Why Corporate Leaders Must Secure the Wild West of the Metaverse

RSA Conference 2022: What Makes Security Programs Successful?

An upcoming panel at this week’s RSA Conference 2022 reviews a new security outcomes study. Cyentia Institute’s Wade Baker has your sneak peek at the numbers.

RSA Conference 2022: The Jetsons Meet the Security Team

One panel at the RSA Conference 2022 looks at the best ways companies can harness future technological disruption while also making cyber hygiene a priority.

State CISOs to Feds: Show Us the Money

States are waiting for $1 billion in federal cybersecurity grants. Here’s what they need to know now to move fast when those infrastructure funds become available.

Russia’s Cyberwar Targets Western Critical Infrastructure

Cyberattacks on power grids, communications networks, and water treatment plants are happening across the globe. The best defense? Better cyber hygiene.

Why Collaboration Software Is the Next Frontier for Hackers

Cyberattacks through hybrid-workplace tools like Slack, Zoom, and Teams are wreaking havoc on corporate networks. Security executives need to up their game.

How CISOs Can Talk Cyber Risk So That CEOs Actually Listen

Getting business and security leaders on the same page starts with learning to speak the same language. Here’s why it’s time to ditch the cyberspeak.

To Bridge the Skills Gap, Change the Face of Cybersecurity

Given the recent rash of cyberattacks, it’s time for executives to get even more creative in bridging the gap between supply and demand in the security workforce.

Firmware Flaws Put Laptops at Risk

Attackers are always seeking new ways to infiltrate endpoints. Today they're targeting system firmware. Here's what you need to know.

5 Steps to a Rock-Solid Incident Response Plan

CEOs don’t need to know the technical details about how to respond to cybersecurity incidents. But they do need to spearhead a plan that makes them ready for anything.

Cryptojacking: How to Stop Coin Miners From Hitting Your Network

As interest in cryptocurrency grows, coin mining attacks—called “cryptojacking”—are increasing in frequency and severity, threatening enterprises. Here’s how to fight back.

What Is Converged Endpoint Management?

The old tool-centric take on cybersecurity has become a liability. Enterprises must view tools and data through a single pane of glass. Here’s how.

Why Workers Violate Cybersecurity Policies

Some cybersecurity risks cannot be solved with technology. This is one of them. It’s tied to productivity. And it’s more predictable (and fixable) than you might think.

The Growing Need to Unify IT and Security

The long-standing feud between IT and security obscures what the two departments have in common. Namely, a visibility problem. To solve it, they’ll need to join forces.

Spring4Shell and Other Bugs Make Patching Top Priority for Business

The dangers of the Spring4Shell hack are not yet clear, but business leaders must take time to review patch protocols and other cyber hygiene basics.

A Wave of Ukraine Crypto Phishing Scams May Get Workers Fired

Hackers posing as Ukraine-refugee charities are flooding in-boxes with email. Meanwhile, enterprises are cracking down on worker cybersecurity mistakes. It’s a dangerous combination. Here’s what employers can do.

The Future Is Passwordless

Many leading tech companies are (finally) ditching the humble username and password. Somewhere, Bill Gates is saying “I told you so.”

Survey: The Risks of the Cybersecurity Talent Gap Are Getting Worse

With President Biden warning this week that Russian cyberattacks on U.S. businesses are “coming,” a new ISACA survey lays bare the latest (sobering) data points.

How the Ukraine War Impacts Cybersecurity Insurance

As insurance companies review and rewrite their war exclusion clauses, enterprises must double down on proactive cyber hygiene.

What Latanya Sweeney Knows About Data Privacy Will Trouble You

The Harvard professor and data privacy pioneer will speak at this week’s Women in Cybersecurity conference about cyber problems we’re still not addressing.

5 Strategies State CIOs Can Use to Transform Their Workforce

Even without additional money or resources, state CIOs can do more with less.

As Cyber Crisis Mounts, CISOs and Boards Must Learn to Communicate

There is an urgent need for clear communication between enterprise security teams and business leaders. Former national cybersecurity commissioner and seasoned board director Maggie Wilderotter knows how to walk that talk.

