cyber security Archives - Page 19 of 22

Overconfidence is putting organizations at higher risk for attacks

Issued by: Help Net Security

In the past twelve months, roughly one in three targeted attacks resulted in an actual security breach, which equates to two to three effective attacks per month for the average company, according to Accenture. Still, a majority of security executives (75 percent) surveyed are confident in their ability to protect their enterprises from cyberattacks. Accenture…

Application Security

Integrating threat intelligence with existing security technologies

Issued by: Help Net Security

70 percent of security industry professionals believe threat intelligence is often too voluminous and/or complex to provide actionable insights. The Ponemon Institute study, based on 1,072 respondents in the United Kingdom and North America, also showed that organizations neglect to share essential threat data with board members and C-level executives, despite the fact that security…

Software Security

IDG Contributor Network: 6 steps to creating a culture of security ownership

Issued by: CIO Security

The state of corporate cyber-security is anything but static. With the list of potential threats diversifying, the stakes are high for securing company systems and data. As the average cost of a data breach grows (currently estimated at $4 million), business leaders’ appetite for risk lessens. And yet fewer than half of information security professionals…

Application Security

IBM deploys machine learning to bolster online banking security program

Issued by: CIO Security

Behavioral biometrics that uses machine learning is behind new features being added to IBM’s Trusteer Pinpoint Detect platform, which financial institutions use to head off crooks who may have stolen the username and password of legitimate account holders. The new feature looks for anomalies between legitimate users’ normal mouse gestures and those of the current…

Software Security

PCI 3.2 Compliant Organizations Are Likely GDPR Compliant

Issued by: Security Week

PCI DSS version 3.1 will be retired on October 31, 2016, with version 3.2 being the only valid version beginning the 1st of November. From that date, any new validation of PCI compliance will have to be against version 3.2. The new requirements will, however, be considered ‘best practices’ until Feb. 1, 2018 when they…

Network Security

The difference between IT security and ICS security

Issued by: Help Net Security

In this podcast recorded at IoT Solutions World Congress Barcelona 2016, Andrew Ginter, VP of Industrial Security at Waterfall Security, talks about the difference between IT security and ICS security. On IT networks, the focus of a security program is generally preventing the theft of information. The primary focus on control system networks is safety…

Software Security

What can we do about the critical cybersecurity skills shortage?

Issued by: Help Net Security

Tech-savvy youth could plug a widening skills gap as employers seek to combat the growing threat of cybercrime and avert mass disruption to public and private lives. But the industry is failing to provide a clear path for young people to find work, hone their skills, and serve society. Instead, they are being tempted to…

Network Security

Smart city initiatives: Highly integrated and complex problems to solve

Issued by: Help Net Security

Every day, leaders of large cities grapple with knotty, complex problems like decaying public transportation infrastructures, aging utility lines, urban blight, neighborhoods that are vulnerable to the effects of climate change, and other multi-faceted socio-economic challenges. Increasingly, municipal leaders are turning to urban analytics, data collection, and advances in sensor technology to help solve the…

Vulnerabilities

Adobe Rushes Out Emergency Patch For Critical Flash Player Vulnerability

Issued by: Dark Reading

As it has numerous times in the past, Adobe this week rushed out an emergency patch to fix a critical vulnerability in its Flash Player software that would have let attackers take complete control of a vulnerable system. An exploit for the vulnerability is available in the wild and is already being used in attacks…

Network Security

Data Leaked by Pagers Useful for Critical Infrastructure Attacks

Issued by: Security Week

Pagers are still used in industrial environments and many organizations don’t realize that the messages sent with these devices can be highly useful to malicious actors looking to launch a targeted attack. After analyzing the use of pagers in the healthcare industry, researchers at Trend Micro have focused their attention on the risk they pose…