Cyber Security Industry News
Week in review: Drupal-based sites open to attack, cPanel 2FA bypass vulnerability
Here’s an overview of some of last week’s most interesting news and articles: Challenges organizations face in combating third-party cyber risk A CyberGRX report reveals trends and challenges organizations of all sizes face in combating [...]
How healthcare organisations can face the cybersecurity challenge of COVID-19
The healthcare industry has always been an attractive target for cybercriminals due to the personal and sensitive nature of the information gathered and the critical nature of the systems that healthcare organisations rely on.During the [...]
Why Data Protection And Cybersecurity Can’t Be Separate Functions
By Dmitry Dontov, CEO and founder of Spin Technology , a cloud data protection company based in Palo Alto. Getty Companies often separate cybersecurity and data protection by forming two independent teams and buying different [...]
Defense Department Interim Rule Requiring Contractors to Self-Assess Cybersecurity Compliance Creates Potential FCA Risk
As concern over cybersecurity continues to grow, [1] defense contractors have been waiting for the Department of Defense (DoD) to roll out its Cybersecurity Maturity Model Certification (CMMC) program. That rollout has occurred, with DoD’s [...]
What Are IT General Controls?
IT general controls are among the most important elements of effective compliance and IT security. So it’s a bit strange that many businesses — and compliance professionals, for that matter — struggle to understand exactly [...]
Customer Corner: Defending Connected Transportation From Today’s Cybersecurity Threats
Jump on a bus, bicycle, taxicab, or other form of transit in Mexico and you’re likely to be riding with Mobility ADO. Behind the scenes of many of these devices is connected technologies, which provide [...]
Commentary: CMMC – Tips for Bidding on Government Contracts
iStock illustrationThe Defense Department released on Sept. 29 its highly anticipated interim rule, which amends the Defense Federal Acquisition Regulation Supplement by including three new clauses that implement a mandatory DoD Assessment Methodology and adherence [...]
US Senate passes bill setting cybersecurity standards for IoT devices
A bipartisan bill that sets specific cybersecurity standards for Internet of Things (IoT) devices used by all American government agencies has been passed in the US Senate. Called the IoT Cybersecurity Improvement Act 2020 , [...]
What Exactly is CUI? (and How to Manage It)
It certainly sounds official—like it might be the subject of the next action-packed, government espionage, Jason Bourne-style thriller. Or maybe put it before the name of a racy city and have your next hit crime [...]
Agency Cybersecurity Waivers Would Face New Time Limits, Oversight Under New Bill
Dave Clark Digital Photo/Shutterstock.com With a new proposal that would require federal agencies to get permission from the Office of Management and Budget to opt-out of implementing specific cybersecurity practices— encryption of sensitive information and [...]
Department of Defense Addresses Cybersecurity
On Sept. 29, 2020, the Department of Defense (DOD) issued three new provisions to the Defense Federal Regulation Acquisition Supplement relating to information security. These new provisions implement DOD’s Interim Rule of the same date [...]
When Too Much Is Not Enough: Cybersecurity Budgeting For 2021 And Beyond
CEO & Co-Founder of CyCognito . Offensive security expert. Empowering organizations to find and eliminate the paths attackers easily exploit. getty Around this time of year, many companies begin their process of reviewing and assessing [...]
Major security incidents are the new normal for hospitals and health systems
The 2020 HIMSS Cybersecurity Survey gathered feedback from 168 US based healthcare cybersecurity professionals – mostly IT and infosec leaders at provider organizations, but also some consultants and vendors – to offer an updated snapshot [...]
Senate passes IoT cybersecurity bill
The Senate yesterday by unanimous consent passed legislation to mandate certain security requirements for internet of things devices purchased by the federal government, moving forward legislation that had been stalled on Capitol Hill since 2017.The [...]
Directory of the Best Cybersecurity Courses Available Online
Solutions Review Presents our Directory of the Best Cybersecurity Courses available online. Are you a security operations professional or cybersecurity engineer looking to gain new knowledge in any one of the myriad branches of InfoSec? [...]
Op-ed | Space system cybersecurity: Challenges ahead translating policy to practice
A recent White House memo on Space Policy Directive-5 is a step right direction, but we have a long road ahead. SpaceNews/Adobe Spark While in residence at Harvard University’s Belfer Center, I published a policy [...]