Skip to main content

Topic

Risk & Security

Russia’s Cyberwar Targets Western Critical Infrastructure

Cyberattacks on power grids, communications networks, and water treatment plants are happening across the globe. The best defense? Better cyber hygiene.

How CISOs Can Talk Cyber Risk So That CEOs Actually Listen

Getting business and security leaders on the same page starts with learning to speak the same language. Here are the first three steps.

How Tanium Can Help With the Log4j Vulnerability

Log4j is a popular open-source logging utility used by millions of Java applications. The underlying “improper input validation” flaw (CVE-2021-44228) has been dubbed “Log4Shell.”

Featured image: Develop a Cybersecurity Action Plan: Understanding IT Risk Management

Part two in this series on how to create and deploy an action plan that strengthens your organization’s cyber defenses.

Firmware Flaws Put Laptops at Risk

Attackers are always seeking new ways to infiltrate endpoints. Today they're targeting system firmware. Here's what you need to know.

Why Workers Violate Cybersecurity Policies

Some cybersecurity risks cannot be solved with technology. This is one of them. And it’s more predictable (and fixable) than you might think.

Survey by Harvard Business Review Analytics Services Reveals a Communications Breakdown in Risk Reporting

New Harvard Business Review Analytic Services report sponsored by Tanium shows organizations are struggling to measure and monitor cyber risk.

Spring4Shell Vulnerability: Critical Details and How to Protect Your Organization

Named CVE-2022-22965, this vulnerability in the widely used Spring Framework has substantial exploit potential.

Spring4Shell and Other Bugs Make Patching Top Priority for Business

This week’s Spring4Shell and other high-profile hack alerts underscore the need for automated patch management. Here’s your 101.

Why Organizations Need to Patch a Critical Zero-Day in Chrome

A new vulnerability has been found in both Chrome and Microsoft’s Chromium-based Edge products. Here's what you need to know.

The Future Is Passwordless

Enterprises are (finally) trading passwords for biometrics, multifactor authentication and single-sign-on tools. Here’s why.

How the Ukraine War Impacts Cybersecurity Insurance

As insurance companies review and rewrite their war exclusion clauses, enterprises must double down on proactive cyber hygiene.