Topic
Risk & Security

CISA: Federal Agencies Must Urgently Patch Log4j Vulnerability
Patching high-risk vulnerabilities, and doing it quickly, is essential. But it is not always easy. Here's where to start.

Taming Supply Chain Risks in the Wake of the Log4j Vulnerability
The latest cyber bug shows how a lack of visibility into third-party software continues to plague organizational networks. Here's how to protect yourself.

The Log4Shell Hack Proves 2021 Is Not Yet Done With Us
This year has seen some of the worst cyber hacks in history. Here's what we need to learn from them.

Federal Funding to Boost State and Local Cybersecurity
The new infrastructure law offers state and local governments $1 billion for cybersecurity. Here’s why lawmakers must grab that money—but may not.

Should Ransomware Payments Be Illegal?
Proposed laws banning ransomware payouts are a topic of hot debate. Megan Brown, a former counsel to the U.S. attorney general, says laws won’t work.

Fed’s Cybersecurity Directive Spotlights Aging Networks
U.S. cybersecurity officials have directed federal agencies to patch hundreds of known vulnerabilities. That's a start. Here’s what else they need to do.

EDR Products (Alone) Will Not Secure Federal Agencies
There’s a key difference between EDR products and processes, and not knowing what it is can spell disaster for your organization. Learn more here.

Ex-Defense Chief on Cybersecurity: 'We Are Our Own Worst Enemy'
Former Defense Secretary Ash Carter speaks out about what the U.S. could—and should—do to protect itself from nation-state cyberattacks.

Biden Administration Orders Agencies to Patch Hundreds of Cyber Flaws
With the Biden Administration cybersecurity directive, federal agencies must act fast to fix nearly 300 active cybersecurity vulnerabilities. Here’s how.

What a Cyber Assault on Our Power Grid Will Look Like
A simulated cyber assault on North American utilities will be a major test for CISOs, policymakers, and law enforcement. Here’s a look at what they'll face.

U.S. Defense Contractors Harden Their Cyber Battle Plans
As defense contractors face complex threats from nation-states, cybercriminals and hacktivists, one simple strategy is proving essential: cyber hygiene.

Companies Scramble to Find CISOs Amid Rise in Hacking Threats
Top CISOs are hard to find these days, and even harder to hire. As the role changes, so are candidate demands. Here's what you need to know.