Tag: resilience
-
Von der Pflicht zur Stärke: Identity-Management als Schlüssel zur Resilienz
Vorschriften wie DSGVO, DORA und NIS2 oder Standards wie ISO 27001 setzen Unternehmen unter Druck besonders beim Identitätsmanagement. Doch wer Prozesse nur für die nächste Prüfung dokumentiert, verschenkt Potenzial. Richtig umgesetzt, wird Identity Access Management nicht zum Compliance-Korsett, sondern zur tragenden Säule digitaler Resilienz. Wie das gelingt, zeigt ein Blick hinter die regulatorischen Anforderungen. First…
-
Spy ships, cyber-attacks and shadow fleets: the crack security team braced for trouble at sea
As international tensions mount and hackers grow more sophisticated and audacious, the Nordic Maritime Cyber Resilience Centre is constantly monitoring the global threat of war, terror and piracyShips being taken over remotely by hackers and made to crash is a scenario made in Hollywood. But in a security operations room in Oslo, just a few…
-
Security, risk and compliance in the world of AI agents
Tags: access, ai, api, attack, automation, business, compliance, control, credentials, data, encryption, finance, framework, governance, grc, identity, infection, injection, ISO-27001, jobs, LLM, monitoring, password, privacy, regulation, resilience, risk, service, tool, trainingUnderstand and interpret natural language Access internal and external data sources dynamically Invoke tools (like APIs, databases, search engines) Carry memory to recall prior interactions or results Chain logic to reason through complex multi-step tasks They may be deployed through: Open-source frameworks like LangChain or Semantic Kernel Custom-built agent stacks powered by internal LLM APIs Hybrid orchestration models integrated across business platforms Real-world examples…
-
Securing the Future Together: Why Thales and HPE are the Partners You Can Trust
Tags: access, ai, application-security, banking, business, cloud, compliance, computing, control, cryptography, cyber, cyberattack, data, dora, encryption, GDPR, government, Hardware, healthcare, infrastructure, network, nis-2, PCI, resilience, risk, service, software, strategy, threatSecuring the Future Together: Why Thales and HPE are the Partners You Can Trust madhav Tue, 06/17/2025 – 05:15 Across every industry, data drives decisions, innovation, and growth. As organizations modernize with hybrid cloud and AI, the risks to that data scale are just as fast. From sophisticated cyberattacks to increasingly stringent compliance demands, the…
-
Operation 999: Ransomware tabletop tests cyber execs’ response
Tags: access, attack, blueteam, breach, computer, conference, cyber, cyberattack, cybersecurity, data, data-breach, extortion, group, hacker, incident, incident response, infrastructure, leak, military, network, ransom, ransomware, RedTeam, resilience, risk, service, threat, tool, trainingExtortion attempts rebuffed: As the exercise moved on, the blue team refuse to pay a ransom after consulting with the authorities, legal teams, and crisis management experts. Instead of upping the ante by threatening to sabotage the water treatment algorithms or chemical pumps, potentially tainting the supply, the attackers decide to leak customer records online…
-
8 tips for mastering multicloud security
Tags: access, attack, automation, business, ciso, cloud, compliance, conference, control, cybersecurity, data, detection, framework, google, governance, identity, intelligence, least-privilege, malware, microsoft, monitoring, okta, resilience, risk, service, siem, skills, software, strategy, technology, threat, tool, training, vulnerability2. Create unified security governance: A unified security governance model should be established, spanning all cloud environments and supported by centralized identity management, visibility, automation, and policy enforcement, advises Nigel Gibbons, director and senior advisor at security services firm NCC Group.This approach, Gibbons says, minimizes complexity and silos by creating consistent security controls across cloud…
-
Legacy Systems and Policies Expose West to Cyber Disruption
Ciaran Martin Urges Increased Focus on Essential Service Continuity, Resilience. China’s ability to monitor and disrupt Western infrastructure demands a major shift in cybersecurity thinking. Ciaran Martin, a professor at Oxford University, said avoiding fear-driven narratives and focusing instead on service continuity and resilience is of paramount importance. First seen on govinfosecurity.com Jump to article:…
-
Intelligence sharing key to cyber security in Europe, says EU Commission cyber expert