The Strengthening American Cybersecurity Act Aims to Fix Critical Gaps

The newly passed Senate act is the most significant cybersecurity legislation in U.S. history. Here’s how CEOs and CIOs should start preparing.

Making Every Day International Women’s Day in Cybersecurity

Getting more women into tech is not just good business, it’s a national security priority.

Every Employee Must Now Be Part of the Cybersecurity Team

As Western governments prepare for Russian cyberattacks, some U.S. states are leading the way to greater cyber-resilience.

Shining a Light on Dark Patterns and Personal Data Collection

ISACA adviser Safia Kazi on the ways companies trick you into sharing personal data, the need to protect that data, and why we need more women in tech.

The Russo-Ukrainian Conflict Shows Why Threat Hunting Teams Are Now Critical

As the explosive events in Ukraine prove, for government and enterprise alike, there’s never been a more critical time to rely on threat hunters. Here’s how to build your squad.

5 Ways to Prepare for Cyberwarfare

As the West responds to Russia’s invasion of Ukraine and braces for retaliatory cyberattacks, organizations around the world are assessing supply chain risks, patch management plans, and other cyber hygiene protocols.

What CISA’s Incident Response Playbooks Mean for CISOs

Rand Corporation researcher and Washington insider Quentin Hodgson lays out why private enterprise should be just as interested as the feds in CISA’s strategy to combat hackers.

Are Metaverse Meetings the Answer to Better Employee Engagement?

In the first of our “Meeting the Metaverse” series, we explore the critical need to boost worker morale and the newest ways CEOs and CIOs are doing it—virtually.

The Best Cybersecurity Conferences in 2022

A constant flow of new threats makes staying on top of trends—like zero trust, supply chain security, and compliance issues—more important than ever.

What Is Sensitive Data Monitoring?

As cybercriminals try to gain access to personal and sensitive organizational data, it has become critical for organizations to safeguard the data they’re entrusted with.

Data-Security ‘Regulation Sprawl’ Puts Multinationals Under Pressure

Real-time risk monitoring is a critical piece of the compliance puzzle.

What Is Device Vulnerability Management?

Device vulnerability management uses specialized tools to monitor an organization’s devices and detect and resolve configuration issues that could open it to cyberattack.

How Deep Learning Is Rewriting the Rules of Cybersecurity

A conversation with Deep Instinct’s Guy Caspi on how his company is deploying the most crucial new weapon in the digital security arsenal.

Remote Work Increases Data Privacy Concerns

As Data Privacy Day rolls around—on Jan. 28—companies are struggling to find data-security professionals, just when they need them most.

3 Cyber Hygiene Practices That Federal CISOs Must Adopt

With these strategies in place, security leaders can harden their defenses while meeting the federal government’s tough new requirements.

State Agencies Play Catch-Up on Cybersecurity

Here’s how I set cybersecurity strategy for the state of Arizona—and why others should follow our lead.

What the Past Can Teach CISOs About the Future

As savvy business and tech leaders try to get ahead of threats in 2022, the need for risk assessment is urgent.

Cyber Threats to K-12 Remote Learning: One District Fights Back

Ransomware hacks are up dramatically at schools. But with a proactive approach, a British Columbia district of 25,000 students has created a more secure learning environment.

6 Cybersecurity Priorities for 2022

The FTC plans to pursue companies that fail to patch the Log4j vulnerability. For CISOs, that’s just one concern.

Log4j Vulnerability: CISOs Face 2022 in Crisis Mode

Organizations must immediately protect computer systems from accelerating hacks. That means new patches and a more customized approach to patching overall.

CISA: Federal Agencies Must Urgently Patch Log4j Vulnerability

Patching high-risk vulnerabilities, and doing it quickly, is essential. But it is not always easy. Here’s where to start.

Universal Broadband Must Include Cyber Hygiene Practices

As states tap into Covid-19 emergency funds to increase broadband coverage and boost digital citizen services, they need to bake cybersecurity into their efforts.

Taming Supply Chain Risks in the Wake of the Log4j Vulnerability

The latest cyber bug shows how a lack of visibility into third-party software continues to plague organizational networks. Here's how you can protect yourself.

