Collecting Cyber-News from over 60 sources

Tag: business

Get out of the audit committee: Why CISOs need dedicated board time

Jun 5, 2025 9:54 AM

Tags: ai, business, ciso, cyber, cybersecurity, data, framework, mitigation, resilience, risk, risk-management, strategy, technology, threat, update

The full partnership model between CISO and board: Full and frank security discussions are more than just a ‘nice to have’. The SEC has indicated it expects public companies with senior leadership to be transparent in how they assess and communicate cybersecurity risks.By extension, CISOs have an important role in communicating risks to senior leadership…
Attackers fake IT support calls to steal Salesforce data

Jun 4, 2025 5:55 PM

Tags: business, data, google, group, threat

Over the past several months, a threat group has been actively breaching organizations’ Salesforce instances and exfiltrating customer and business data, Google Threat … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/04/salesforce-vishing-attacks/
Don’t Be a Statistic: Proactive API Security in the Age of AI

Jun 4, 2025 2:55 PM

Tags: access, ai, api, attack, breach, business, cloud, compliance, cybercrime, data, data-breach, defense, email, exploit, finance, governance, infrastructure, Internet, iot, mobile, phone, privacy, risk, security-incident, strategy, threat, tool, unauthorized, update, vulnerability

Your business depends on APIs, which are essential for contemporary digital experiences, encompassing everything from mobile applications and IoT devices to the rapidly evolving AI landscape. With more than 80% of internet traffic now routed through APIs”, a number projected to rise significantly due to AI developments”, their security is crucial. Unfortunately, this vital infrastructure…
CrowdStrike CEO: Subscription Deals Surging As Falcon Flex Is A ‘Home Run’

Jun 4, 2025 2:55 PM

Tags: business, ceo, crowdstrike, siem

CrowdStrike saw newly added total account value from its Falcon Flex subscription model surge during its latest quarter, helping to drive business in newer product categories such as Next-Gen SIEM, CrowdStrike CEO George Kurtz said Tuesday. First seen on crn.com Jump to article: www.crn.com/news/security/2025/crowdstrike-ceo-subscription-deals-surging-as-falcon-flex-is-a-home-run
Cybersecurity’s ‘rare earth’ skills: Scarce, high-value, and critical for future defense

Jun 4, 2025 11:55 AM

Tags: ai, attack, business, ciso, computing, crypto, cryptography, cyber, cybersecurity, data, defense, detection, intelligence, jobs, programming, risk, skills, strategy, supply-chain, technology, threat, training

Advanced threat hunting expertise Like the rarest elements, professionals who can proactively identify novel threats and adversary techniques before they cause damage are scarce and extremely valuable. Why are these skills rare? Many factors have led to this scenario:Complex skill requirements: Effective threat hunters need a unique combination of skills, including deep cyber knowledge, programming…
6 ways CISOs can leverage data and AI to better secure the enterprise

Jun 4, 2025 10:54 AM

Tags: advisory, ai, antivirus, attack, automation, breach, business, ciso, cloud, compliance, computer, corporate, cyber, cyberattack, cybersecurity, data, detection, firewall, framework, governance, guide, infrastructure, LLM, login, ml, network, programming, risk, risk-analysis, service, siem, soc, software, technology, threat, tool, training

Emphasize the ‘learning’ part of ML: To be truly effective, models need to be retrained with new data to keep up with changing threat vectors and shifting cyber criminal behavior.”Machine learning models get smarter with your help,” Riboldi says. “Make sure to have feedback loops. Letting analysts label events and adjust settings constantly improves their…
Cyber Attacks Are Up 47% in 2025 AI is One Key Factor

Jun 3, 2025 9:55 PM

Tags: ai, attack, business, cyber, ransomware

Another key factor is that ransomware has turned into a business model, Check Point researchers report. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-cyber-attacks-check-point/
The Role of Continuous Integration and Continuous Deployment (CI/CD) in DevOps

Jun 3, 2025 6:54 PM

Tags: business, programming, software

Modern software development demands rapid delivery of high-quality applications that can adapt to changing business requirements and user… First seen on hackread.com Jump to article: hackread.com/continuous-integration-continuous-deployment-ci-cd-devops/
What Tackling the SaaS Security Problem Means to Me

