Management & Strategy - Security Ticks

DHS Publishes New Recommendations on Cyber Incident Reporting

DHS, Incident Response, Management & Strategy / SecurityTicks

DHS Publishes New Recommendations on Cyber Incident Reporting 20/09/2023 at 16:47 By Ionut Arghire DHS has published a new set of recommendations to help federal agencies better report cyber incidents and protect critical infrastructure. The post DHS Publishes New Recommendations on Cyber Incident Reporting appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

React to this headline:

DHS Publishes New Recommendations on Cyber Incident Reporting Read More »

Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates

Endpoint Security, Management & Strategy, Vulnerabilities / SecurityTicks

Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates 18/09/2023 at 18:09 By Ionut Arghire Google Chromebooks released from 2021 and onwards will receive automatic updates, including security patches, for 10 years. The post Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Google Extends Chromebook Lifespan, Promises 10 Years of Automatic Updates Read More »

Pentagon’s 2023 Cyber Strategy Focuses on Helping Allies

Management & Strategy, Pentagon, strategy / SecurityTicks

Pentagon’s 2023 Cyber Strategy Focuses on Helping Allies 15/09/2023 at 18:46 By Eduard Kovacs The Pentagon has published an unclassified summary of its 2023 Cyber Strategy, outlining both offensive and defensive plans. The post Pentagon’s 2023 Cyber Strategy Focuses on Helping Allies appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Pentagon’s 2023 Cyber Strategy Focuses on Helping Allies Read More »

A One-Two Punch for Security ROI

automation, Management & Strategy, SOC / SecurityTicks

A One-Two Punch for Security ROI 14/09/2023 at 20:01 By Marc Solomon Cost avoidance is a powerful way to kick-off ROI discussions. However, to quickly move beyond objections, shifting to a more tangible approach to calculate ROI can help. The post A One-Two Punch for Security ROI appeared first on SecurityWeek. This article is an

React to this headline:

A One-Two Punch for Security ROI Read More »

US Agencies Publish Cybersecurity Report on Deepfake Threats

CISA, deepfake, Fraud & Identity Theft, guidance, Management & Strategy / SecurityTicks

US Agencies Publish Cybersecurity Report on Deepfake Threats 13/09/2023 at 18:49 By Eduard Kovacs CISA, FBI and NSA have published a cybersecurity report on deepfakes and recommendations for identifying and responding to such threats. The post US Agencies Publish Cybersecurity Report on Deepfake Threats appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

US Agencies Publish Cybersecurity Report on Deepfake Threats Read More »

CISOs and Board Reporting – an Ongoing Problem

CISO, CISO Strategy, Management & Strategy / SecurityTicks

CISOs and Board Reporting – an Ongoing Problem 13/09/2023 at 18:49 By Kevin Townsend Boards often complain they receive overly-technical reports from management teams that fail to put governance in business and financial terms. The post CISOs and Board Reporting – an Ongoing Problem appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

CISOs and Board Reporting – an Ongoing Problem Read More »

Security Team Huddle: Using the Full NIST Cybersecurity Framework for the Win

Management & Strategy, NIST, Risk Management / SecurityTicks

Security Team Huddle: Using the Full NIST Cybersecurity Framework for the Win 29/08/2023 at 15:01 By Matt Wilson Just as a professional football team needs coordination, strategy and adaptability to secure a win on the field, a well-rounded cybersecurity strategy must address specific challenges and threats. The post Security Team Huddle: Using the Full NIST

React to this headline:

Security Team Huddle: Using the Full NIST Cybersecurity Framework for the Win Read More »

Acquisition Chatter Swirls Around SentinelOne, BlackBerry

Acquisition, BlackBerry, Funding/M&A, M&A Tracker, Management & Strategy, SentinelOne / SecurityTicks

Acquisition Chatter Swirls Around SentinelOne, BlackBerry 28/08/2023 at 19:46 By Ryan Naraine Cybersecurity vendors SentinelOne and BlackBerry have been separately named in public acquisition chatter with a surprise suitor emerging. The post Acquisition Chatter Swirls Around SentinelOne, BlackBerry appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Acquisition Chatter Swirls Around SentinelOne, BlackBerry Read More »

In Other News: Africa Cybercrime Crackdown, Unpatched macOS Flaw, Investor Disclosures

cybercrime, In Other News, Management & Strategy / SecurityTicks

In Other News: Africa Cybercrime Crackdown, Unpatched macOS Flaw, Investor Disclosures 25/08/2023 at 18:49 By Eduard Kovacs Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of August 21, 2023. The post In Other News: Africa Cybercrime Crackdown, Unpatched macOS Flaw, Investor Disclosures

React to this headline:

In Other News: Africa Cybercrime Crackdown, Unpatched macOS Flaw, Investor Disclosures Read More »

Lawmaker Wants Federal Contractors to Have Vulnerability Disclosure Policies

Laws, Management & Strategy, Risk Management, VDP, vulnerability / SecurityTicks

Lawmaker Wants Federal Contractors to Have Vulnerability Disclosure Policies 25/08/2023 at 14:48 By Eduard Kovacs Congresswoman Nancy Mace has introduced a bill that would require federal contractors to have a Vulnerability Disclosure Policy (VDP). The post Lawmaker Wants Federal Contractors to Have Vulnerability Disclosure Policies appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Lawmaker Wants Federal Contractors to Have Vulnerability Disclosure Policies Read More »

The End of “Groundhog Day” for the Security in the Boardroom Discussion?