Digital Transformation Requires Security Transformation

Technology can transform a company—but only if it changes processes and deploys people in secure ways.

The Log4Shell Hack Proves 2021 Is Not Yet Done With Us

This year has seen some of the worst cyber hacks in history. Here's what we need to learn from them.

6 Charts That Show What Is and Isn’t Working in Endpoint Security

The massive shift to remote work has increased the complexity of securing endpoints. A new survey details the wins and losses and points the way forward.

Federal Funding to Boost State and Local Cybersecurity

With $1 billion in infrastructure spending, the nation’s patchwork of state and local governments is about to get a major security boost.

Should Ransomware Payments Be Illegal?

Megan Brown, a former counsel to the U.S. attorney general, parses the complex ethical, logistical, and regulatory aspects.

Bridging the Gender Gap in Cybersecurity Will Keep Us Safer

Cybersecurity has a ways to go before the gender scales are balanced, but with a woman at the helm of CISA, a tipping point may be approaching.

Fed’s Cybersecurity Directive Spotlights Aging Networks

U.S. cybersecurity officials have directed all federal agencies to patch hundreds of known vulnerabilities. That’s just a start. Here’s what else they need to do.

Keep Your 5G Attack Space in Check

The new technology promises high speeds, enhanced productivity, and a turbo-charged economy. It will also have three threat vectors. Here's how to address them.

EDR Products (Alone) Will Not Secure Federal Agencies

National cybersecurity should not be left to a set-it-and-forget-it tool.

Ex-Defense Chief on Cybersecurity: 'We Are Our Own Worst Enemy'

Ash Carter speaks out about what the U.S. could—and should—do to protect itself from nation-state cyberattacks by Russia, China, Belarus, and others.

Biden Administration Orders Agencies to Patch Hundreds of Cyber Flaws

Federal agencies must act fast to fix nearly 300 active cybersecurity vulnerabilities. Here’s how.

4 Simple Ways Security Ops Can Thrive With Hybrid Work

With no clear consensus emerging over the future of working routines, there’s no better time to look at ways to enhance support for your employees and their productivity.

Security at the Speed of Digital Transformation

As organizations digitize, cybersecurity must keep pace.

The Big Quit: Why Cybersecurity Pros Are Leaving Government

Public-sector cybersecurity workers are frustrated by the lack of government investment and the bureaucratic slowness to innovate.

What a Cyber Assault on Our Power Grid Will Look Like

Ahead of a simulated attack on the North American energy grid, utilities should review their cyberdefenses and ensure their networks have maximum protection year-round.

U.S. Defense Contractors Harden Their Cyber Battle Plans

To combat cyberwarfare and to manage industry protocols, suppliers look to cybersecurity best practices.

See What You Can Do With 80,000 Volunteer Hours

Remote employees are a multiplier of good in their communities, volunteering with kids, food banks, and the elderly. Here’s how to visualize one workforce’s efforts.

Companies Scramble to Find CISOs Amid Rise in Hacking Threats

Chief information security officers are in big demand, commanding top salaries and a direct line to the CEO. Here’s what employers and candidates need to know.

EDR Is Not a Silver Bullet Against Cyber Threats

Endpoint detection and response (EDR) platforms have given many organizations a false sense of security. Here’s where EDRs fall short and how you can improve your cyber readiness.

3 Ways to Help Employees Combat Pandemic Stress

World Mental Health Day is a time for organizations to assess their workers’ needs.

To Engage Employees, Give Back to Their Communities

With massive distributed workforces, and robust bottom lines, the tech industry has a chance this year to impact countless communities. Here’s how one company does it.

Big Enough to Hack

Poor cyberdefense and a business-critical need to keep operations running have put SMBs squarely in the sights of ransomware hackers.

6 Tips for Shielding Your Organization From Rising Cybercrime

October is Cybersecurity Awareness Month. Now is the time to check your virtual locks.

How Enterprise Is Facing Up to Ransomware

A new survey shows which industries are winning, and which are losing, the ransomware showdown, and how best to fight back.

What Is Threat Hunting and Why Does It Matter?

Cyber Risk Scores Should Be More Than Just a Number

Organizations need real-time and actionable data to prevent and mitigate cyberattacks.

