Doug Bonderud

Writer

Doug Bonderud is an award-winning writer who bridges the gap between complex and conversational across technology, innovation and the human condition.

Incident Response August 16, 2023

SIEM and SOAR in 2023: Key trends and new changes

4 min read - Security information and event management (SIEM) systems remain a key component of security operations centers (SOCs). Security orchestration, automation, and response (SOAR) frameworks, meanwhile, have emerged to fill the gap in these capabilities left by many SIEM systems. But as…

Risk Management July 31, 2023

Spend to save: The CFO’s guide to cybersecurity investment

4 min read - Attack volumes are up, and attackers are finding new ways to compromise corporate security. According to the HackerOne 6th Annual Hacker-Powered Security Report, ethical hackers found 65,000 vulnerabilities in 2022. What’s more, 92% of hackers said they could pinpoint weaknesses…

Risk Management July 10, 2023

CSC report: Space systems should be critical infrastructure

4 min read - In 2013, Presidential Policy Directive (PPD) 21 established 16 critical infrastructure sectors responsible for providing essential services that underpin American society. These services are not only vital to the country’s safety and prosperity but are inherently tied to public confidence.…

Cloud Security June 20, 2023

As data gravity goes up, are clouds becoming black holes?

4 min read - The more data in one place, the more data it attracts. This “data gravity” is a familiar function for enterprises, even if the term isn’t. As the number of applications hosted on local servers increases, so too does the amount…

Intelligence & Analytics June 15, 2023

Going up! How to handle rising cybersecurity costs

4 min read - The average cost of cybersecurity systems, solutions and staff is increasing. As noted by research firm Gartner, companies will spend 11% more in 2023 than they did in 2022 to effectively handle security and risk management. This puts companies in…

Intelligence & Analytics March 30, 2023

And stay out! Blocking backdoor break-ins

4 min read - Backdoor access was the most common threat vector in 2022. According to the 2023 IBM Security X-Force Threat Intelligence Index, 21% of incidents saw the use of backdoors, outpacing perennial compromise favorite ransomware, which came in at just 17%. The…

Risk Management March 24, 2023

New attack targets online customer service channels

4 min read - An unknown attacker group is targeting customer service agents at gambling and gaming companies with a new malware effort. Known as IceBreaker, the code is capable of stealing passwords and cookies, exfiltrating files, taking screenshots and running custom VBS scripts.…

Risk Management March 21, 2023

OneNote, many problems? The new phishing framework

4 min read - There are plenty of phish in the digital sea, and attackers are constantly looking for new bait that helps them bypass security perimeters and land in user inboxes. Their newest hook? OneNote documents. First noticed in December 2022, this phishing…

Incident Response March 9, 2023

What is a red teamer? All you need to know

4 min read - A red teamer is a cybersecurity professional that works to help companies improve IT security frameworks by attacking and undermining those same frameworks, often without notice. The term “red teaming” is often used interchangeably with penetration testing. While the terms…

Risk Management February 28, 2023

Zero-day exploits: The anatomy of unexpected attacks

4 min read - Zero-day attacks are on the rise. Not only was 2021 a record-breaking year for the total number of zero-day attacks, but it also accounted for 40% of the zero-day breaches over the last decade. In part, this race to zero…

Mobile Security January 26, 2023

Third-party app stores could be a red flag for iOS security

4 min read - Even Apple can’t escape change forever. The famously restrictive company will allow third-party app stores for iOS devices, along with allowing users to “sideload” software directly. Spurring the move is the European Union’s (EU) Digital Markets Act (DMA), which looks…

Data Protection January 26, 2023

Defensive driving: The need for EV cybersecurity roadmaps

4 min read - As the U.S. looks to bolster electric vehicle (EV) adoption, a new challenge is on the horizon: cybersecurity. Given the interconnected nature of these vehicles and their reliance on local power grids, they’re not just an alternative option for getting…

Failed to load data

Analysis and insights from hundreds of the brightest minds in the cybersecurity industry to help you prove compliance, grow business and stop threats.

Cybersecurity News By Topic By Industry Exclusive Series Threat Research Podcast Events Contact About Us

Security Intelligence

{{title}}

{{title}}

{{title}}

{{title}}

Topics

Doug Bonderud

SIEM and SOAR in 2023: Key trends and new changes

Spend to save: The CFO’s guide to cybersecurity investment

CSC report: Space systems should be critical infrastructure

As data gravity goes up, are clouds becoming black holes?

Going up! How to handle rising cybersecurity costs

And stay out! Blocking backdoor break-ins

New attack targets online customer service channels

OneNote, many problems? The new phishing framework

What is a red teamer? All you need to know

Zero-day exploits: The anatomy of unexpected attacks

Third-party app stores could be a red flag for iOS security

Defensive driving: The need for EV cybersecurity roadmaps

{{{title}}}