Road Map To A $200,000 Cybersecurity Job
Looking to get ahead in cybersecurity? Here are four areas to keep in mind as you make a five-year career plan. The economics of supply and demand shape today’s cybersecurity job market. Each year, US employers post more than 120,000 openings for information security analysts and roughly one-third go unfilled. Hiring managers are bracing for…
Cyberrisk Through A Business Lens
As with any other aspect of operating a business, effectively managing cyberrisk is predicated on making well-informed decisions and then executing reliably within the context of those decisions. With that in mind, boards and senior executives must ensure that their organizations accomplish both. For the reasons described below, today many organizations are unable to do…
5 signs we’re finally getting our act together on security
The high-water line in information security gets higher each year. Just as we think we’ve finally figured out how to defend against attacks, then attackers come up with something new and we are right back to trying to figure out what to do next. For example, ransomware has surged in the last year. Although that…
IDG Contributor Network: Cybersecurity’s crystal ball, 2017 predictions
The only truth you should rely on in preparing for the future is that you should expect the unexpected. In the spirit of giving, though, I offer this list to you because some of these concerns might very well be your unexpected. The risks to your business are determined by the value of your data….
BrandPost: Fighting the cybersecurity knowns: 4 core components
Earlier this year, SevOne fell victim to a phishing scam that resulted in the release of W-2 wage and tax data belonging to current and former employees of the network infrastructure monitoring company. After learning about the breach, management apologized and urged employees to follow “good data security” practices in order to lower their chance…
Tip of the week: How to delete unwanted programs
Generally speaking, programs you don’t want — the bloatware that came with your computer or piggybacked on software updates, for example — often are not really dangerous. Nevertheless, they may be a drag in various ways, launching unwanted processes and slowing down your system, tracking your movements online and sending personal data to software developers….
Surveys: Security Pros Overwhelmed, Not Communicating, Threat Intel Data
Two new surveys released in the last week revealed troubling but telling trends in enterprise security: 70 percent of infosec professionals are overwhelmed by the volume and complexity of threat intelligence data, according to a report from security vendor Anomali and the Ponemon Institute; a separate survey from consultancy BDO USA found that only 27%…
Ongoing Use of Windows Vista, IE8 Pose Huge Enterprise Threat
A new report highlights the high number of users still operating outdated Windows operating systems and unsupported browsers. This represents a huge threat to the organizations whose users access company networks from insecure laptops and home computers within the growing adoption of BYOD policies. Duo Security reports that 65% of its clients’ Windows users are…
Researchers build undetectable rootkit for programmable logic controllers
Researchers have devised a new malware attack against industrial programmable logic controllers (PLCs) that takes advantage of architectural shortcomings in microprocessors and bypasses current detection mechanisms. The attack changes the configuration of the input/output pins that make up the interface used by PLCs to communicate with other devices such as sensors, valves, and motors.
PCI 3.2 Compliant Organizations Are Likely GDPR Compliant
PCI DSS version 3.1 will be retired on October 31, 2016, with version 3.2 being the only valid version beginning the 1st of November. From that date, any new validation of PCI compliance will have to be against version 3.2. The new requirements will, however, be considered ‘best practices’ until Feb. 1, 2018 when they…