How to Get Out of Technical Debt

A lack of modern technology can not only hinder an organization’s ability to be agile and innovative. It can also threaten a company’s security posture.

How NPower Creates Pathways to Prosperity

The tech-training nonprofit blends education and partnerships to place students in jobs.

Urgent Lessons From the T-Mobile Data Breach

A hacker says he broke into the carrier’s network through a router and then ransacked its servers. Here are five ways to stop that from happening to you.

The Art of Ransomware Negotiation

How top negotiators work with clients, insurers, and lawyers to limit payments.

The Most Cyber-Savvy Lawyer Around

Stewart Baker, former policy wonk for the Department of Homeland Security, discusses today’s cybersecurity challenges and how enterprises should face them.

5 Steps for Evaluating Cybersecurity Before an Acquisition

Financial due diligence has long been table stakes in mergers and acquisitions. Increasingly, cybersecurity needs a seat at that table.

Cybersecurity Tops Energy Regulator Concerns

The nation’s power grid watchdog says in a new report that cyber threats are a critical challenge to energy reliability. But basic cyber hygiene can help.

What Is a Cyber Risk Score?

5 Charts That Explain IT's Crisis of Visibility

Asset visibility and tool sprawl are two of the top issues bedeviling enterprises and putting business resilience at risk, according to a new IDG survey.

More E-commerce, More Cybersecurity Problems

As e-commerce continues to boom, a patchwork of legacy technology is leading to corporate cybersecurity vulnerabilities and hindering resilience.

Cyber Insurance Isn't Your Best Protection Against Cyberattacks

Insurance companies are raising premiums and tightening policies in response to ballooning ransomware payouts. Instead of paying top dollar for premiums, review your cyber hygiene practices and know your risk score.

To Improve Cybersecurity, Empower Your People

Ransomware attacks on U.S. industries have underscored the need for better security tools and procedures. What’s often missing: supporting your employees.

Why We're Still Debating an NTSB for Cyberattacks

Not everyone agrees on how a national cyber incident review board will work or how effective it might be.

What Is Cyber Hygiene and Why Does It Matter?

To Strengthen Cybersecurity, Let's Support Our Tech Teachers

IT and cybersecurity departments are awash in tools, complexity—and empty seats. The Computer Science Teachers Association aims to fill those tech jobs.

Why Cybercriminals Target Small Utilities

Cyberattacks on small utilities and energy companies can have an outsize impact on communities and the nation’s electric grid. Here’s what they need to do right now.

With Great Growth Comes Great Data Responsibility

Fintech firms must safeguard a prized asset—customer financial data. To keep data out of the reach of cybergangs targeting the sector, fintechs must embrace cyber hygiene.

Improving the Digital Employee Experience

Claus Jensen, chief innovation officer at Teladoc Health, says IT must follow these 4 approaches to engage workers.

How Oracle Sees the Future of Enterprise Cloud Computing

The pandemic fast-tracked cloud migration, enabling remote work and underpinning global supply chains. Oracle’s Dave Profozich shows us the way forward.

Cybersecurity and Climate Change: The Dual Challenges Facing Energy CIOs

As wildfires burn the West and consumers brace for blackouts, energy CIOs race to install and secure the renewable energy that can prevent these crises.

Cyber Hygiene 101

After a supply chain attack hit software provider Kaseya, infecting some 1,500 downstream organizations, companies are inspecting their cyber hygiene practices.

Bodies Electric: The Promise of 6G Wireless Technology

In the wake of massive ransomware attacks, researchers, governments, and businesses imagine a secure 6G future.

How Code.org Is Teaching the World's School Kids to Code

Hadi Partovi, founder of the global education nonprofit, explains why computer science learning is key to securing the future.

Moving Healthcare Workloads to the Cloud

It’s time for the industry to embrace its digital future.

Texas' Former CIO Says States Must Help Battle Ransomware

Leaving states out of the national cyber conversation, says Karen Robinson, is a mistake as big as the Lone Star sky.

How Global Power Leader Cummins Embraces Cyber Hygiene

For the head of cybersecurity at this government and consumer engine maker, endpoint visibility fosters regulatory compliance, learning, and security.

