75% of businesses report security as an increasing priority

A report found that 75% of businesses report that security is a growing priority and they are spending more in security related areas than in 2022.

from Cybersecurity News https://ift.tt/fsh5xAI

31% of breaches are being identified later

A report from Gigamon analyzed the difference between how secure an organization perceives itself to be and how secure it actually is.

from Cybersecurity News https://ift.tt/L2S0MsO

Enterprise SIEMs miss 76% of all MITRE ATT&CK techniques used

According to industry analysts, the SIEM continues to be the "operating system of the SOC" and is not going away anytime soon.

from Cybersecurity News https://ift.tt/HxwMcPg

Security leaders discuss NSA guide to mitigate BlackLotus threat

The National Security Agency (NSA) is warning of a known vulnerability in the Microsoft Windows secure startup process that malicious actors could use to bypass Secure Boot protection and execute BlackLotus malware.

from Cybersecurity News https://ift.tt/1LomHdQ

Las Vegas makes cybersecurity updates

Las Vegas is updating its cybersecurity and will switch to a hybrid multi-cloud environment to protect sensitive data and critical infrastructure.

from Cybersecurity News https://ift.tt/mQCXIAM

Financial fraud prevention strategies

Michael Jabbara, Vice President, Head of Global Fraud Services at Visa, covers the evolution of the financial fraud landscape and more in this episode of The Security Podcast.

from Cybersecurity News https://ift.tt/C9sgiFk

CISA releases cloud services guidance and resources

CISA has recently released the first series of final security guidance resources under the organization's Secure Cloud Business Applications (SCuBA) project.

from Cybersecurity News https://ift.tt/GptH5lc

Security leaders say cloud platform misconfiguration is biggest threat

A new survey highlights that security professionals view misconfiguration of cloud platforms or improper setup ranks as the most significant security threat.

from Cybersecurity News https://ift.tt/wLAiHOS

81% of organizations have implemented policies around generative AI

Despite security concerns about generative artificial intelligence, businesses are looking to implement the technology within their organizations.

from Cybersecurity News https://ift.tt/rGpTuv9

Ransomware attacks affect consumer behaviors

Forty percent of consumers are skeptical of organizations' ability to protect their data adequately according to a report by Object First. 

from Cybersecurity News https://ift.tt/is23V1f

Top 10 risky behaviors of employees uncovered

A new infographic reveals the top 10 risky behaviors that employees have engaged in on their work devices.

from Cybersecurity News https://ift.tt/1pPGw23

52% of reported breaches came through third-party partners

According to a report by ForgeRock, identity theft and fraud remains a top concern for security leaders as it leads to large data breaches.

from Cybersecurity News https://ift.tt/2D8IWmQ

Survey shows disconnect in cloud security perception vs. readiness

While many security professionals leverage high-risk practices and behaviors in their cloud environments, they are confident security tools will protect against attacks. 

from Cybersecurity News https://ift.tt/obtSAY7

John Hopkins University suffers data breach

Johns Hopkins University and Johns Hopkins Health System suffered a cyberattack that may have impacted sensitive personal and financial information.

from Cybersecurity News https://ift.tt/mrwKFGX

40% of IT workers admit to working 50 hour weeks consecutively

IT leaders were surveyed by Kaseya about IT operations and management. Forty-five percent of respondents prioritize the improvement of IT security.

from Cybersecurity News https://ift.tt/3NXsKBO

87% of web-based businesses faced two or more threats at the same time

According to a report, 45.127 billion web application attacks were detected and blocked throughout 2022, an increase of 96.35% compared to 2021.

from Cybersecurity News https://ift.tt/N2BZYGU

Report: 15% of law firms feel they have security gaps

Recent research reveals that around 15% of law firms felt they had security gaps, while more than double that number have endured some form of breach. 

from Cybersecurity News https://ift.tt/cBGKj3t

14% of CISOs have desired traits for cyber expert board positions

New research has revealed that 14% of CISOs have the desired traits for cyber expert board positions. 

from Cybersecurity News https://ift.tt/xB7URtK

DOJ announces new cyber unit to prosecute nation-state threat actors

The Justice Department recently announced the creation of the new National Security Cyber Section — known as NatSec Cyber — within its National Security Division. 

from Cybersecurity News https://ift.tt/2UFLgDw

63% of IT leaders measure IT success by reduced risk

A recent survey looks at the biggest challenges facing IT leaders of large organizations and their approach to modernizing their IT department. 

from Cybersecurity News https://ift.tt/fR9G1vt

92% of survey respondents are concerned about compromised credentials

IT and cybersecurity professionals were surveyed on passwordless authentication and how it would impact their organizations' credential security.

from Cybersecurity News https://ift.tt/EKws2xm

36% of government IT does not have a documented disaster recovery plan

The experience and habits of IT departments when it comes to ransomware and data recovery were analyzed in a recent report by Arcserve. 

