Cybersecurity Leadership

Cybersecurity Expert Joseph Steinberg says that given the SEC's new cybersecurity disclosure rules—and recent charges against the CISO of SolarWinds—there is plenty at stake for companies that do not adequately oversee the management of their cyber risk.'

USB-based attacks, QR codes for phishing and social engineering continue to be some of the most effective, now more dangerous with the help of AI.

Experts at this year's RSA Conference offered strategies to help CISOs cope with the prospect of facing federal indictments over their handling of cyber incidents.

Up to now, the IoT industry has relied mainly on security by obscurity and the results have been predictable

Not a decade ago, cybersecurity was an emergent concept that few enterprise leaders were well-versed in or even concerned with.

Now they can’t go a day without discussing the dangers of cybercrime.

An IBM report found that most organizations are exposing themselves to security risks when implementing generative AI tools

Zero-trust security should be seen as a strategy to protect high-value assets and is not tied to a specific technology or product, says the model’s creator John Kindervag

Cloud misconfigurations, more sophisticated ransomware, and exploitation of vendors are contributing to rising cyberattacks.

While other professions are making up ground, cybersecurity still lags behind in female representation, thanks to a lack of respect and inclusion.

Security isn't just for your organisation, you also need to get closer to your suppliers, especially those providing critical services.

There is something of a governance malpractice in bringing in a new expert for every problem the Board may encounter

While the financial burden of ransomware payments and data recovery is undeniable, the true cost of a cyberattack goes far beyond immediate expenses.

Encouraging enterprises to adopt a proactive cybersecurity strategy is essential to avoiding emerging threats and ensuring data protection. Cybersecurity requires continuous vigilance and regular updates to policies and systems. It’s a dynamic process that evolves with new challenges, not a one-time solution.

DevSecOps is the non-negotiable key to building secure and resilient applications that can withstand modern and sophisticated cyber threats. 

The quantum computing market boom has sparked concerns about the vulnerability of our current public-key cryptography algorithms, putting sensitive data integrity at risk.

While cybercrime makes a CISO’s position daunting, board support can strengthen organizational resilience. There are five critical questions the board should ask their CISO to create this outcome.

The Board needs to take an elevated view on cybersecurity, looking for cross-functional governance matters beyond the mere technical horizon

There's no one path to business success, but you can take this important step to mitigate cyber risk and unleash the power of innovation, partnerships, and customer relationships: rethink network security.

More women are entering cybersecurity, but they still struggle to reach senior positions, pointing to the need to break the glass ceiling.

CISOs can avoid being liable for data breaches by following legal advice, communicating effectively with internal and external stakeholders, and demonstrating commitment to avoid future incidents.

Protecting sensitive data and ensuring compliance with regulations are paramount concerns for SMEs leveraging cloud services. To achieve resilient cloud security, SMEs must implement robust strategies tailored to their unique needs and resources.

Frustration, stress, and increased liability are only a few of the off-putting realities giving CISOs cold feet. It doesn’t have to be that way, experts say.

Dark Reading talks cloud security with John Kindervag, the godfather of zero trust.

The rise of bad bots is just one more reason for companies to ensure that their fraud and cyber teams are working together.