Shadow IT Adds to Remote Work Security Risks
The pandemic and resulting remote work have revived concerns surrounding shadow IT Two of the biggest challenges for IT departments and digital transformation in 2020 were the move to remote work and cybersecurity. IT, security and leadership teams had to make sure all employees who could work from home had ... Read More
Assessing the New Normal for Cybersecurity
As work from home continues, cyberthreats related to the new normal will remain even post-pandemic “Pandemic” was the word of the year, with runners up including quarantine, coronavirus and asymptomatic. They make sense, of course, but two phrases that should also be included in that list are “remote worker” (or ... Read More
Targeted Cyberattacks Require Targeted Security Awareness Training
COVID-19 and remote work have highlighted the struggle in implementing an effective cybersecurity awareness training program. SANS and other organizations offer security awareness training sessions geared for those working from home (WFH). And Gartner included: “Reinforce the need for remote workers to remain vigilant to socially engineered attacks,” as one ... Read More
Old Vulnerabilities Open the Door for WannaCry Ransomware
More than three years since it was discovered, WannaCry is still a threat for some organizations, research has found How often does your organization conduct a security assessment? Once a year? Once a month? It’s great that your organization is looking at its security thoroughly, but what happens between those ... Read More
Ransomware Increase Highlights Need for Better IT, OT Security
IT networks tend to get all the attention for cybersecurity, but operational technology (OT) and the supply chain are at increasing risk of cyberattacks. Manufacturing security needs to deploy a more holistic view of their systems, by securing the infrastructure, supply chain and the products they manufacture. To protect the ... Read More
Targeted Spear-Phishing on the Rise
The pandemic has presented many challenges for cybersecurity, especially COVID-19-related phishing attempts targeting employees working from home. However, security experts speaking at the Exabeam Spotlight20 virtual conference warned of an increase in spear-phishing and account takeover attacks. “After we closed, which was mid-March, it was initially pretty quiet, but in ... Read More
Identity Verification: Is Your Potential Employee Who They Say They Are?
Identity verification has taken on a new urgency for cybersecurity and IT teams in the new era of remote work. Confirming a person’s identity has been important since the advent of data privacy laws and the need to verify those requesting to see their personal data or the right to ... Read More
Remote Insider Data Theft Worries Financial Industry
As the pandemic rages on, more companies are concerned about the growing risk of insider theft Remote work has changed the cybersecurity landscape and has required IT and security staff to rethink where the greatest risks are with a WFH employee base versus onsite. A year ago, who would have ... Read More
Cyber Awareness Training a Must for Third-Party Contractors
Many, if not most, organizations rely on outside contractors. But most may not know the threat they can pose to your network and data. According to new research from ISN, only 23% of contractors reported they require cybersecurity awareness training and only 25% have defined criteria to report a cyber ... Read More
The CISO’s Role in Improving PCI DSS Compliance
The Payment Card Industry Data Security Standard (PCI DSS) has been around in one form or another for more than 20 years. Protecting consumers from potential credit card fraud has taken on new focus during the pandemic as many companies are forced to rely on e-commerce to remain viable and ... Read More