Cyber criminals choose not to attack Europe due to its resilience and preparedness, says the EU Commission’s principal advisor for cyber security coordination, Despina Spanou First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366626234/Intelligence-sharing-key-to-cyber-security-in-Europe-says-EU-Commission-cyber-expert
-
Von der Pflicht zur Stärke: Identity Management als Schlüssel zur Resilienz
Vorschriften wie DSGVO, DORA und NIS2 oder Standards wie ISO 27001 setzen Unternehmen unter Druck besonders beim Identitätsmanagement. Doch wer Prozesse nur für die nächste Prüfung dokumentiert, verschenkt Potenzial. Richtig umgesetzt, wird Identity Access Management nicht zum Compliance-Korsett, sondern zur tragenden Säule digitaler Resilienz. Wie das gelingt, zeigt ein Blick hinter die regulatorischen Anforderungen. First…
-
Operationelle Resilienz Koordination & Kooperation im Fokus
Tags: bsi, business, ciso, cloud, cyber, cyberattack, cyersecurity, edr, iam, incident response, infrastructure, intelligence, RedTeam, resilience, strategy, threat, tool, zero-trustUm Unternehmen auf Cybervorfälle vorzubereiten, brauchen CISOs operationelle Resilienz.Die Aufgabe des CISOs besteht darin, sowohl technologische als auch prozessuale und organisatorische Voraussetzungen für die IT-Sicherheit seines Unternehmens zu schaffen. CISOs schaffen eine auf Resilienz abzielende Sicherheitsarchitektur, treiben die Integration interoperabler Plattformen voran und etablieren Prozesse zur kontinuierlichen Risikoüberwachung.Darüber hinaus sorgen sie für den Aufbau von…
-
Fokus auf Resilienz und Compliance – Ftapi und Asvin starten gemeinsam in eine europäische Zukunft
First seen on security-insider.de Jump to article: www.security-insider.de/ftapi-und-asvin-starten-gemeinsam-in-eine-europaeische-zukunft-a-4ee5dd5edb4ff9fe1193a51794b5dcf4/
-
Adversaries evolve: Translating M-Trends 2025 into cyber resilience strategies
First seen on scworld.com Jump to article: www.scworld.com/resource/adversaries-evolve-translating-m-trends-2025-into-cyber-resilience-strategies
-
Europe Is Elevating Cyber Resilience in Critical Infrastructure
Forrester’s McKay and van der Hout on How Regulations Are Driving Cyber Resilience. Security leaders worldwide are elevating resilience in cyber strategies, where Europe emerges as a frontrunner globally in protecting critical infrastructure. Driven by regulation such as NIS2 and DORA, its cybersecurity posture reflects strong resilience planning amid increasing disruptions. First seen on govinfosecurity.com…
-
New Cybersecurity Executive Order: What You Need To Know
Tags: ai, cisa, cloud, communications, compliance, computing, control, cyber, cybersecurity, data, defense, detection, encryption, exploit, fedramp, framework, government, identity, incident response, infrastructure, Internet, iot, network, office, privacy, programming, resilience, risk, service, software, supply-chain, technology, threat, update, vulnerability, vulnerability-management, zero-trustA new cybersecurity Executive Order aims to modernize federal cybersecurity with key provisions for post-quantum encryption, AI risk and secure software development. On June 6, 2025, the White House released a new Executive Order (EO) aimed at modernizing the nation’s cybersecurity posture. As cyber threats continue to evolve in scale and sophistication, the EO reinforces…
-
Security Pitfalls & Solutions of Multiregion Cloud Architectures
Cloud resilience is no longer just about surviving service interruptions; it’s about operating securely under any circumstances, across any geographic area. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/security-pitfalls-solutions-multiregion-cloud-architectures
-
Cyber Bill at risk of becoming a missed opportunity, say MPs
An APPG report warns that the government’s flagship cyber security legislation is too narrow in its scope and risks missing opportunities to embed resilience at the heart of the British economy First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366625838/Cyber-Bill-at-risk-of-becoming-a-missed-opportunity-say-MPs
-
Russia-linked PathWiper malware hits Ukrainian infrastructure
Tags: apt, attack, backup, cisco, ciso, compliance, control, cyber, detection, endpoint, finance, fortinet, infrastructure, insurance, intelligence, malware, network, PurpleTeam, resilience, risk, russia, tactics, threat, tool, ukraine, vulnerability, zero-trustEchoes of past attacks: While PathWiper shares tactical similarities with HermeticWiper, its enhanced capabilities reveal a clear evolution in wiper malware sophistication. The new variant employs advanced techniques, such as querying registry keys to locate network drives and dismounting volumes to bypass protections, a stark contrast to HermeticWiper’s simpler approach of sequentially targeting drives numbered…
-
Cyberabwehr im Mobilfunknetz – Sicherheit inklusive: Mobilfunktarife für mehr Resilienz
