Infosec Insider

2019-07-30 05:34:25

Code Signing: A Security Control that Isn’t Secured

By Marcos Colon

July 30, 2019

Are you familiar with code signing? If not, in this full video interview Venafi's Senior Threat Intelligence Researcher Jing Xie provides us with a breakdown.

2019-07-23 05:38:22

Cloud Security and Privacy Audits: A 360 Degree Crash Course

By Marcos Colon

July 23, 2019

Doug Barbin, principal at Schellman and Company, discusses the challenges that security professionals face when it comes to security and privacy assessments, but also provides tips on which assessments bring in the most return on investment.

2019-07-16 05:04:49

Attracting, Retaining, and Training in Infosec

By Marcos Colon

July 16, 2019

In this interview with Kelly York, security awareness manager at the McDonald's Corporation, she discusses the state of attracting and retaining talent in information security and also provides some helpful tips that could get you and your business over the hump when it comes to the topic.

2019-07-09 05:49:54

Relentless Resilience Through Renovated Risk Management

By Marcos Colon

July 09, 2019

Updating your risk management program is a critical component of becoming a successful security leader. InfoSec Insider caught up with Argo AI's CSO Summer Craze Fowler who shared her thoughts on the topic, as well as some proven tips.

2019-07-02 05:35:57

Simplicity is Cybersecurity Awareness Training

By Marcos Colon

July 02, 2019

Trend Micro's Vice President of Infrastructure Strategies William Malik shares his take on what simplicity looks like when it comes to cybersecurity awareness training in the business.

2019-06-25 08:20:00

Untangling Mobile Security Challenges in the Business

By Marcos Colon

June 25, 2019

SyncDog CRO Brian Egenrieder discusses the current challenges that security leaders face when it comes to mobility in the enterprise and shares some important steps they can take to overcome them.

2019-06-18 05:22:18

DeMISITIfying Security-Recruiting and Retaining Cyber Talent (Part 2)

By Marcos Colon

June 18, 2019

Security experts Raef Meeuwisse and Ed Moyle provide a breakdown of tips you up-and-coming security leaders can leverage to have a successful start in the cybersecurity field.

2019-06-11 05:56:06

Phishing in 2019: What’s Changed and What’s Still Working

By Marcos Colon

June 11, 2019

In the full video interview below, Tonia Dudley, security solutions advisor at Cofense, provides us with a glimpse into the state of phishing attacks in 2019, and more importantly, what security professionals should be doing about it.

2019-06-04 05:53:07

DeMISTIfying Security: Recruiting and Retaining Cyber Talent (Part 1)

By Ed Moyle and Raef Meeuwisse

June 04, 2019

DeMISTIfying Security experts Ed Moyle and Raef Meeuwisse discuss recruitment and retention challenges in cybersecurity and offer up some advice for security leaders on the topic.

2019-05-28 05:44:20

How Security Leaders Should Approach Application Security

By Marcos Colon

May 28, 2019

In the full video interview below, Ted Harrington, keynote speaker and executive partner at Independent Security Evaluators, provides his take on application security and shares tips on the subject with up-and-coming security leaders.

2018-06-05 05:25:04

How to Make Sense of Attack Patterns

By Josue Ledesma

June 05, 2018

In this featured post, we speak to TrustedSec Founder Dave Kennedy who offers up advice on how you can set up your security department’s defenses to respond and defend against common attacks.

2018-03-08 06:16:00

Privileged Identities: Who's Watching the Watchers?

By Katherine Teitler

March 08, 2018

Jonathan Sander addresses why security teams fail at controlling privileged identities, and what they should be doing that won't upset the apple cart.

2018-03-01 06:16:00

Key Questions to Ask Your Cybersecurity Recruiter

By Katherine Teitler

March 01, 2018

There is no question that the cybersecurity job market is hot, but not any old recruiter is suited to help you with your hiring needs.

2018-02-27 06:16:00

Learning to Make Better Decisions About Cybersecurity

By Katherine Teitler

February 27, 2018

Tony Sager hopes security practitioners don't view the CIS Controls as "just another checklist."

2018-02-22 06:16:00

Negotiating Today’s Shadow IT Labyrinth

By Katherine Teitler

February 22, 2018

The rise of the "citizen developer" may be a blessing for organizations looking to create efficiencies, but could become a curse for security teams if not handled properly.

2018-02-20 06:16:00

Facing GDPR, Even if You’re Late to the Game

By Katherine Teitler

February 20, 2018

Tackling GDPR means knowing where all your data reside, even if they're outside of your direct control. Here we take a look at how you can tackle this initiative even if you're a bit late given the time of year and when the regulation goes into effect.

