rely on deadbolts to do the heavy lifting for enterprise security. Do more of the same?

Policies 358

Policies Authentication Enterprise Network 358

Tenable

NOVEMBER 24, 2023

Uncle Sam wants your input on the latest version of the “Secure Software Development Attestation Form” that federal agencies will use to assess the security of software vendors. government will evaluate the security practices of its software vendors – and offer your two cents. In addition, there’s a new zero trust certification.

Software Review 71

Software Review Software Insurance Software Development 71

Tenable

MARCH 1, 2024

Check out what’s new in NIST’s makeover of its Cybersecurity Framework. Also, how to assess the cybersecurity capabilities of a generative AI LLM. 1 - NIST’s Cybersecurity Framework 2.0 1 - NIST’s Cybersecurity Framework 2.0 The Cybersecurity Framework at 10.and And the most prevalent malware in Q4. And much more!

Artificial Inteligence 74

Artificial Inteligence Malware Generative AI Government 74

CIO

JULY 10, 2023

Here are three examples of organizations that have improved their customer experience with a “build-your-own-AI” approach: Bayview Technologies contextualizes CX and cuts handle time in half by blending omnichannel with self-built conversational bots. Traditional identity verification methods like knowledge-based authentication (e.g.

Examples 187

Examples Organization Artificial Intelligence Artificial Inteligence 187

CIO

JANUARY 18, 2024

From employee safety systems to robotics, security cameras and autonomous vehicles, connected devices and applications have become critical to business. Innovations in automation, from the use of autonomous forklifts to drones and high-definition security cameras, require guaranteed bandwidth.

Wireless 306

Wireless Network Transportation Authentication 306

Xebia

JANUARY 18, 2023

When a GitHub Actions workflow needs to read or mutate resources on Google Cloud it must first authenticate to the platform. Not only does this cause a security risk for leaking this key, but it might also be that the creation of this key is blocked by your organization’s policy.

Google Cloud 130

Google Cloud Authentication Cloud Resources 130

CIO

SEPTEMBER 21, 2023

Recent cyberattacks at MGM Resorts and Caesars Entertainment have put the spotlight on cybersecurity practices at casinos – and the importance of educating employees on social engineering tactics. How has the job of a casino security leader changed as games have become digitalized? Read on for his thoughts on AI, zero trust, and more.

Disaster Recovery 279

Disaster Recovery Backup Games Metrics 279

Tenable

SEPTEMBER 15, 2023

Tasked with securing your org’s new AI systems? Plus, open source security experts huddled at a conference this week – find out what they talked about. That’s the topic of the paper “ Securing AI: Similar or Different? published by Google’s Cybersecurity Action Team. ” published by Google’s Cybersecurity Action Team.

Open Source 113

Open Source Systems Review System Software Review 113

Xebia

MAY 15, 2023

This poses a security risk because most of the time these AWS credentials are long-lived credentials with a lot of permissions. Add the permissions you want to role to have, in this example we will use the AWS managed permission ReadOnlyAccess. If these credentials get leaked or misused the damage done could be huge.

AWS 130

AWS Authentication How To Google Cloud 130

CIO

JULY 14, 2022

The proliferation of cyber threats has become so great that earlier this year the Australian government issued the recommendation that organisations “ urgently ” adopt an enhanced cyber security posture. Cyber security attacks are an inevitability that all businesses should now be prepared for.

Conference 246

Conference Case Study Budget Internet 246

CableLabs

JANUARY 23, 2024

Reliable and secure routing is essential for the connectivity of critical communications networks, ensuring that data packets reach their intended destinations without being intercepted, altered or dropped. What Is the Routing Security Profile, and Who Can Use It?

Internet 68

Internet WAN Network Infrastructure 68

Tenable

OCTOBER 6, 2023

A SANS Institute survey found that budgets for ICS/OT security have shrunk, and advises on how to do more with less. In addition, CISA’s Cybersecurity Awareness Month campaign challenges tech vendors to build safer products. For more information about ICS/OT security, check out these Tenable blogs and videos: “ Three U.S.

Budget 65

Budget Report Survey Open Source 65

CIO

JANUARY 19, 2024

Zero trust is a cybersecurity framework that assumes that no user should be automatically trusted. ZTNA improves security by performing user identity and device posture checks before granting the user or device explicit access to any application. ZTNA enables work-from-anywhere (WFA) employees to securely access applications.

Systems Review 274

Systems Review Policies Technical Review Network 274

Tenable

NOVEMBER 30, 2023

Start doing authenticated scanning. Performing authenticated scans of your environment offers essential benefits and is a practice widely recognized as valuable. The scan configurations we observe in Tenable’s SaaS products are telling: our customers run unauthenticated scans 20 times more than authenticated ones.

