CISO Strategy: Page

3 cybersecurity predictions for 2025

Will service as software, agentic cybersecurity and automated remediation reach their potential in 2025? Read up on what analyst Tyler Shields has to say.

By Tyler Shields • Dec. 11, 2024

AWS CISO details automated cybersecurity tools for customers

Chris Betz, CISO at AWS, discusses how three internal tools are designed to automatically identify and mitigate threats for the cloud giant's customers.

By Rob Wright • Nov. 26, 2024

What CISOs need to know to build an OT cybersecurity program

More companies are tasking CISOs with operational technology security. But this oversight means a new strategy for those unfamiliar with building an effective OT security program.

By Amy DeCarlo , Sharon Shea • Nov. 18, 2024

How to create an enterprise cloud security budget

As companies migrate more sensitive data and resources into the cloud, it's important to deploy relevant security tools and processes, while staying within budget.

By Dave Shackleford • Nov. 7, 2024

Risk & Repeat: SEC cracks down on cybersecurity disclosures

The SEC's charges against Unisys, Avaya, Check Point Software Technologies and Mimecast have raised questions about expectations for transparency in cybersecurity.

By Alexander Culafi • Oct. 29, 2024

Delta sues CrowdStrike over IT outage fallout

Delta said it suffered $500 million in damages. CrowdStrike said the airline company's claims 'demonstrate a lack of understanding of how modern cybersecurity works.'

By Alexander Culafi • Oct. 28, 2024

How to achieve crypto-agility and future-proof security

Quantum computing will render current asymmetric encryption algorithms obsolete. Organizations need to deploy crypto-agile systems to remain protected.

By Amy DeCarlo • Oct. 28, 2024

SEC charges 4 companies for downplaying SolarWinds attacks

The U.S. Securities and Exchange Commission fined the companies for misleading investors about intrusions stemming from the SolarWinds supply chain attack.

By Arielle Waldman • Oct. 22, 2024

Thoma Bravo-owned Sophos to acquire Secureworks for $859M

Sophos said it plans to integrate Secureworks' products into a broader portfolio that serves both large enterprises and small and medium-sized businesses.

By Alexander Culafi • Oct. 22, 2024

Joe Sullivan: CEOs must be held accountable for security too

The former CSO at Uber was found guilty in 2022 of obstruction of justice relating to a breach. Now he's calling for clearer regulatory frameworks for security.

By Nicole Laskowski • Oct. 17, 2024

Risk & Repeat: What’s next for Telegram and Pavel Durov?

Telegram made updates to its FAQ and privacy policy following Pavel Durov's arrest. But will the changes influence cybercriminals' abuse of the platform?

By Rob Wright • Sept. 24, 2024

How to prepare a system security plan, with template

To help keep your systems and applications secure, a system security plan is essential. Learn how to create a plan and keep it up to date.

By Paul Kirvan • Sept. 23, 2024

Microsoft issues first Secure Future Initiative report

In the first progress report since the launch of its Secure Future Initiative, Microsoft said it's made key improvements to identity and supply chain security.

By Arielle Waldman • Sept. 23, 2024

6 cybersecurity soft skills to elevate your career

Cybersecurity professionals have the technical skills to protect their corporate networks, but they also need to master certain soft skills if they truly want to be effective.

By Mike Pedrick • Sept. 19, 2024

Orca: AI services, models falling short on security

New research from Orca Security shows that AI services and models in cloud contain a number of risks and security shortcomings that could be exploited by threat actors.

By Arielle Waldman • Sept. 18, 2024

Mastercard to acquire Recorded Future for $2.65B

Mastercard says the addition of threat intelligence vendor Recorded Future will bolster its cybersecurity services as threats against the financial sector continue to rise.

By Arielle Waldman • Sept. 12, 2024

How to create an AI acceptable use policy, plus template

With great power comes -- in the case of generative AI -- great security and compliance risks. Learn how an AI acceptable use policy can help ensure safe use of the technology.

By Jerald Murphy • Sept. 9, 2024

4 AI cybersecurity jobs to consider now and in the future

Now hiring: At the intersection of AI and cybersecurity, career opportunities are emerging. Explore four new jobs that combine AI and security expertise.

By Amy DeCarlo • Aug. 30, 2024

CrowdStrike exec refutes Action1 acquisition reports

A CrowdStrike vice president said the cybersecurity giant had an exploratory group conversation with Action1 and then 'disengaged after a surface level conversation.'

By Alexander Culafi • Aug. 22, 2024

Too many cloud security tools? Time for consolidation

Does your organization need every cloud security platform and service currently in use? Tool consolidation can reduce the chances of coverage gaps and increase security.

By Dave Shackleford • Aug. 19, 2024

CrowdStrike outage lessons learned: Questions to ask vendors

In light of the recent CrowdStrike outage, security teams should ask their vendors 10 key questions to ensure they're prepared should a similar event occur.

By Ed Moyle • Aug. 19, 2024

Risk & Repeat: Recapping Black Hat USA 2024

Highlights from Black Hat USA 2024 include a keynote panel on securing election infrastructure as well as several sessions on potential threats against new AI technology.

By Alexander Culafi • Aug. 12, 2024

Flashpoint CEO: Cyber, physical security threats converging

Although Flashpoint is known for their cybersecurity threat intelligence services, the vendor also provides physical security intelligence to its clientele.

By Alexander Culafi • Aug. 12, 2024

CrowdStrike, AI dominate conversation at Black Hat USA 2024

Although the trend of vendors pitching AI-powered products nonstop has continued at Black Hat USA 2024, CrowdStrike and the recent IT outage was an even larger point of discussion.

By Alexander Culafi • Aug. 8, 2024

CrowdStrike fires back at Delta over outage allegations

After Delta Air Lines said it would seek damages against CrowdStrike over last month's IT outage, the cybersecurity vendor's legal counsel warned it would 'respond aggressively.'

By Rob Wright • Aug. 5, 2024