Turning Alert Fatigue Into Alert Awareness

Security operations centers must learn to tame the constant signals that bedevil security analysts with too many false alarms. Here are 5 ways to do that.

How Tanium Is Building the Future of Work

Joey Martinez, who oversees Tanium’s workplace design, explains the company’s new hybrid office model, which includes desk-booking, wellness rooms, and “coding caves.”

CEOs at the Crossroads

The pandemic sped up digital transformation. Now is no time to slow down.

Europe’s Hefty Regulatory Fines Are Roaring Back

For US companies, that means a renewed emphasis on protecting their customers’ and their partners’ data.

5 Ways Your Company Can Avoid Becoming a Headline

As ransomware attacks hit U.S. businesses and infrastructure, CEOs are finding themselves in the hot seat, with federal regulators asking: What have you learned?

Cybersecurity Conferences You Shouldn’t Miss in 2021

A wave of crippling ransomware attacks makes these conferences must-attend events for all business leaders.

How to Respond to a Data Breach

After several devastating cyberattacks on U.S. businesses, incident response strategies are getting new respect.

It's 2021: Your Help Desk Needs Help

Workers are demanding a frictionless, consumer-grade experience. Automation is here to deliver that.

Corporate Boards Must Lead on Cybersecurity

Maggie Wilderotter, the former Frontier Communications CEO, says boards must provide security oversight to avoid a breach.

How CIOs Will Drive the Next Digital Health Revolution

Veteran CIO Phil Fasano says healthcare CEOs, tech leaders and boards must continue to innovate to drive business and improve patient outcomes.

The U.S. Ransomware Crisis Can Be Solved

But first, says security expert Katie Nickels, companies and government agencies must start talking to each other.

Meet The Man Who Can Help Prevent a Cyber Disaster

Frank Cilluffo offered national security guidance following the 9/11 attacks. Today, he is reimagining public-private structures that will protect the U.S. from cyberattacks.

The Pandemic Made CISOs Mission-Critical. Here’s How They Can Maintain Their Status.

Lauded as heroes during the COVID-19 crisis, these leaders must continue to drive business outcomes.

It's Time to Fix America’s Cyber Infrastructure, Too

The cyberattack on Colonial Pipeline proves the nation’s digital infrastructure needs fixing as much as its physical counterpart.

Here's How I Prevent Employee Burnout

Long hours, constant threats, and alert fatigue are taking a toll on cybersecurity professionals. We adopted a new workflow process—and secured our work-life balance.

Why We Still Need World Password Day

Despite predictions to the contrary, passwords are here to stay. Follow these four steps to strengthen passwords so they become a security asset rather than a liability.

What the Biden Executive Order Means for Tech Executives

Recent cyber attacks have provoked massive change in how the government responds to nation-state hacks.

Your Firmware Is A Wide Open Back Door

Attackers are always seeking new ways to infiltrate endpoints. Today they're targeting system firmware.

The Executive Order That Will Create Cyber Resilience

A White House directive is aimed at strengthening software security standards, breach notifications, and information sharing. Here’s how CISOs are preparing.

How CIOs Can Prevent Employee Burnout

IT leaders need to find ways to make workloads and stress more manageable, even as people return to the office.

Four Industries That Are Ready for What’s Next

A recent survey shows how IT decision-makers in finance, healthcare, retail, and manufacturing are boosting business resilience with technology

Tool Sprawl Threatens Post-Pandemic Security

CISOs must devise creative ways to counter rogue software and improve IT visibility

How Government CIOs Can Play Tougher D

In the wake of SolarWinds, public agencies must double down on fundamentals.

How to Block Lateral Movement in Cyber Attacks

Once hackers gain a foothold in an enterprise, their next move is often to push deeper into IT systems. Here’s how to stop them.

5 Charts That Explain Where IT Spending Is Headed

Key takeaways from senior IT and business leaders

Supply Chain Risks to the Vaccine Rollout

Healthcare CIOs Must Pair Automation With Security

Technology that is essential to patient care and hospital workflows, is often left vulnerable. Here are ways to fix that.

