policy - Security Ticks

The pitfalls of neglecting security ownership at the design stage

cyber risk, cybersecurity, Don't miss, Features, Hot stuff, investment, Lenovo, News, opinion, policy, product development, SMBs, software, software development, strategy / SecurityTicks

The pitfalls of neglecting security ownership at the design stage 27/09/2023 at 07:01 By Mirko Zorz For companies to avoid bleeding millions through cyber threats, they must build adaptability into their security strategy from the start while considering a range of inputs that go beyond the IT and network access aspects. In this Help Net […]

React to this headline:

The pitfalls of neglecting security ownership at the design stage Read More »

Are developers giving enough thought to prompt injection threats when building code?

Artificial Intelligence, code, cybercrime, data analysis, Don't miss, Expert analysis, Expert corner, generative AI, Hot stuff, Immersive Labs, News, opinion, policy, programming, software development, strategy / SecurityTicks

Are developers giving enough thought to prompt injection threats when building code? 26/09/2023 at 08:32 By Help Net Security With National Coding Week behind us, the development community has had its annual moment of collective reflection and focus on emerging technologies that are shaping the industry. Among these, large language models (LLMs) and “generative AI”

React to this headline:

Are developers giving enough thought to prompt injection threats when building code? Read More »

Balancing cybersecurity with convenience and progress

certification, CompTIA, cybercriminals, cybersecurity, digital transformation, Don't miss, education, framework, generative AI, hacking, Malware, News, phishing, policy, Privacy, Ransomware, report, Risk Management, skill development, threats, training, zero trust / SecurityTicks

Balancing cybersecurity with convenience and progress 25/09/2023 at 07:02 By Help Net Security Changing approaches to cybersecurity have led to slow but steady progress in defense and protection. Still, competing interests create a growing challenge for cybersecurity decision makers and practitioners, according to CompTIA. The state of cybersecurity Most business and technology professionals feel that

React to this headline:

Balancing cybersecurity with convenience and progress Read More »

Building GenAI competence for business growth

Compliance, cybersecurity, framework, generative AI, IDC, News, policy, regulation, report, skill development, strategy, training / SecurityTicks

Building GenAI competence for business growth 21/09/2023 at 06:02 By Help Net Security To embark on the GenAI technology adoption journey for business success, organizations require foundational activities related to GenAI investment, guidance in prioritizing use cases, and identification of key stakeholders essential for building and implementing successful initiatives, according to IDC. Essential key activities

React to this headline:

Building GenAI competence for business growth Read More »

Shadow IT: Security policies may be a problem

Don't miss, enterprise, Hot stuff, Kolide, News, policy, shadow IT, survey, training / SecurityTicks

Shadow IT: Security policies may be a problem 20/09/2023 at 08:23 By Zeljka Zorz 3 out of 4 workers use personal (and often unmanaged) phones and laptops for work and nearly half of companies let unmanaged devices access protected resources, a recent report by Kolide and Dimensional Research has revealed. When asked why they use

React to this headline:

Shadow IT: Security policies may be a problem Read More »

Avoiding domain security risks when taking your business online

access control, certification, cybersecurity, DNS, Don't miss, Hot stuff, MarkMonitor, MFA, policy, strategy, tracking, Video / SecurityTicks

Avoiding domain security risks when taking your business online 19/09/2023 at 07:06 By Help Net Security Unfortunately, as available domain extensions increase in variety (and uniqueness), so do security risks. In this Help Net Security video, Prudence Malinki, Head of Industry Relations at Markmonitor, discusses best practices enterprises should abide by when kickstarting their online

React to this headline:

Avoiding domain security risks when taking your business online Read More »

Enterprises persist with outdated authentication strategies

attacks, authentication, cybercriminals, cybersecurity, dark web, Don't miss, Enzoic, MFA, News, password management, passwordless, passwords, policy, report, strategy, vulnerability assessment / SecurityTicks

Enterprises persist with outdated authentication strategies 15/09/2023 at 07:33 By Help Net Security Despite authentication being a cornerstone of cybersecurity, risk mitigation strategies remain outdated, according to new research from Enzoic. With the attack surface expanding and the increasing sophistication of cyber threats, organizations are struggling to deliver secure and user-friendly authentication. The research uncovered