Jun 3, 2025 6:54 PM

Tags: access, ai, api, attack, authentication, breach, business, ceo, ciso, cloud, control, credentials, crypto, data, data-breach, detection, exploit, google, identity, incident response, infrastructure, jobs, lessons-learned, login, mfa, microsoft, ml, mssp, saas, siem, threat, tool, zero-day

By Kevin Hanes, CEO of Reveal Security When I reflect on the years I spent leading one of the world’s largest Security Operations Centers (SOCs) and incident response teams, the lessons learned aren’t just war stories”¦they’re a playbook for how we should rethink our responsibilities in the face of today’s fast-evolving attack surfaces. Back then,…
Posture â‰ Protection

Jun 3, 2025 5:54 PM

Tags: access, ai, awareness, breach, business, cloud, compliance, control, credentials, data, data-breach, defense, detection, edr, email, endpoint, finance, metric, monitoring, password, risk, saas, tool

CSPM, DSPM, ASPM, SSPM, ESPM, the alphabet soup of Security Posture Management (SPM) tools promises visibility into risk. They map misconfigurations, surface exposure paths and highlight policy gaps. That can be useful. But let’s not confuse awareness with action. They don’t block threats.They don’t enforce controls.They don’t prevent breaches. SPMs detect, then delegate. A ticket.…
Conquering complexity and risk with data security posture insights

Jun 3, 2025 4:54 PM

Tags: access, ai, attack, automation, best-practice, business, cloud, compliance, control, cyber, cyberattack, data, defense, detection, encryption, exploit, framework, GDPR, governance, infrastructure, intelligence, mitigation, monitoring, PCI, regulation, risk, risk-assessment, risk-management, strategy, technology, theft, threat, tool, unauthorized, vulnerability

Conquering complexity and risk with data security posture insights madhav Tue, 06/03/2025 – 05:35 In today’s competitive landscape it has become an increasingly important for businesses looking for ways to adapt their data security, governance, and risk management practices to the volatile economy by improving efficiency or reducing costs while maintaining structure, consistency, and guidance…
AI gives superpowers to BEC attackers

Jun 3, 2025 9:54 AM

Tags: ai, attack, authentication, automation, business, ceo, cloud, communications, corporate, credentials, crypto, data, deep-fake, defense, dmarc, email, exploit, finance, framework, fraud, gartner, google, group, identity, india, jobs, LLM, mail, malicious, malware, microsoft, mitigation, office, phishing, phone, scam, service, skills, social-engineering, spam, spear-phishing, strategy, technology, theft, threat, tool, training

The role of AI in business email compromise: Unlike traditional spam or phishing emails, which are designed to be as generic as possible, BEC fraud is highly targeted. Attackers must do a great deal of research about their targets to craft their messages and time their attacks for when their victim would be most susceptible,…
‘In der Security geht es vor allem um Resilienz”

Jun 3, 2025 9:54 AM

Tags: ai, awareness, backup, business, cio, ciso, cyber, cyberattack, cyersecurity, deep-fake, governance, group, ransomware, resilience, social-engineering, strategy, tool, training, vulnerability

Timo Wandhöfer verantwortet als Group CISO beim Metallverarbeiter Klöckner & Co den Bereich Informationssicherheit und Business Continuity Management (BCM). Klöckner & Co SERansomware-Attacken zählen nach wie vor zu den größten Cyberbedrohungen in der Industrie. Wie schützen Sie Ihr Unternehmen vor solchen Angriffen? Und worauf kommt es dabei besonders an?Wandhöfer: Ja, das ist richtig. Auch bei…
Getting the Most Value Out of the OSCP: After the Exam

Jun 2, 2025 10:54 PM

Tags: access, attack, automation, bug-bounty, business, cloud, compliance, conference, control, corporate, credentials, cyber, cybersecurity, data, data-breach, defense, detection, exploit, finance, flaw, framework, google, governance, group, guide, hacker, hacking, incident response, infosec, injection, intelligence, Internet, iran, jobs, kali, linkedin, linux, malicious, malware, microsoft, mobile, network, office, open-source, penetration-testing, powershell, privacy, RedTeam, reverse-engineering, risk, service, skills, soc, social-engineering, sql, strategy, stuxnet, technology, threat, tool, training, update, vulnerability, windows

