Risk Management January 23, 2023

Log4j Forever Changed What (Some) Cyber Pros Think About OSS

4 min read - In late 2021, the Apache Software Foundation disclosed a vulnerability that set off a panic across the global tech industry. The bug, known as Log4Shell, was found in the ubiquitous open-source logging library Log4j, and it exposed a huge swath…

Zero Trust September 14, 2022

Old Habits Die Hard: New Report Finds Businesses Still Introducing Security Risk into Cloud Environments

4 min read - While cloud computing and its many forms (private, public, hybrid cloud or multi-cloud environments) have become ubiquitous with innovation and growth over the past decade, cybercriminals have closely watched the migration and introduced innovations of their own to exploit the…

Data Protection April 18, 2022

The Next Frontier for Data Security: Protecting Data in Use

9 min read - Tremendous progress has been made over the last several years to protect sensitive data in transit and in storage. But sensitive data may still be vulnerable when it is in use. For example, consider transparent database encryption (TDE). While TDE…

Data Protection December 17, 2021

Why We Need To Beat ‘Breach Fatigue’ — At Work and at Home

4 min read - Data breaches come at such a fast pace that the public doesn’t seem to pay attention to the latest incidents, or they’re practically forgotten in a week — just in time for the next breach to make headlines. Instead of…

Data Protection November 29, 2021

What the SEC Requires From Businesses After a Data Breach

4 min read - Consumers have become wary of data breaches and the decreased safety of their personal information. However, the cost of a data breach is no longer only a matter of money and your company’s good name. There is now a third…

Data Protection November 3, 2021

Report: Cost of a Data Breach in Energy and Utilities

4 min read - On average, the cost of a data breach rose by 10% from 2020 to 2021. The energy industry ranked fifth in data breach costs, surpassed only by the health care, financial, pharmaceutical and technology verticals, according to the 17th annual…

Data Protection October 15, 2021

What Happens to Information After a Data Breach?

6 min read - We’ve grown accustomed to it by now — a few million accounts broken into here, another hundred million there. After a company data breach, what happens to all the data? Where does it go? And how does this impact your…

News September 29, 2021

High-Severity Vulnerabilities Now Take Nearly 250 Days to Remediate, Survey Finds

2 min read - Businesses and agencies today are spending an average of about 250 days to remediate high-severity risks, NTT Application Security found. This length of time gives attackers nearly a year in the target network. From there, they can misuse security weaknesses…

Application Security August 20, 2021

Behavior Transparency: Where Application Security Meets Cyber Awareness

3 min read - How can you tell when software is behaving strangely if you don’t know what the right behavior is? That’s an important question when it comes to threat actors. After all, attackers often hijack honest software, networks and systems for dishonest…

Cloud Security August 6, 2021

Spend Wisely (Not Just More) to Become Cyber Resilient

2 min read - Spending on cybersecurity is hitting record highs. And that makes sense. Because of big changes in how work gets done (plus the rising cost of breaches and attacks, like ransomware), companies are spending more than ever. But simply throwing money…