SecurityIntelligence InfoRiskToday.com RSS Syndication

The State of Enterprise Mobile App Security 2023: Results Analysis

Benchmarking the Various Security Approaches to Mobile Applications

Compromised mobile apps can be an open door to critical enterprise app servers and other back-end systems, and this survey aims to shine a light on a potential hole in most enterprise security walls – exposing potential gaps in CISO awareness.

Panel Discussion: Cloud Security in Financial Services

Experts Demonstrate Why 'What You Don't Know Can Hurt You' in the Cloud
When it comes to cloud security in financial services, this expert panel agrees: What you don't know can hurt you. Learn of new "security by design" strategies and solutions from Vice President Erika Voss, Ph.D.; Alicja Cade of Google Cloud; and Anthony Belfiore from Wiz.

Iran Traps Middle East Nation in 8-Month Espionage Campaign

APT34 Used Microsoft Exchange Server to Send Email Commands to Backdoor Malware
Iranian state-sponsored hackers conducted an eight-month espionage campaign against a Middle Eastern government, compromising dozens of computers. The Crambus group exploited publicly available tools and three novel pieces of malware to access systems, maintain persistence and steal data.

Securing Data in a SaaS World

Varonis CEO Yaki Faitelson: "You Can't Unbreach Data"
Varonis CEO Yaki Faitelson is fond of saying "You can't unbreach data." In this interview, he discusses generative AI, as well as other technologies and trends and how they impact the ways enterprises view and secure their most critical data.

Live Webinar | DDoS Trends and 2024 Predictions

From Malicious Actors to Unauthorized Access: 5 Doors You Can't Afford to Lock

Live Webinar | Gen AI and Secure Code: Mitigating Risks and Maximizing Rewards with Checkmarx and Mobb.ai

5 Strategies to Protect Your Software Development Teams from Software Supply Chain Attacks

Certificate Lifecycle Management Just Got More Strategic

“Work from anywhere” is a game changer, and it has significant impacts on certificate lifecycle management. Patrick Nohe of GlobalSign discusses the new, strategic approach security leaders need to take for CLM.

Account Takeover in 2021 - and How to Prevent It

SpyCloud has fresh research into account takeover trends and finds that attacks have recently spiked by 300%. Chip Witt explains the trends behind the stats and offers insight into what enterprises often are overlooking in their ATO prevention strategies.

Banking on Cloud Security

"Better, cheaper, faster." These are the results that banking institutions can receive by shifting security to the cloud, says David Vergara of OneSpan. At a time when multi-channel fraud is surging and the customer experience is paramount, cloud needs serious consideration, he says.

Remote Workforce Security - the Long Game

"Risk acceptance" was the operative term as organizations quickly deployed remote workforces in response to the global crisis. But now, as this deployment becomes a long-term option, enterprises need to take a future-focused view toward identity, cloud, and the attack surface. Forcepoint's Homayun Yaqub offers tips.

AI in XDR: When Does It Make Sense?

Cisco's AJ Shipley on When Generative AI Is Useful and When It's Dangerous
ChatGPT set the world on fire six months ago, and since then a slew of companies have released features or products built on or around generative AI - some of them completely legitimate and some of them little more than snake oil. Does AI makes sense everywhere for everything? Absolutely not.

Cisco Secure Access: SSE That Enables the Business

Cloud-Delivered Security Service Edge Solution Gives Efficient Hybrid Work Security
Cisco Secure Access is a security service edge solution that delivers zero trust access to efficiently solve today's challenge of safely connecting anything to anywhere and reimagines the experience to make it better for users, easier for IT and safer for everyone.

What You Should Know About Open Source License Compliance for M&A Activity

Companies are increasingly concerned about the security of applications built on open source components, especially when they’re involved in mergers and acquisitions. Just like copyright for works of art, each piece of open source software has a license that states legally binding conditions for its use. Licenses allow developers to use the software as components, providing they keep to the specific terms and conditions that define what they are permitted and prohibited to do with the software.

Why Open Source License Management Matters

The ongoing rise in open source vulnerabilities and software supply chain attacks poses a growing threat to businesses, which heavily rely on applications for success. Between 70 and 90 percent of organizations’ code base is open source, while vulnerabilities such as Log4j have significantly exposed organizations to cyberattacks.