In the final post of this series, I’ll discuss what to do after your latest exam attempt to get the most value out of your OSCP journey. DISCLAIMER: All opinions expressed in this article are solely my own. I have reviewed the content to ensure compliance with OffSec’s copyright policies and agreements. I have not been…
How AI-powered SOCs Can Boost Business for MSSPs

Jun 2, 2025 10:54 PM

Tags: ai, business, mssp, soc

First seen on scworld.com Jump to article: www.scworld.com/perspective/how-ai-powered-socs-can-boost-business-for-mssps
Beyond Perimeter Defense: Making Attack Surface Management a Business Enabler

Jun 2, 2025 5:54 PM

Tags: attack, business, cio, ciso, cyber, defense, risk, threat

As cyber threats outpace traditional perimeter defenses, organizations face mounting risks in their digital transformation efforts. This article examines how Outpost24’s continuous attack surface management transforms security into a strategic business enabler, equipping CISOs, CIOs, and IT Directors with automated visibility and insights to pursue innovation with confidence and resilience. First seen on techrepublic.com Jump…
Launch of e92spark extends distie’s options

Jun 2, 2025 5:54 PM

Tags: business, technology

Distributor establishes fresh division to enable the business to capture emerging vendors bringing innovative technology to market First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366625159/Launch-of-e92spark-extends-disties-options
Was ist BusinessMail-Compromise

Jun 2, 2025 1:54 PM

Tags: business, ceo, fraud, mail

Business-E-Mail-Compromise, kurz BEC, ist eine raffinierte Form des Cyberbetrugs, bei dem Angreifer legitime geschäftliche E-Mail-Kommunikation manipulieren oder fälschen, um Unternehmen zu finanziellen oder datentechnischen Verlusten zu bringen. Was passiert bei BEC? Beim Business-E-Mail-Compromise, auch häufig als CEO-Fraud bzw. Chef-Betrug, bezeichnet gibt sich ein Cyberkrimineller meist als eine vertrauenswürdige Person innerhalb des Unternehmens aus […]…
CISO Roles Take on Strategic Security Leadership Roles Beyond Cybersecurity as Organizations

Jun 2, 2025 1:54 PM

Tags: business, ciso, cyber, cybersecurity

A comprehensive analysis of over 800 Chief Information Security Officers reveals a fundamental transformation in the cybersecurity leadership landscape, with CISOs increasingly assuming strategic business responsibilities that extend far beyond traditional information security functions. The fifth annual CISO Compensation and Budget Survey conducted by IANS and Artico Search demonstrates that the modern CISO role is…
6 hard truths security pros must learn to live with

Jun 2, 2025 12:54 PM

Tags: ai, attack, breach, business, ciso, control, credentials, cyber, cyberattack, cybercrime, cybersecurity, data, data-breach, defense, detection, finance, fraud, gartner, hacker, ibm, insurance, jobs, network, phishing, resilience, risk, risk-management, skills, social-engineering, tactics, technology, threat, training, vulnerability

No matter how good you are, your organization will be victimized: This is a hard one to swallow, but if we take the “five stages of grief” approach to cybersecurity, it’s better to reach the “acceptance” level than to remain in denial because much of what happens is simply out of your control.A global survey…
Addressing Our ‘Age of Insecurity’, in Cyber Too

Jun 1, 2025 4:55 PM

Tags: attack, business, cyber

Recent cyber attacks have given a new urgency to business resiliency in the public and private sectors. Let’s explore the problem and some workable answers. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/addressing-our-age-of-insecurity-in-cyber-too/
BEC- und FTF-Angriffe größte Cybergefahr in 2024

Jun 1, 2025 12:55 AM

Tags: business, cyberattack, email, fraud, mail

Betrug bei geschäftlichen E-Mails unter dem Begriff Business Email Compromise (BEC) zusammen gefasst sowie Funds Transfer Fraud (FTF) sind die Cyberbedrohungen, die im Jahr 2024 die größten Schäden verursacht haben. Dies geht aus einem Bericht von KnowBe4 hervor, … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/01/bec-und-ftf-angriffe-groesste-cybergefahr-in-2024/
Cybersecurity Snapshot: New Standard for AI System Security Published, While Study Finds Cyber Teams Boost Value of Business Projects