CISO, CISO Strategy, Management & Strategy, SEC / SecurityTicks

The End of “Groundhog Day” for the Security in the Boardroom Discussion? 23/08/2023 at 17:19 By Marc Solomon As the SEC cyber incident disclosure rules come into effect, organizations will be forced to seriously consider giving security leaders a seat at the table. The post The End of “Groundhog Day” for the Security in the

React to this headline:

The End of “Groundhog Day” for the Security in the Boardroom Discussion? Read More »

US Government Publishes Guidance on Migrating to Post-Quantum Cryptography

Management & Strategy, Security Architecture / SecurityTicks

US Government Publishes Guidance on Migrating to Post-Quantum Cryptography 23/08/2023 at 15:17 By Ionut Arghire CISA, NSA, and NIST urge organizations to create quantum-readiness roadmaps and prepare for post-quantum cryptography migration. The post US Government Publishes Guidance on Migrating to Post-Quantum Cryptography appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

US Government Publishes Guidance on Migrating to Post-Quantum Cryptography Read More »

CISA Releases Cyber Defense Plan to Reduce RMM Software Risks

CISA, Government, Identity & Access, Management & Strategy / SecurityTicks

CISA Releases Cyber Defense Plan to Reduce RMM Software Risks 17/08/2023 at 14:32 By Ionut Arghire CISA has published a cyber defense plan outlining strategies to help critical infrastructure organizations reduce the risks associated with RMM software. The post CISA Releases Cyber Defense Plan to Reduce RMM Software Risks appeared first on SecurityWeek. This article

React to this headline:

CISA Releases Cyber Defense Plan to Reduce RMM Software Risks Read More »

GitHub Paid Out $1.5 Million in Bug Bounties in 2022

Management & Strategy, Vulnerabilities / SecurityTicks

GitHub Paid Out $1.5 Million in Bug Bounties in 2022 16/08/2023 at 15:00 By Ionut Arghire GitHub says it paid out more than $1.5 million in bug bounties for 364 vulnerabilities in 2022, reaching a total of nearly $4 million since 2016. The post GitHub Paid Out $1.5 Million in Bug Bounties in 2022 appeared

React to this headline:

GitHub Paid Out $1.5 Million in Bug Bounties in 2022 Read More »

SecureWorks Laying Off 15% of Employees

layoff, layoffs, Management & Strategy, SecureWorks / SecurityTicks

SecureWorks Laying Off 15% of Employees 15/08/2023 at 14:03 By Eduard Kovacs Threat detection and response firm SecureWorks is laying off 15% of its staff (roughly 300 people) in the second round of firings this year. The post SecureWorks Laying Off 15% of Employees appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

SecureWorks Laying Off 15% of Employees Read More »

Rapid7 Announces Layoffs, Office Closings Under Restructuring Plan

layoffs, Management & Strategy, Rapid7 / SecurityTicks

Rapid7 Announces Layoffs, Office Closings Under Restructuring Plan 09/08/2023 at 06:46 By Mike Lennon Restructuring plan will result in an 18% reduction in employee headcount and closing of some Rapid7 office locations. The post Rapid7 Announces Layoffs, Office Closings Under Restructuring Plan appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Rapid7 Announces Layoffs, Office Closings Under Restructuring Plan Read More »

CISA Unveils Cybersecurity Strategic Plan for Next 3 Years

CISA, Government, Management & Strategy / SecurityTicks

CISA Unveils Cybersecurity Strategic Plan for Next 3 Years 07/08/2023 at 16:20 By Eduard Kovacs CISA has unveiled its Cybersecurity Strategic Plan for the next 3 years, focusing on addressing immediate threats, hardening the terrain, and driving security. The post CISA Unveils Cybersecurity Strategic Plan for Next 3 Years appeared first on SecurityWeek. This article

React to this headline:

CISA Unveils Cybersecurity Strategic Plan for Next 3 Years Read More »

Microsoft Criticized Over Handling of Critical Power Platform Vulnerability

Azure, Management & Strategy, Microsoft / SecurityTicks

Microsoft Criticized Over Handling of Critical Power Platform Vulnerability 04/08/2023 at 17:03 By Eduard Kovacs A critical Microsoft Power Platform vulnerability exposed authentication data and other secrets, but the tech giant has been accused of handling it poorly. The post Microsoft Criticized Over Handling of Critical Power Platform Vulnerability appeared first on SecurityWeek. This article

React to this headline:

Microsoft Criticized Over Handling of Critical Power Platform Vulnerability Read More »

US Gov Rolls Out National Cyber Workforce, Education Strategy

cyber workforce, Government, Management & Strategy, skills shortage, Training & Awareness / SecurityTicks

US Gov Rolls Out National Cyber Workforce, Education Strategy 01/08/2023 at 02:37 By Ryan Naraine The Biden administration on Monday announced a series of “generational investments” to address immediate and long-term cyber workforce needs. The post US Gov Rolls Out National Cyber Workforce, Education Strategy appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

US Gov Rolls Out National Cyber Workforce, Education Strategy Read More »

US Publishes Implementation Plan for National Cybersecurity Strategy

Government, Government Policy, Management & Strategy, White House / SecurityTicks

US Publishes Implementation Plan for National Cybersecurity Strategy 14/07/2023 at 13:06 By Ionut Arghire The Biden-⁠Harris administration has laid out the plan for implementing the National Cybersecurity Strategy. The post US Publishes Implementation Plan for National Cybersecurity Strategy appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

US Publishes Implementation Plan for National Cybersecurity Strategy Read More »