Quantum Security and AI: Building a Future Together
Quantum computing is still cutting-edge, but that doesn’t mean it can’t be improved. What is quantum computing? Is it the same as quantum cryptography, a central tenet of so-called quantum security? And where does artificial intelligence (AI) fit in? What Is Quantum Security? Often when you hear about quantum computing in terms of security, it’s…
Data Poisoning: The Next Big Threat
Data poisoning against security software that uses artificial intelligence (AI) and machine learning (ML) is likely the next big cybersecurity risk. According to the RSA 2021 keynote presentation by Johannes Ullrich, dean of research of SANS Technology Institute, it’s a threat we should all keep an eye on. “One of the most basic threats when…
Biden, Tech Leaders Eye ‘Concrete Steps’ to Boost Cybersecurity
President Joe Biden and key cabinet officials were to host the chief executives of Apple, Google, Amazon and Microsoft along with leaders from the finance and utilities sectors, a senior administration official said. The gathering comes after hacks and data breaches which have targeted a major US oil pipeline, a meatpacking company, and the Microsoft…
CISA’s Joint Cyber Defense Collaborative: Why it just might work
The Cybersecurity and Infrastructure Security Agency (CISA) within the Department of Homeland Security (DHS) has a new director, Jen Easterly. The Senate confirmed Easterly in July, with swearing taking place on August 09, 2021. It should come as no surprise to CISOs to see Easterly dig in and immediately leverage the newly minted Joint Cyber…
Prepare for Your Next Cybersecurity Compliance Audit with CIS Resources
Reading a list of cybersecurity compliance frameworks is like looking at alphabet soup: NIST CSF, PCI DSS, HIPAA, FISMA, GDPR…the list goes on. It’s easy to be overwhelmed, and not only because of the acronyms. Many frameworks do not tell you where to start or exactly how to become compliant. Cybersecurity best practices from the…
How to Avoid Smishing Attacks Targeting Subscription Service Users
If you’re anything like me, you used delivery more during the pandemic than before. Both getting food brought to my door and meal kit boxes mean people don’t have to mask up and go out to the grocery store. But threat actors know that, too. Recent scams take advantage of people signing up for more…
U.S. Infrastructure Bill Allocates $2 Billion to Cybersecurity
The Infrastructure Investment and Jobs Act includes funding for roads, bridges, transportation safety, public transit, railways, electric vehicle infrastructure, airports, ports, waterways, broadband internet, environmental remediation, and power infrastructure. The White House said this week that the bill will also invest approximately $2 billion to “modernize and secure federal, state, and local IT and networks;…
Senate Report: Federal Agencies Still Have Poor Cybersecurity Practices
A report published in 2019 found that eight federal agencies failed to meet even the basic cybersecurity standards and protocols. Two years later, cybersecurity at those agencies was again analyzed and the findings are — as described in the new report — “stark.” The new report, titled “Federal Cybersecurity: America’s Data Still at Risk,” is…
How to prepare your Windows network for a ransomware attack
Recently I spoke with Ryan Chapman of the SANS Institute, author of the upcoming SANS course FOR528: Ransomware for Incident Responders, on how to better prepare for ransomware. That preparation comes in two forms: planning how you would respond to a successful ransomware attack and overcoming barriers to hardening your network against them. Planning for…
New Normal Demands New Security Leadership Structure
Many organizations have undergone sweeping technological and operational changes in the past 18 months, creating new conversations around how these new technologies and processes should be secured and who is tasked with protecting them. This was the core of a keynote delivered by Maxine Holt, senior director of cybersecurity at Omdia, during the inaugural Omdia…