React to this headline:

Enterprises persist with outdated authentication strategies Read More »

Ripple Labs chair slams Biden, Gensler for having ‘screwed up’ on crypto

biden, chris larsen, crypto laws, Grayscale, policy, Ripple, san francisco, SEC / SecurityTicks

Ripple Labs chair slams Biden, Gensler for having ‘screwed up’ on crypto 07/09/2023 at 08:02 By Cointelegraph By Jesse Coghlan Ripple Labs chair Chris Larsen commented on the recent cases involving Ripple, Grayscale, and the SEC, arguing it is time for Congress to take the lead on crypto policy. This article is an excerpt from

React to this headline:

Ripple Labs chair slams Biden, Gensler for having ‘screwed up’ on crypto Read More »

Shifting left and right, innovating product security

CISO, collaboration, Compliance, Cybellum, cybersecurity, Don't miss, Features, Hot stuff, Incident Response, News, opinion, policy, regulation, software, standards, strategy / SecurityTicks

Shifting left and right, innovating product security 07/09/2023 at 07:03 By Mirko Zorz In this Help Net Security interview, Slava Bronfman, CEO at Cybellum, discusses approaches for achieving product security throughout a device’s entire lifecycle, fostering collaboration across business units and product lines, ensuring transparency and security in the supply chain, and meeting regulatory requirements

React to this headline:

Shifting left and right, innovating product security Read More »

Baseline standards for BYOD access requirements

Application Security, BYOD, Compliance, cyber hygiene, cybersecurity, data, Europe, Jamf, mobile devices, News, operating system, patching, policy, Privacy, remote access, shadow IT, standards, survey / SecurityTicks

Baseline standards for BYOD access requirements 07/09/2023 at 06:02 By Help Net Security 49% of enterprises across Europe currently have no formal Bring-Your-Own-Device (BYOD) policy in place, meaning they have no visibility into or control over if and how employees are connecting personal devices to corporate resources, according to a Jamf survey. With the summer

React to this headline:

Baseline standards for BYOD access requirements Read More »

Understand the fine print of your cyber insurance policies

access management, attacks, Compliance, cyber insurance, cybersecurity, Delinea, human error, News, policy, report / SecurityTicks

Understand the fine print of your cyber insurance policies 01/09/2023 at 06:32 By Help Net Security A significant gap is emerging between insurance providers, as organizations skip the fine print and seek affordable and comprehensive coverage, potentially putting them in a tough place when they need to use this safety net, according to a Delinea

React to this headline:

Understand the fine print of your cyber insurance policies Read More »

The power of passive OS fingerprinting for accurate IoT device identification

access control, Cato Networks, cybersecurity, DDoS, Don't miss, Expert analysis, Expert corner, Hot stuff, IoT, monitoring, network, News, operating system, opinion, policy, SASE, software, TCP/IP / SecurityTicks

The power of passive OS fingerprinting for accurate IoT device identification 31/08/2023 at 07:31 By Help Net Security The number of IoT devices in enterprise networks and across the internet is projected to reach 29 billion by the year 2030. This exponential growth has inadvertently increased the attack surface. Each interconnected device can potentially create

React to this headline:

The power of passive OS fingerprinting for accurate IoT device identification Read More »

Rising cyber incidents challenge healthcare organizations

Claroty, Compliance, cybersecurity, framework, Government, healthcare, News, policy, Ransomware, regulation, report / SecurityTicks

Rising cyber incidents challenge healthcare organizations 30/08/2023 at 06:01 By Help Net Security Healthcare organizations are facing many cybersecurity challenges that require them to increasingly prioritize cybersecurity and compliance, according to Claroty. Threat actors are not only targeting IT systems, but have now set their sights on cyber-physical systems – from IoMT devices, to building

React to this headline:

Rising cyber incidents challenge healthcare organizations Read More »

Adapting authentication to a cloud-centric landscape

access control, authentication, biometrics, CISO, Compliance, credentials, cybersecurity, Don't miss, Features, Hot stuff, MFA, News, opinion, passwordless, policy, regulation, SSO, zero trust, ZITADEL / SecurityTicks