from Cybersecurity News https://ift.tt/pJnIbAm

Digital-first economy introduces unforeseen risks for 89% of CISOs

A new survey shows CISOs struggle to cost justify security investments despite known security gaps, face increasing personal risks, and worry about the rapid adoption of AI.

from Cybersecurity News https://ift.tt/gs23XEC

Philadelphia healthcare facility suffers ransomware attack

Philadelphia healthcare facility Vincera has issued a notice following a ransomware attack in April of 2023 that compromised patient data.

from Cybersecurity News https://ift.tt/IxqSTpd

Untrained users are biggest flaw in organizations cyber defense layer

A recent report reveals that 33.1% of employees are likely to click on a suspicious link or comply with a fraudulent request. 

from Cybersecurity News https://ift.tt/M6qvFo8

Vulnerable information is discovered within minutes by cybercriminals

Cybercriminal habits were analyzed in a recent report by Orca Security that reveals that attackers typically find exposed secrets in two minutes.

from Cybersecurity News https://ift.tt/QS6bW4t

Illinois hospital attributes closure to ransomware attack

In what seems to be the first announcement of its kind, two rural healthcare facilities closed last week citing a ransomware attack as part of the reasons why.

from Cybersecurity News https://ift.tt/qp5KUmS

Security leaders discuss the spread of MOVEIt vulnerability

It has been several weeks since the MOVEit vulnerability began making headlines, but the span of organizations and governmental entities being affected by related data breaches have continued to grow. 

from Cybersecurity News https://ift.tt/mPyWzHT

Louisiana Office of Motor Vehicles suffers data breach

The Office of Motor Vehicles (OMV) in Louisiana suffered a MOVEit data breach. MOVEit is a third party data transfer service used to send large files.

from Cybersecurity News https://ift.tt/xnUsVcu

Howell named Georgia Tech interim VP for Information Technology CIO

Leo Howell, CISO at Georgia Tech, has been selected interim Vice President for Information Technology and Chief Information Officer for the Institute. 

from Cybersecurity News https://ift.tt/9lStB5o

FTC charges genetic testing organization for privacy concerns

Genetic testing firm 1Health has been charged by the Federal Trade Commission (FTC) for leaving personal genetic and health data unsecured. 

from Cybersecurity News https://ift.tt/mS5uQO2

75% of OT organizations had at least 1 intrusion in the last year

A new report shows three-fourths of operational technology organizations reported at least one intrusion in the last year, with 56% from malware and 49% from phishing.

from Cybersecurity News https://ift.tt/XfcQhYm

Public sector application flaws increased in last 12 months

According to research by Veracode, public sector applications tend to have more flaws and vulnerabilities than private sector applications. 

from Cybersecurity News https://ift.tt/zDhgyPZ

Josh Lemos appointed as GitLab Chief Information Security Officer

GitLab Inc., has recently announced the appointment of Josh Lemos as Chief Information Security Officer (CISO).

from Cybersecurity News https://ift.tt/tlhB1yM

42% if IT professionals aren't fully prepared for AI

According to a survey, 42% if IT leaders believe existing IT infrastructure is not fully prepared for the demands of AI, despite widespread adoption.

from Cybersecurity News https://ift.tt/ld65fGv

Lack of trust reported as top security challenge

Security leader's trust in an organization and their employees' ability to prevent a cyberattack was analyzed in a recent report by Kroll. 

from Cybersecurity News https://ift.tt/wLSJ2d4

Managing MDM threats to protect an organization

This episode of The Security Podcasts focuses on MDM threats and features AJ Nash, VP and Distinguished Fellow of Intelligence at ZeroFox.  

from Cybersecurity News https://ift.tt/VKzbhv5

Hoxhunt names Petri Kuivala as Chief Information Security Officer Advisor

Hoxhunt has announced the appointment of Petri Kuivala as Chief Information Security Officer (CISO) Advisor. 

from Cybersecurity News https://ift.tt/m8ZfMHT

Matt Hillary hired as VP, Security and CISO at Drata

Matt Hillary has been hired as VP, Security and Chief Information Security Officer at Drata. Hillary brings more than 15 years of security experience.

from Cybersecurity News https://ift.tt/3hjPTqO

Report highlights key threats disrupting businesses

A new report highlights the top threats observed in the first half of 2023, and emerging cybersecurity trends impacting the healthcare and financial services industries. 

from Cybersecurity News https://ift.tt/NLy4mtU

47% of organizations struggle with detecting and mitigating threats

A new study reveals 70% of IT leaders in financial services reported a significant increase in data breaches compared to previous years.

from Cybersecurity News https://ift.tt/b5PMVUO

68% of organizations expect employee churn-driven cyber issues in 2023

A new report shows how the tension between difficult economic conditions and the pace of technology innovation influences the growth of identity-led cybersecurity exposure.

from Cybersecurity News https://ift.tt/oAcmDeB

Bank fraud warnings are the most common text scam

According to research by the Federal Trade Commission, the most common form of text message scam reported to the FTC were false bank fraud warnings.

