New & Notable
Manage
Help desk deepfakes: Why CISOs must rethink verification
Protecting the help desk from deepfake threats doesn't necessarily mean deploying the latest detection tools. Prioritizing policy over detection can stop deepfakes in their tracks.
News
Max-severity GitLab flaw lets attackers run code on servers
A high-impact GitLab flaw lets unauthenticated attackers run code on self-managed servers. Every release since 2014 is affected.
News
PHP2Shell disclosure unravels after leaks forced early patch drop
Although website shutdowns were inevitable to patch critical PHP flaws, early leaks and a broken embargo turned routine maintenance into an emergency scramble.
Manage
Just-in-time access: A CISO's guide to reducing standing privilege
Adopting just-in-time access helps companies better control who is accessing corporate resources, dovetailing with other key strategies such as PAM and zero trust.
Sponsored Sites
-
Security
Leading the Way in Corrections Technology
From creating safer facilities to supporting stronger reentry outcomes, Aventiv, and its family of brands: Securus Technologies, Securus Monitoring and JPay, delivers technology solutions that safely and securely transform corrections environments for everyone.
-
AI & Emerging Tech
Verizon 5G Connected Laptops
A survey of 438 companies reveals a widening gap between AI adoption and network security, with 95% concerned about risks outside the office. While 5G connected laptops may offer a path forward, many enterprises have dormant 5G hardware.
-
AI & Emerging Tech
SHI + Google - Gemini SMB Adoption Campaign
Insights into how SHI and Google Cloud provide proven implementation strategies for SMBs to successfully transform their operations and achieve measurable ROI through a strategic enterprise AI approach.
Find Solutions For Your Project
-
Evaluate
AI in the SOC: 5 high-value use cases for enterprise SOCs
AI helps enterprise SOCs prioritize alerts, speed up investigations, improve threat hunting, streamline incident response and reporting, and manage risks with human oversight.
-
How AI threat detection is transforming enterprise cybersecurity
-
Best practices to evaluate LLM-based AI security tools
-
The CISO role isn't universal: 5 industry perspectives
-
-
Problem Solve
Just-in-time access: A CISO's guide to reducing standing privilege
Adopting just-in-time access helps companies better control who is accessing corporate resources, dovetailing with other key strategies such as PAM and zero trust.
-
5 cybersecurity training program mistakes most companies make
-
CIRCIA reporting deadline puts OT data integrity under the microscope
-
Beyond Arup: CISOs combat escalating deepfake fraud
-
-
Manage
Help desk deepfakes: Why CISOs must rethink verification
Protecting the help desk from deepfake threats doesn't necessarily mean deploying the latest detection tools. Prioritizing policy over detection can stop deepfakes in their tracks.
-
Cloud repatriation: What CISOs need to know
-
How to build an effective cybersecurity awareness program
-
White-glove security training closes executive vulnerability gap
-
Cybersecurity Basics
-
Get Started
How to conduct a cyber-resilience assessment
Regularly reviewing cybersecurity plans and procedures helps organizations prepare for cyberattacks. This checklist outlines key steps for assessing cyber resilience.
-
Get Started
How to build a successful security champions program
Security champions integrate security into daily team decisions. Learn who should be a champion and how to establish an effective program.
-
Get Started
Rethink Cybersecurity Awareness Month: 4 different approaches
Instead of measuring Cybersecurity Awareness Month by training completion, use October to fix problems, eliminate risk, test critical capabilities and drive accountability.
Multimedia
Vendor Resources
- From Data Residency to Digital Sovereignty –Product Overview
- Cyber Resilience In Action –Research Content
- Cyber Resilience In Action –Research Content
-
News
View All -
Threat Detection & Incident Response
Max-severity GitLab flaw lets attackers run code on servers
A high-impact GitLab flaw lets unauthenticated attackers run code on self-managed servers. Every release since 2014 is affected.
-
Threats, Cyberattacks & Vulnerabilities
PHP2Shell disclosure unravels after leaks forced early patch drop
Although website shutdowns were inevitable to patch critical PHP flaws, early leaks and a broken embargo turned routine maintenance into an emergency scramble.
-
Threats, Cyberattacks & Vulnerabilities
PHP2Shell: 22M exposed servers at risk as emergency patches released
AI gave defenders a head start, but PHP2Shell has sparked a chaotic race against automated exploits across 22 million vulnerable servers.
Cybersecurity Definitions
- What is incident response? A complete guide
- What is identity and access management? Guide to IAM
- What is data masking?
- What is antivirus software?
- What is a stealth virus and how does it work?
- What is file integrity monitoring (FIM)?
- What is information security (infosec)?
- What is governance, risk and compliance (GRC)?