strategy - Security Ticks

CISOs and board members are finding a common language

CISO, cyber risk, cyberattack, digital transformation, generative AI, News, Ransomware, report, Risk Management, Splunk, strategy, survey / SecurityTicks

CISOs and board members are finding a common language 16/10/2023 at 07:39 By Help Net Security 86% of CISOs believe generative AI will alleviate skills gaps and talent shortages on the security team, filling labor-intensive and time-consuming security functions and freeing up security professionals to be more strategic, according to Splunk. 35% report using generative […]

React to this headline:

CISOs and board members are finding a common language Read More »

How organizations can combat rising cloud costs with FinOps

Cloud, cybersecurity, Don't miss, Hot stuff, software, strategy, Venafi, Video / SecurityTicks

How organizations can combat rising cloud costs with FinOps 16/10/2023 at 07:06 By Help Net Security When it comes to the cloud, many organizations prioritize speed over spend. In fact, spending on public cloud services is forecasted to grow 21.7% to a total of $597.3 billion in 2023, according to Gartner. How can organizations spend

React to this headline:

How organizations can combat rising cloud costs with FinOps Read More »

Inadequate IoT protection can be a costly mistake

certificates, cyberattack, cybersecurity, hardware, IIoT, IoT, Keyfactor, News, report, strategy, survey / SecurityTicks

Inadequate IoT protection can be a costly mistake 16/10/2023 at 06:34 By Help Net Security 97% of organizations are struggling to secure their IoT and connected products to some degree, according to Keyfactor. The research survey also found that 98% of organizations experienced certificate outages in the last 12 months, costing an average of over

React to this headline:

Inadequate IoT protection can be a costly mistake Read More »

Introducing the book: Irreducibly Complex Systems

books, cybersecurity, Don't miss, Hot stuff, Prelude, security testing, strategy, Video / SecurityTicks

Introducing the book: Irreducibly Complex Systems 13/10/2023 at 06:32 By Help Net Security In this Help Net Security video interview, David Hunt, CTO at Prelude, discusses his book – Irreducibly Complex Systems: An Introduction to Continuous Security Testing. Continuous security testing (CST) is a new strategy for validating cyber defenses. We buy security products that

React to this headline:

Introducing the book: Irreducibly Complex Systems Read More »

Keeping up with the demands of the cyber insurance market

cyber insurance, cybersecurity, data security, Delinea, Don't miss, Expert analysis, Expert corner, Hot stuff, market, MFA, News, opinion, Ransomware, remediation, standards, strategy, threats / SecurityTicks

Keeping up with the demands of the cyber insurance market 12/10/2023 at 08:01 By Help Net Security Cyber insurance has been around longer than most of us think. When American International Group (AIG) launched the first cyber insurance policy in 1997, it stepped into completely unknown territory to gain market share. Now, 26 years later,

React to this headline:

Keeping up with the demands of the cyber insurance market Read More »

Cybersecurity should be a business priority for CEOs

Accenture, Accenture Security, CEO, cyber resilience, cybersecurity, investment, News, report, strategy, survey / SecurityTicks

Cybersecurity should be a business priority for CEOs 12/10/2023 at 06:02 By Help Net Security 74% of CEOs are concerned about their organizations’ ability to avert or minimize damage to the business from a cyberattack – even though 96% of CEOs said that cybersecurity is critical to organizational growth and stability, according to Accenture. CEOs

React to this headline:

Cybersecurity should be a business priority for CEOs Read More »

15 free Microsoft 365 security training modules worth your time

Don't miss, Hot stuff, how-to, Microsoft, Microsoft 365, News, skill development, strategy, tips / SecurityTicks

15 free Microsoft 365 security training modules worth your time 11/10/2023 at 07:32 By Help Net Security Microsoft 365 is a cloud-based productivity suite. Beyond just tools like Word and Excel, it integrates productivity applications with cloud functionalities, device administration, and enhanced security, all within a unified experience. Managing Microsoft 365 can be difficult for

React to this headline:

15 free Microsoft 365 security training modules worth your time Read More »

Why security is the bedrock of success for mainframe projects

Cloud, cybersecurity, Don't miss, Hot stuff, Kyndryl, mainframe security, skill development, strategy, training, Video / SecurityTicks

Why security is the bedrock of success for mainframe projects 10/10/2023 at 07:02 By Help Net Security Enterprises looking to update their mission-critical operations are approaching modernization in three ways – modernizing on the mainframe, integrating with the hyperscalers, or moving off to the cloud, according to a recent Kyndryl report. Almost all respondents use

React to this headline:

Why security is the bedrock of success for mainframe projects Read More »

Cybersecurity pros predict rise of malicious AI

Artificial Intelligence, awareness, cybersecurity, Enea, Malware, News, phishing, report, social engineering, strategy, survey / SecurityTicks

Cybersecurity pros predict rise of malicious AI 10/10/2023 at 06:35 By Help Net Security 76% of cybersecurity professionals believe the world is very close to encountering malicious AI that can bypass most known cybersecurity measures, according to Enea. 26% see this happening within the next year, and 50% in the next 5 years. Worries about

React to this headline:

Cybersecurity pros predict rise of malicious AI Read More »

The root cause of open-source risk

CISO, cybersecurity, News, open source, report, software development, Sonatype, strategy, survey / SecurityTicks

The root cause of open-source risk 05/10/2023 at 06:02 By Help Net Security 2023 saw twice as many software supply chain attacks as 2019-2022 combined. Sonatype logged 245,032 malicious packages in 2023. One in eight open-source downloads today poses known and avoidable risks. Vulnerabilities can still be prevented Nearly all (96%) vulnerabilities are still avoidable.

React to this headline:

The root cause of open-source risk Read More »

Evolving conversations: Cybersecurity as a business risk

attacks, BEC scams, boardroom, CISO, Cloud, collaboration, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Insider Threat, investment, News, opinion, Ransomware, strategy, Trustwave / SecurityTicks

Evolving conversations: Cybersecurity as a business risk 03/10/2023 at 08:03 By Help Net Security Board members often lack technical expertise and may not fully grasp cyber risks. On the other hand, CISOs are more accustomed to interfacing with IT staff. This is understandable; the board is responsible for guiding high-level decision-making. They rarely become involved

React to this headline:

Evolving conversations: Cybersecurity as a business risk Read More »

CISO’s compass: Mastering tech, inspiring teams, and confronting risk

CISO, Compliance, cyber insurance, cybersecurity, data, Don't miss, Features, Hot stuff, law, News, opinion, Privacy, regulation, Risk Management, skill development, Skillsoft, strategy / SecurityTicks

CISO’s compass: Mastering tech, inspiring teams, and confronting risk 03/10/2023 at 07:32 By Mirko Zorz In this Help Net Security interview, Okey Obudulu, CISO at Skillsoft, talks about the increasing complexity of the CISO role and challenges they face. He discusses the business environment, tech innovation, the evolving regulatory landscape, limited resources, and budgets. Obudulu

React to this headline:

CISO’s compass: Mastering tech, inspiring teams, and confronting risk Read More »

9 essential ransomware guides and checklists available for free

ANSSI, CISA, cybercrime, Don't miss, DXC Technology, Egnyte, FTC, Government, guide, Hot stuff, how-to, IBM, IBM X-Force, Malware, National Cyber Security Centre, News, Ransomware, strategy, tips / SecurityTicks

9 essential ransomware guides and checklists available for free 02/10/2023 at 08:03 By Help Net Security According to Fortinet, ransomware activity has intensified, registering an increase of 13 times compared to the beginning of 2023 in terms of all malware detections. The rise of Ransomware-as-a-Service has primarily driven this surge in ransomware variations. According to

React to this headline:

9 essential ransomware guides and checklists available for free Read More »

How should organizations navigate the risks and opportunities of AI?