Authentication 72

Authentication Software Review SMB Systems Review 72

TechCrunch

FEBRUARY 7, 2023

French startup Riot has raised a $12 million Series A round to iterate on its all-in-one cybersecurity awareness platform for businesses and their employees. It now also offers customized educational content that can help grow the cybersecurity culture in your team. The startup originally focused on fake phishing campaigns.

Artificial Inteligence 212

Artificial Inteligence Handbook Authentication Video 212

CIO

AUGUST 8, 2022

Fortunately, innovative and secure digital payment technologies embraced by the travel industry have made it easy for individuals to safely pay for goods and services — no matter where they are in the world. To help boost confidence there are many security tools that organizations can leverage.

Travel 246

Travel Industry Authentication Banking 246

CIO

FEBRUARY 14, 2024

Fundamentals like security, cost control, identity management, container sprawl, data management, and hardware refreshes remain key strategic areas for CIOs to deal with. Data due diligence Generative AI especially has particular implications for data security, Mann says.

Artificial Inteligence 358

Artificial Inteligence Generative AI Software Review Development Team Review 358

CIO

JULY 10, 2023

It can often feel as though trust and authenticity are in short supply these days. This has reinforced concerns around data privacy and security. In the midst of message and content overload, consumers demand personal, in the moment, experiences that feel safe and secure. It is all encrypted.

Retail 246

Retail Storage Generative AI Data 246

CIO

APRIL 29, 2024

Two-factor authentication practices just won’t cut it. AI-based identity management and access control technologies are essential for enhancing cybersecurity measures. For example, a faked vendor’s voice may want to confirm shipments or validate payment instructions. Artificial Intelligence, Security

Games 195

Games Artificial Intelligence Artificial Inteligence Social 195

CIO

JANUARY 4, 2024

In the fast-evolving world of finance, data security is of paramount importance. Financial institutions must ensure the protection of sensitive personal information, most commonly payment card data, to maintain, trust and meet various regulatory requirements. This is where a Common Controls Assessment (CCA) can play a pivotal role.

Compliance 264

Compliance Architecture Resources Authentication 264

Xebia

FEBRUARY 17, 2023

Introduction Welcome to part two of the Application Security Testing series. Like I mentioned in the previous blog, during this blog series we are going to look at the different types of Application Security Testing and Software Composition Analysis. This time we will focus on Dynamic Application Security Testing (DAST).

Applications 130

Applications Testing Authentication How To 130

Xebia

OCTOBER 27, 2022

I keep on finding security issues at IoT vendors cloud services, and that saddens me. That is why I joined Xebia to learn more about cloud security and help IoT vendors to fix security issues with their cloud infrastructure. The default security of our IoT devices are improving. A typical IoT device network. Threat agent.

IoT 130

IoT Cloud Software Review Systems Review 130

Tenable

NOVEMBER 25, 2022

Get the latest on the Hive RaaS threat; the importance of metrics and risk analysis; cloud security’s top threats; supply chain security advice for software buyers; and more! . 2 - CompTIA: Cybersecurity and risk analysis will mesh in 2023. Cybersecurity Measurement (U.S. That’s according to an advisory from the U.S.

Metrics 52

Metrics Cloud Backup Software Review 52

CIO

MARCH 7, 2024

Enterprise AI traffic monitoring: Vigilantly monitor AI activities within the enterprise to identify anomalies or potential security threats and allow for prompt intervention. Firewall capability for AI security: Enhance security measures by providing firewall capabilities to safeguard against potential AI-related vulnerabilities.

Artificial Inteligence 182

Artificial Inteligence Company Firewall Generative AI 182

Palo Alto Networks

AUGUST 2, 2021

As we gear up for a return to school, aligned with the latest COVID-19 guidance to keep students, their parents and teachers healthy, it’s also critical to remember to practice basic cybersecurity hygiene to stay safe online. . This is a security best practice that everyone struggles with. This is a common problem at schools.

Technical Review 98

Technical Review Authentication Education Software Review 98

Tenable

DECEMBER 9, 2022

It was at around this time last year that the discovery of the zero-day Log4Shell vulnerability in the ubiquitous Log4j open source component sent shockwaves through the worlds of IT and cybersecurity. . 2 - OWASP’s top 10 CI/CD security risks. million between July and October. .

Software Review 52

Software Review SMB Malware Development Team Review 52

CIO

DECEMBER 1, 2023

In our rapidly advancing digital era, where our lives seamlessly merge with the vast online realm, the trust we place on websites to safeguard our sensitive data and personal information becomes increasingly critical with every click. The data is transmitted in an encrypted format, making it secure at the transactional points.

Strategy 264

Strategy Malware Backup Authentication 264