Adapting authentication to a cloud-centric landscape 28/08/2023 at 07:33 By Mirko Zorz In this Help Net Security interview, Florian Forster, CEO at Zitadel, discusses the challenges CISOs face in managing authentication across increasingly distributed and remote workforces, the negative consequences of ineffective authorization, and how the shift toward cloud transformation affects authentication strategies. What are

React to this headline:

Adapting authentication to a cloud-centric landscape Read More »

Anticipating the next wave of IoT cybersecurity challenges

Artificial Intelligence, cybersecurity, Don't miss, Features, FIDO Alliance, framework, Hot stuff, Internet of Things, interoperability, machine learning, News, opinion, policy, Red Alert Labs, standards, strategy, vulnerability / SecurityTicks

Anticipating the next wave of IoT cybersecurity challenges 23/08/2023 at 07:01 By Mirko Zorz In this Help Net Security interview, Roland Atoui, Managing Director at Red Alert Labs, discusses the intricacies of transitioning from isolated IoT setups to interconnected environments, examining the broadening attack surface and the nuanced complexities this evolution imposes. Atoui also delves

React to this headline:

Anticipating the next wave of IoT cybersecurity challenges Read More »

IT’s rising role in physical security technology

cloud adoption, collaboration, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, IoT, Motorola Solutions, opinion, physical security, policy, surveillance / SecurityTicks

IT’s rising role in physical security technology 22/08/2023 at 07:34 By Help Net Security As the adoption of cloud-based and mobile-access security systems continues to increase among both new and established businesses, the lines between traditional physical security personnel and IT staff are beginning to blur. Traditionally, the common approach towards organizational security has always

React to this headline:

IT’s rising role in physical security technology Read More »

Cybersecurity as a global, multi-sector activity with Mihoko Matsubara

awareness, Cybellum, cybersecurity, education, Government, News, NTT, podcast, policy, professional, strategy / SecurityTicks

Cybersecurity as a global, multi-sector activity with Mihoko Matsubara 11/08/2023 at 05:47 By Help Net Security Like many leaders in the cybersecurity space, the professional journey of Mihoko Matsubara did not necessarily begin with securing devices or technology. However, once she discovered it, she was hooked. Discussing her career path with the Left to Our

React to this headline:

Cybersecurity as a global, multi-sector activity with Mihoko Matsubara Read More »

Promoting responsible AI: Balancing innovation and regulation

Armis, Artificial Intelligence, cybersecurity, deepfakes, Don't miss, Features, Government, Hot stuff, News, opinion, policy / SecurityTicks

Promoting responsible AI: Balancing innovation and regulation 06/07/2023 at 07:02 By Mirko Zorz As AI technology advances, it is essential to remain mindful of familiar and emerging risks. Education is critical to fostering responsible AI innovation, as understanding the technology and its limitations raises standards and benefits everyone. In this Help Net Security interview, Nadir

React to this headline:

Promoting responsible AI: Balancing innovation and regulation Read More »

Island Enterprise Browser: Intelligent security built into the browsing session

browser, data, Don't miss, Features, Hot stuff, Island, News, opinion, policy, Privacy / SecurityTicks

Island Enterprise Browser: Intelligent security built into the browsing session 05/07/2023 at 06:31 By Mirko Zorz In this Help Net Security interview, Mike Fey, CEO of Island, explains the differences between consumer browsers and the Island Enterprise Browser, how it protects organizations’ data, and how it uses contextual information to provide users with a safe

React to this headline:

Island Enterprise Browser: Intelligent security built into the browsing session Read More »

Organizations actively embrace zero trust, integration remains a hurdle

Fortinet, hybrid workforce, News, policy, remote working, report, SASE, zero trust / SecurityTicks

Organizations actively embrace zero trust, integration remains a hurdle 21/06/2023 at 06:09 By Help Net Security IT teams have made security efforts and progress in zero-trust implementation strategies to establish a new sense of normalcy following the network upheaval caused by the start of the global pandemic. They have also addressed the need to secure

React to this headline:

Organizations actively embrace zero trust, integration remains a hurdle Read More »