2018-02-15 06:16:00

Six Tips for Shoring Up Your SMB Security Strategy

By Katherine Teitler

February 15, 2018

SMBs can’t just throw up their hands at cybersecurity, despite a probable dearth of resources. Since most aren't likely to magically receive a multimillion dollar cybersecurity budget windfall, we've provided our top 6 tips for how to manage security on a limited budget.

2018-02-08 06:16:00

Four Ways to Improve Security Testing Outcomes

By Katherine Teitler

February 08, 2018

Security testing must be about more than finding vulnerabilities and remediating them. In this feature article we take a look at four proven ways that you can improve your security testing outcomes.

2018-02-07 06:16:00

Got Data Junk?

By Ben Rothke

February 07, 2018

When it comes to old or no-longer-useful corporate data, you can't just hit "delete." Effective electronic data disposal and destruction requires a much more pragmatic and centralized approach.

2018-02-06 06:16:00

Selling Security Metrics to the Board of Directors

By Katherine Teitler

February 06, 2018

For security metrics to be relevant to the board of directors, security teams must tell the story of how those metrics are supporting business goals. How to accomplish this is no easy task.

2018-02-02 06:16:00

Lessons Learned from Running Which Also Apply to a Career in IT

By Jeremy Finke

February 02, 2018

What do running and your career in information technology/information security have in common? At first glance, not a whole lot. But with a couple of quick examples, I think we will find some similarities.

2018-02-01 06:16:00

5 Ways to Make Your IR Plan Actionable

By Katherine Teitler

February 01, 2018

If you're looking to ensure that your cyber incident response plan doesn't turn into shelfware, here are five ways to make it actionable.

2018-01-31 06:16:00

Analyzing Your Government Contract Cybersecurity Compliance

By Robert Jones

January 31, 2018

If you're a government contractor or a government entity hiring contractors, you need to know the ins and outs of the new FAR and DAR Councils' cybersecurity rules for government contractors.

2018-01-30 06:16:00

Have Point Solutions Reached End of Life?

By Katherine Teitler

January 30, 2018

The infosec tools market can be overwhelming with its abundance of options. How do you choose the best tool for your environment? This informative article will help point you in the right direction.

2018-01-25 06:16:00

Learning to Influence Without Authority

By Katherine Teitler

January 25, 2018

CISOs may have a highly-respected job title, but earning influence with business peers is a more significant challenge.

2018-01-24 06:16:00

From Trapping to Hunting: Intelligently Analyzing Anomalies to Detect Network Compromises

By Giovanni Vigna

January 24, 2018

Is your organization adequately equipped to identify anomalous patterns across the network? If you're doubtful, it may be time to try out alternative models that will help you detect previously unknown attacks.

2018-01-18 06:16:00

Be Mindful of the Password-Storing Mechanism You Choose

By Katherine Teitler

January 18, 2018

Browser password-saving tools are convenient and may allow account holders to apply stronger passwords, but they're not security tools.

2018-01-16 06:16:00

The Art of Aligning Security Goals with Business Goals

By Katherine Teitler

January 16, 2018

To help security leaders find new ways to better align with business colleagues, we turned to two experts to find out how they’re constantly maneuvering between technical requirements and fueling business priorities.

2018-01-11 06:54:31

Psyber Intelligence Part 2: Hacking Social Intelligence

By Lance James

January 11, 2018

Given today’s content-driven society, it benefits cybersecurity and threat intelligence practitioners to gain some understanding of the psychological strategies and exploitation techniques within the intelligence and counterintelligence tradecraft.

2018-01-09 06:16:00

The Latest Infosec Vulnerability Meltdown: From the Viewpoint of a Cloud Researcher

By Katherine Teitler

January 09, 2018

In this follow-up article, cloud researcher Mark Nunnikhoven gives us his take on the Meltdown and Spectre vulnerabilities, which can exploit flaws in modern processors. Nunnikhoven provides us with the potential implications that you should take note of.

2018-01-08 06:16:00

The Latest Infosec Vulnerability Meltdown: From the Viewpoint of a Security Consultant and Entrepreneur

By Katherine Teitler

January 08, 2018

An interview with industry veteran Aaron Turner that helps demystify the probable consequences of Meltdown and Spectre, the two headline-grabbing security vulnerabilities capable of exploiting critical vulnerabilities in modern processors. Turner breaks down what you should do.

2017-04-19 13:46:00

What Do You Do When the Tech Hits the Fan?

By Joshua Marpet

April 19, 2017

New technology is impressive, but sometimes it’s not available or just plain doesn’t work. Legwork, investigation, and following leads are skills security pros can’t forget to practice and use.

2017-04-10 08:00:00

Tips for Managing Diverse Personalities on Your Security Team

By Katherine Teitler

April 10, 2017

A security team—just like any functional area team—is made of up unique individuals with distinct personalities and working styles.