from Cybersecurity News https://ift.tt/cbJ6N7f

Use of multi-factor authentication nearly doubles since 2020

A new report reveals the use of MFA has nearly doubled since 2020 and that phishing-resistant authenticators represent the best choice in terms of security for users.

from Cybersecurity News https://ift.tt/cviVDdG

10% of CISOs and IT professionals manage cybersecurity in-house

Security spending trends and priorities of Chief Information Security Officers (CISOs) and IT professionals were analyzed in a report by Nuspire. 

from Cybersecurity News https://ift.tt/V48dhvm

Brown & Brown, Inc. appoints Barry Hensley as CSO and Rob Burch as CISO

Brown & Brown, Inc. has announced the appointment of Barry Hensley as Chief Security Officer and Rob Burch as Chief Information Security Officer.

from Cybersecurity News https://ift.tt/DGXHK7f

Report: 55% of organizations have experienced a SaaS security incident

A new survey found while the use of cloud services is increasing, the pace of adoption is dependent on the speed of meeting security and operational expectations.

from Cybersecurity News https://ift.tt/n5Oeq9s

48% of security leaders say distributed workforce influences spending

The quick development of artificial intelligence and new technologies has led security leaders to consider how to implement them in cybersecurity.

from Cybersecurity News https://ift.tt/jRub0oy

37% of IT professionals report experiencing a data loss event

Best practices for data protection were analyzed in a report finding that 25% of IT professionals follow industry best practices for backing up data.

from Cybersecurity News https://ift.tt/InAc8St

FTC charges Amazon for keeping children's voice recordings

Amazon will be required to overhaul how it deletes data and implement new privacy guidelines following FTC and Department of Justice charges.

from Cybersecurity News https://ift.tt/ZQq3GTR

BBC and other organizations targeted in recent MOVEit vulnerability

Organizations from around the world, including the BBC and British Airways, have been warned that stolen data will be published if demands aren’t met in a recent hack.

from Cybersecurity News https://ift.tt/1Pw7Hye

82% of security leaders believe cloud automation critical

A recent survey from NetApp looks at how IT decision makers feel about the ways their organizations are working to optimize their environments.

from Cybersecurity News https://ift.tt/tdTKBcD

Security leaders expected to expand threat management budgets

To better navigate emerging risks and the current threat landscape, security leaders are expanding cybersecurity budgets to protect organizations. 

from Cybersecurity News https://ift.tt/Qdn1uXz

Verizon 2023 Data Breach Report shows rising cost of ransomware

A new report reveals ransomware remains one of the top cyberattack methods making up 24% of all breaches.

from Cybersecurity News https://ift.tt/J8S4Fud

57% of financial organizations use multiple cloud service providers

Cloud adoption continues to increase within the financial services sector with the majority reporting that they're using some form of cloud computing.

from Cybersecurity News https://ift.tt/7q0xYbG

What security leaders can learn from Smashing Pumpkins hacker attack

While stealing music from a band might not be equal to obtaining and releasing customer personal information, there are still lessons to learn from this incident.

from Cybersecurity News https://ift.tt/ZAWtFCj

Security leaders plan for changing IT roles

IT professionals find themselves in hybrid roles that combine traditional development with tasks formerly associated with operations professionals.

from Cybersecurity News https://ift.tt/1X4DoFE

66% of organizations have increased their investment in SaaS apps

According to a survey, 58% of organizations estimate their current SaaS security solutions only cover 50% or less of their SaaS applications.

from Cybersecurity News https://ift.tt/DT2NeEn

90% of CISOs say certifications improved security confidence

According to a report focusing on Chief Information Security Officer (CISO) perspectives, 50% identified cloud security as their top concern. 

from Cybersecurity News https://ift.tt/5EANdP9

Report: Advanced phishing attacks grew 356% in 2022

A new report analyzed the most prevalent cyberattack trends and identified an 87% increase in the total number of attacks over the course of last year.

from Cybersecurity News https://ift.tt/SwmIgjv

Maria Milosavljevic named next CISO at ANZ

ANZ announced Maria Milosavljevic has been appointed CISO, replacing Lynwen Connick, who will retire in October after six years as ANZ’s CISO.

from Cybersecurity News https://ift.tt/JwFu9Vy

FTC: Ring failed to stop hackers from accessing users' cameras

Under the proposed FTC order, Ring is prohibited from profiting from unlawfully accessing consumers videos and must pay $5.8 million in consumer refunds.

from Cybersecurity News https://ift.tt/PdDwO61

7,500 fraudulent pharmaceutical listings were taken down in 2022

Pharmaceutical fraud targeting patients and organizations was targeted in a recent report by BrandShield and the Pharmaceutical Security Institute. 

from Cybersecurity News https://ift.tt/1uwvS9m

How organizations can protect against phishing campaigns

With cybersecurity threats on the rise, there are two crucial steps an organization can take to avoid falling victim to a credential phishing attack.

from Cybersecurity News https://ift.tt/wxtkCWA