May 31, 2025 6:55 AM

Tags: access, ai, attack, authentication, awareness, best-practice, breach, business, ceo, ciso, cloud, compliance, computer, conference, control, cyber, cybersecurity, data, email, extortion, framework, group, guide, hacker, Hardware, intelligence, Internet, kubernetes, law, linux, login, metric, mfa, microsoft, mobile, phishing, ransom, ransomware, risk, service, software, supply-chain, technology, threat, tool, unauthorized, update, windows

Check out ETSI’s new global standard for securing AI systems and models. Plus, learn how CISOs and their teams add significant value to orgs’ major initiatives. In addition, discover what webinar attendees told Tenable about their cloud security challenges. And get the latest on properly decommissioning tech products; a cyber threat targeting law firms; and…
Dutch businesses lag behind in cyber resilience as threats escalate

May 30, 2025 11:55 PM

Tags: ai, business, cyber, resilience, service, threat

While non-IT business professionals in the middle of their careers face the most disruption from AI, professionals in the IT services sector and their employers must prepare for change First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366624847/Dutch-businesses-lag-behind-in-cyber-resilience-as-threats-escalate
Cybersecurity teams show business value amid declining investment, report finds

May 30, 2025 10:55 PM

Tags: business, cybersecurity

First seen on scworld.com Jump to article: www.scworld.com/brief/cybersecurity-teams-show-business-value-amid-declining-investment-report-finds
Defend Your Business: Mastering Cybersecurity Awareness Against Teams Phishing & Social Engineering

May 30, 2025 7:55 PM

Tags: awareness, business, cybersecurity, phishing, social-engineering

First seen on thesecurityblogger.com Jump to article: www.thesecurityblogger.com/defend-your-business-mastering-cybersecurity-awareness-against-teams-phishing-social-engineering/
New Study Uncovers Multiple Vulnerabilities in WeChat and IM Apps

May 30, 2025 2:55 PM

Tags: attack, business, cyber, data, vulnerability

Instant messaging (IM) applications like WeChat have become indispensable for billions, facilitating not only communication but also payments, business, and personal data exchange. However, their ubiquity and complexity make them prime targets for sophisticated cyberattacks. This article explores how a single WeChat message can be leveraged for persistent client-side attacks, examining the technical mechanisms, real-world…
Strategies for Enhancing Your Organization’s Cyber Resilience

May 30, 2025 1:55 PM

Tags: business, cyber, resilience, strategy

Organizations must improve their cyber resilience not just for the sake of business operations, but to maintain customer confidence. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/strategies-for-enhancing-your-organizations-cyber-resilience/
Passwortlose Authentifizierung wird für CISOs immer wichtiger

May 30, 2025 12:55 PM

Tags: ai, authentication, business, ciso, credentials, cyber, cyberattack, deep-fake, gartner, mfa, microsoft, password, phishing, risk, risk-management, social-engineering

Selbst MFA ist vor raffinierten, KI-gesteuerten Phishing-Angriffen nicht sicher. Biometrische Verfahren gelten als vielversprechende Alternative.Die rasante Entwicklung von KI-Agenten eröffnet Cyberkriminellen neue Angriffsmöglichkeiten, die insbesondere für Chief Information Security Officers (CISOs) eine erhebliche Herausforderung darstellen. Automatisierte Angriffe, die von KI gesteuert werden, können herkömmliche Sicherheitsmaßnahmen wie Passwörter und Multi-Faktor-Authentifizierung (MFA) zunehmend unterlaufen. Trotz weit verbreiteter…
Unlocking Powerful Benefits with NHIs

May 30, 2025 5:55 AM

Tags: business, data

Is Your Organization Realizing the Powerful Benefits of NHIs? Acquiring a deep understanding of Non-Human Identities (NHIs) is pivotal for organizations striving to build solid fortifications around their data and systems. NHIs, also known as machine identities, are the unseen force behind the smooth functioning of a business’s digital environment. Yet, their security management and……