Podcast: Reducing Third-Party Risk
Third-party providers are now essential to enterprise security — but how can organizations manage the growing threat of third-party risk?
From the Streets to the SOC: 3 Risk Assessment Potholes to Avoid in the Enterprise
While risk assessment is a regular topic of conversation today, when it comes to practicing good risk estimations and decisions in our daily lives, humans have some serious shortcomings.
Attack Campaign Exploits CVE-2019-2725, Abuses Certificate Files to Deliver Monero Miner
Researchers observed an attack campaign exploiting CVE-2019-2725 and abusing certificate files to deliver a Monero miner.
BlackSquid Malware Capable of Abusing 8 Exploits to Install XMRig Monero Miner
The new BlackSquid malware is capable of abusing eight notorious exploits in its attempts to install the XMRig Monero miner.
Third-Party Risks Need New Approaches
Businesses need to adopt a strategic approach to managing third-party risks that provides an integrated view of the vendor relationship process.
The Cybersecurity Industry’s Third-Party Risk Management Problem Is Rooted in Visibility
Only one-third of organizations feel their processes for third-party risk management are effective. The root of the issue lies in visibility and ineffective process.
Latest Emotet Variant Wielding Connected Devices as First-Layer C&C Servers
A new variant of the Emotet banking malware is using compromised connected devices as first-layer command-and-control (C&C) servers.
To Move Forward Securely, Look Backward With Ongoing Risk Assessments
If we focus on the future at the expense of performing risk assessments to maintain defenses against existing threats, we will always be one step behind attackers.
Researchers Uncover Highly Exploitable WinRAR Bug That Puts 500 Million Users at Risk
More than 100 unique exploits of a WinRAR bug have been identified since security researchers discovered a 19-year-old vulnerability in the file compression system.
What Have We Learned About Data Protection After Another Year of Breaches?
In 2018, data protection became top of mind for organizations around the world. What lessons can we draw from to help improve regulatory compliance, data breach protection and risk management in 2019?