Artificial Intelligence, Conquest Cyber, cybercriminals, cybersecurity, deepfakes, Don't miss, Expert analysis, Expert corner, Hot stuff, machine learning, opinion, phishing, strategy / SecurityTicks

How should organizations navigate the risks and opportunities of AI? 29/09/2023 at 08:33 By Help Net Security As we realize exciting new advancements in the application of generative pre-trained transformer (GPT) technology, our adversaries are finding ingenious ways to leverage these capabilities to inflict harm. There’s evidence to suggest that offensive actors are using AI

React to this headline:

How should organizations navigate the risks and opportunities of AI? Read More »

The pitfalls of neglecting security ownership at the design stage

cyber risk, cybersecurity, Don't miss, Features, Hot stuff, investment, Lenovo, News, opinion, policy, product development, SMBs, software, software development, strategy / SecurityTicks

The pitfalls of neglecting security ownership at the design stage 27/09/2023 at 07:01 By Mirko Zorz For companies to avoid bleeding millions through cyber threats, they must build adaptability into their security strategy from the start while considering a range of inputs that go beyond the IT and network access aspects. In this Help Net

React to this headline:

The pitfalls of neglecting security ownership at the design stage Read More »

Cloud service inefficiencies drain IT budgets

Aptum, Cloud, cloud adoption, data, investment, News, report, skill development, strategy, survey / SecurityTicks

Cloud service inefficiencies drain IT budgets 27/09/2023 at 06:01 By Help Net Security 71% of IT professionals stated that cloud-related costs make up 30% or more of their total IT spend, according to Aptum. In the current demanding economic environment, organizations are becoming increasingly aware of the financial implications of their business operations. While the

React to this headline:

Cloud service inefficiencies drain IT budgets Read More »

Are developers giving enough thought to prompt injection threats when building code?

Artificial Intelligence, code, cybercrime, data analysis, Don't miss, Expert analysis, Expert corner, generative AI, Hot stuff, Immersive Labs, News, opinion, policy, programming, software development, strategy / SecurityTicks

Are developers giving enough thought to prompt injection threats when building code? 26/09/2023 at 08:32 By Help Net Security With National Coding Week behind us, the development community has had its annual moment of collective reflection and focus on emerging technologies that are shaping the industry. Among these, large language models (LLMs) and “generative AI”

React to this headline:

Are developers giving enough thought to prompt injection threats when building code? Read More »

Why more security doesn’t mean more effective compliance

automation, Compliance, Don't miss, Email, Expert analysis, Expert corner, Hot stuff, MFA, monitoring, News, opinion, Panaseer, regulation, strategy, tips / SecurityTicks

Why more security doesn’t mean more effective compliance 22/09/2023 at 08:31 By Help Net Security Financial institutions have always been a valuable target for cyberattacks. That’s partly why banking and financial institutions are heavily regulated and have more compliance requirements than those in most other industries. A slew of new rules have been put in

React to this headline:

Why more security doesn’t mean more effective compliance Read More »

How companies can take control of their cybersecurity

Compliance, cybersecurity, Don't miss, Features, GDPR, Hot stuff, News, opinion, Reciproc-IT, regulation, skill development, standards, strategy / SecurityTicks

How companies can take control of their cybersecurity 21/09/2023 at 07:17 By Mirko Zorz In this Help Net Security interview, Baya Lonqueux, CEO at Reciproc-IT, discusses the evolving cybersecurity landscape and the essential skillsets needed for teams working in this field. The interview highlights the shift from technical expertise to a focus on organizational and

React to this headline:

How companies can take control of their cybersecurity Read More »

Building GenAI competence for business growth

Compliance, cybersecurity, framework, generative AI, IDC, News, policy, regulation, report, skill development, strategy, training / SecurityTicks

Building GenAI competence for business growth 21/09/2023 at 06:02 By Help Net Security To embark on the GenAI technology adoption journey for business success, organizations require foundational activities related to GenAI investment, guidance in prioritizing use cases, and identification of key stakeholders essential for building and implementing successful initiatives, according to IDC. Essential key activities

React to this headline:

Building GenAI competence for business growth Read More »