A Pandemic Dividend on Cybersecurity & Risk Management for CISOs

COVID-19 has challenged CISOs like never before. It is also fostering new forms of executive and cultural support.

How IT Decision-Makers Will Lead in 2021

The pandemic challenged and then empowered IT organizations. Here's where they're headed next.

It’s Time to Stop Settling for Bad Data

While tech teams enable the data collection and automation that drive the rest of the business, their own data practices have lagged. Let’s change that.

The Case for Sunsetting the VPN

The remote-access technology that workers love to hate may have met its match with COVID-19

What Is Data Privacy Management?

The Promise (and Security) of Private 5G

For ultra-complex enterprises, new private 5G networks offer the technology’s benefits and beefier endpoint security.

What Is Incident Response?

What Is Performance Monitoring?

Cybersecurity’s Next Generation

CISOs are tapping new pipelines of talent. Recent hires reflect a greater diversity of skills and backgrounds.

What Is Endpoint Security?

What Is Security Configuration Management?

What Is Software Management?

What Is Configuration Management?

Four Predictions About 5G From Qualcomm's Next CEO

Cristiano Amon talks smart factories, AI at the edge, and enterprise innovation.

It's Time to Ditch the VPN for Zero Trust

Google security expert Anton Chuvakin on how IT teams need to rethink network security strategies.

Digital Transformation, COVID-19 and the Future of Work

A conversation with Accenture Executive Chairman David Rowland.

Adobe Flash Is Dead. But Other Insecure Apps Are Out There Waiting to Cause Mayhem.

Here's what you need to know to monitor, patch and keep those apps up to date throughout their lifecycle, including their natural end of life.

How Endpoint Security Can Mesh with Rapid Digital Transformation

Endpoint management is key to shrinking the threat landscape during rapid technological change.

5 Ways to Secure and Streamline the WFH Supply Chain

Last year, IT departments scrambled to get employees set up for remote work. Now they need to improve security and lower costs.

Why Security and Automation Belong Together

Security teams are understaffed, overworked and leaving their jobs more rapidly than ever before. Automation can help ease their pain.

Why Endpoint Security Is an Urgent Priority for Small Enterprise

Now the prime targets of cybercriminals, SME security teams need to get scrappy while IT budgets are tight.

To Close the Cybersecurity Skills Gap, Companies Are Getting Creative

How new strategies—and in at least one case, TV’s Dexter—are helping CISOs deepen a critical talent pool.

Telehealth Has Exploded During COVID-19. So Have Cyberattacks.

Here’s why, and what healthcare providers and patients can do to protect themselves.

How the Cloud Can Be Efficient and Safer for Regulated Industries

IBM's architect of vertical hybrid clouds, Howard Boville, talks about their impact — and their future.

Why Complexity Isn’t the Enemy of Security

Five ways you can stop worrying and embrace complexity.

Zero Trust’s Time Has Come

The pandemic is driving adoption of this take-no-chances approach to cybersecurity.

How To Turn Your Remote Workers Into Security Advocates

Getting employees to participate requires awareness and that they have their own positive security experiences.

What Is Patch Management?

What Is Asset Discovery and Inventory?

How State CIOs Are Digitizing in the Face of COVID-Era Budget Cuts

The pandemic is cratering state economies across the U.S. Here’s how the digital transformation battle is being fought today.

For WFH Security, Go Back to the Basics

The CIA’s former CTO, Gus Hunt, shares lessons on how to maintain security in a digitally insecure, WFH world.

What Is Endpoint Management?

With more people logging in from more devices and more places, it’s more important than ever that IT can track, manage and control who does what.

What Lumentum Learned About Security in the WFH Age

CIO Ralph Loura reflects on how the telco equipment maker has become a more secure — and agile — company.

How DevOps and Security Can Work Together

Software developers and security pros need to overcome their differences. It’s harder than it sounds, but best practices are emerging.

Scaling the Digital Future

Bank of America CEO Brian Moynihan and Tanium CEO Orion Hindawi discuss the collision of business and technology.

Dealing With the Relocation Boom

Here's a 4-step guide to ensure remote worker productivity and job satisfaction.

Four Use Cases for How 5G Will Transform Enterprises

Here’s how to capitalize on our high-speed cellular future.