2017-03-06 14:30:00

Victory in 100 Battles: How to Perform a Successful Asset Inventory

By Chris Poulin

March 06, 2017

If the term “asset inventory” elicits involuntary yawns of boredom, you’re not looking at the problem from the right angle. You could make an entire career out of a true, living asset inventory.

2017-02-06 08:31:00

We Should Talk More!

By Joshua Marpet and Scott Lyons

February 06, 2017

Technologists are the bedrock of IT and IT security. They innovate, create, build, implement, maintain, and decommission the most amazing software and hardware systems ever compiled.

2016-12-20 07:45:00

DeMISTIfying Infosec: Marcher Trojan

By Katherine Teitler

December 20, 2016

The Marcher Android Trojan is a malware variant which first emerged in late 2013. Sold on underground forums, the early malware targeted predominantly Russian Android users.

2016-12-13 07:45:00

DeMISTIfying Infosec: Server Message Block

By Katherine Teitler

December 13, 2016

Sever Message Block A server message block (“SMB,” not to be confused with “small and medium businesses,” another common abbreviation) is an application layer network file-sharing protocol which allows systems within the same network to share and access files and resources easily. SMBs facilitate network communication between client applications and the server.

2016-11-21 07:45:00

DeMISTIfying Infosec: Pass-the-Hash

By Katherine Teitler

November 21, 2016

One of the ways to mitigate damage in the event of a breach is to “hash” password, or cryptographically convert a plaintext password to an irreversible output, like a key or token (i.e., “hash”) that is stored and can be used in place of the original input.

2016-11-01 08:00:00

What CISOs Should Consider Before Presenting to the Board

By Katherine Teitler

November 01, 2016

Cybersecurity has been gaining traction as a “board level topic” over the past several years. While boards of directors, along with executive management, all want the answer to, “How secure are we,” security professionals know that that answer doesn’t often come wrapped in a tidy little box.

2016-10-19 08:00:00

The CIO Isn’t Your Enemy (but may be your boss)

By Katherine Teitler

October 19, 2016

Security teams fight many battles. There are threats, vulnerabilities, exploits, improperly configured systems, legacy equipment, lean budgets, staffing shortages, and users who are fallible. Any of these things, alone, add up to challenge, but possibly the biggest challenge security teams face is the battle between the security department and the CIO.

2016-10-12 07:08:00

Can You See the Clouds Gathering?

By Mark Arnold, Senior Research Analyst, Office of the CISO, Optiv

October 12, 2016

For companies on the path of cloud adoption, the fear that dark “clouds gathering” could impact business health and one's financial bottom is a source of anxiety. Despite recent data that show cloud adoption rates consistent growth over the last 18 months, a group of holdouts endure.

2016-10-11 07:54:30

How the Growth of the Cloud Technology Market Impacts Security Managers

By Marcos Colón

October 11, 2016

Cloud technology has been moving at a tremendous pace. For businesses, it seems to have happened in the blink of an eye. It’s faster and more agile, with the ability to re-architect an entire infrastructure. But why has this happened so quickly, and what does it mean for security practitioners?

2016-09-26 09:39:27

What Is Security Analytics? It Depends On Your Role

By Marcos Colón

September 26, 2016

By Marcos Colón September 26, 2016 The cybersecurity industry is full of terms that both vendors and end users love to glom on to. Ok, maybe vendors lead the way, but their customers may not be doing a good job of speaking up and asking them to clarify what it is they do – taking the various mixed marketing messages as they come and running with it.

2016-06-28 08:00:00

Brexit Gets a Bot: Petition website gets hacked

By Katherine Teitler

June 28, 2016

After the contentious Brexit vote last week, the British Parliament’s House of Commons Committee is investigating potential commandeering of an online petition calling for a second referendum on the matter.

2016-05-31 08:00:00

It’s The End of the World as We Know It

By Katherine Teitler

May 31, 2016

One of the security downfalls of Android devices is the profusion of independent device makers and the varying states of attention each manufacturer pays to device security.

2016-05-09 14:53:00

DeMISTIfying Infosec: Phishing

By Katherine Teitler

May 09, 2016

Phishing is a social engineering technique through which an attacker spoofs (i.e., imitates) a known source in an attempt to fool a victim into providing information or performing an action, like clicking on a link or opening an attachment.

2016-01-12 14:53:00

Mission Really Difficult: Securing Your Supply Chain

By Wendy Nather, Research Director at the Retail Cyber Intelligence Sharing Center

January 12, 2016

How do you secure that which you don't control? This is the big question for every enterprise, since no organization exists in a vacuum. From third-party commercial software (including operating systems) to open source, custom-written applications, there are plenty of attack vectors that cause concern.