Topic
Risk & Security

Firmware Flaws Put Laptops at Risk
Attackers are always seeking new ways to infiltrate endpoints. Today they're targeting system firmware. Here's what you need to know.

Why Workers Violate Cybersecurity Policies
Some cybersecurity risks cannot be solved with technology. This is one of them. And it’s more predictable (and fixable) than you might think.

Survey by Harvard Business Review Analytics Services Reveals a Communications Breakdown in Risk Reporting
New Harvard Business Review Analytic Services report sponsored by Tanium shows organizations are struggling to measure and monitor cyber risk.

Spring4Shell Vulnerability: Critical Details and How to Protect Your Organization
Named CVE-2022-22965, this vulnerability in the widely used Spring Framework has substantial exploit potential.

Spring4Shell and Other Bugs Make Patching Top Priority for Business
This week’s Spring4Shell and other high-profile hack alerts underscore the need for automated patch management. Here’s your 101.

Why Organizations Need to Patch a Critical Zero-Day in Chrome
A new vulnerability has been found in both Chrome and Microsoft’s Chromium-based Edge products. Here's what you need to know.

The Future Is Passwordless
Enterprises are (finally) trading passwords for biometrics, multifactor authentication and single-sign-on tools. Here’s why.

How the Ukraine War Impacts Cybersecurity Insurance
As insurance companies review and rewrite their war exclusion clauses, enterprises must double down on proactive cyber hygiene.

Survey: The Risks of the Cybersecurity Talent Gap Are Getting Worse
With President Biden warning this week that Russian cyberattacks on U.S. businesses are “coming,” a new ISACA survey lays bare the latest (sobering) data points.

What Latanya Sweeney Knows About Data Privacy Will Trouble You
The Harvard professor and data privacy pioneer will speak at this week’s Women in Cybersecurity conference about cyber problems we’re still not addressing.

The Strengthening American Cybersecurity Act Aims to Fix Critical Gaps
The Senate just passed the most significant cybersecurity legislation in U.S. history. Here are three ways to prep.

Shining a Light on Dark Patterns and Personal Data Collection
Enterprises use dark patterns to trick us into giving up sensitive data. That puts pressure on them to track and protect that data.