Tags: resilienceFirst seen on security-insider.de Jump to article: www.security-insider.de/cyberangriffe-schutz-integrierte-security-option-mobilfunkvertraege-a-605b44cbd0cb05d82951661005f2a773/
-
ISMG Editors: Infosecurity Europe Conference 2025 Wrap-Up
Also: AI’s Promise and Pitfalls and Why Community, Communication, and Basics Matter. Live from Infosecurity Europe 2025 in London, ISMG editors and guest CISO Ian Thornton-Trump wrap up a week of standout insights – from AI-driven security and operational resilience to supply chain risk and mental health in cyber. A celebration of community, innovation and…
-
Microsoft launches European Security Program to counter nation-state threats
Tags: access, ai, attack, blizzard, cloud, control, country, crime, crimes, cyber, cybercrime, cybersecurity, framework, google, government, group, infrastructure, intelligence, malicious, malware, microsoft, network, open-source, resilience, russia, service, strategy, threat, vulnerabilityThree-component strategy: The European Security Program will operate through three main components designed to strengthen continental cyber defenses.The first element centers on enhanced threat intelligence sharing, where Microsoft will provide European governments with AI-enhanced, real-time insights into nation-state tactics.The company’s Digital Crimes Unit will expand intelligence sharing through the Cybercrime Threat Intelligence Program, giving European…
-
Get out of the audit committee: Why CISOs need dedicated board time
Tags: ai, business, ciso, cyber, cybersecurity, data, framework, mitigation, resilience, risk, risk-management, strategy, technology, threat, updateThe full partnership model between CISO and board: Full and frank security discussions are more than just a ‘nice to have’. The SEC has indicated it expects public companies with senior leadership to be transparent in how they assess and communicate cybersecurity risks.By extension, CISOs have an important role in communicating risks to senior leadership…
-
Cyber Resilience in Zeiten geopolitischer Unsicherheit
Tags: cio, ciso, cloud, compliance, cyber, cyberattack, firewall, governance, infrastructure, monitoring, resilience, risk, risk-analysis, siem, update, vulnerability-managementCyberbedrohungen existieren längst nicht mehr im luftleeren Raum sie entstehen im Spannungsfeld von Geopolitik, regulatorischer Zersplitterung und einer stetig wachsenden digitalen Angriffsfläche.Cybersecurity ist heute ein rechtliches, operatives und geopolitisches Thema. Für CIOs und CISOs ist die Botschaft eindeutig: Resilienz bedeutet nicht mehr nur, zu reagieren, sondern vorbereitet zu sein. Vorbereitung heißt, Systeme und Teams aufzubauen,…
-
Quiet Moments Matter: Building Resilience Amid Cyber Crises
Invest in Preparation and Training During the Calmer Times Between Attacks Cyberattacks may make headlines, but the daily discipline of security – patching routines, threat hunting, tabletop exercises and user education campaigns – is where resilience is forged. These tasks might not feel heroic, but they build technical and human infrastructure to handle the next…
-
#Infosec2025: Cybersecurity Support Networks Too Fragmented for SMBs, Say Experts
Experts argue the case for “communities of support” to boost SMB cyber-resilience First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/infosec2025-cybersecurity-support/
-
Bevor es ‘knallt”: Wie DataContainment Angriffe stoppt, bevor sie eskalieren
Ransomware-Angriffe verdoppeln sich, Erkennungszeiten bleiben erschreckend lang und trotzdem setzen viele Unternehmen noch immer auf reaktive Sicherheit. Dabei liegt der Schlüssel zur Cyber-Resilienz längst in der proaktiven Eindämmung. Wie Data-Breach-Containment zur tragenden Säule moderner IT-Sicherheitsarchitekturen wird durch Mikrosegmentierung, automatische Isolierung und eine kompromisslose Zero-Trust-Strategie. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/security-management/bevor-es-knallt-wie-data-breach-containment-angriffe-stoppt-bevor-sie-eskalieren/
-
Zwischen Sicherheit und Wettbewerbsvorteil – Der EU Cyber Resilience Act und seine Auswirkungen
First seen on security-insider.de Jump to article: www.security-insider.de/eu-cyber-resilience-act-auswirkungen-auf-unternehmen-a-5b178a243bfe7d433b91dfae4ee6cada/
-
Der Weg zur Resilienz: Überleben und weiterentwickeln
Dr. Joerg Rahmers Strategie für eine globale Führungsrolle der F24 AG. Für Vorstandssprecher Dr. Jörg Rahmer, verantwortlich für Strategie und Innovation bei der F24 AG, ist Resilienz nichts Neues. Es handelt sich schließlich um ein jahrhundertealtes, naturwissenschaftliches Phänomen. Mit Beispielen aus Physik, Biologie, Medizin und Psychologie untermauert er seine Überzeugung, dass Resilienz nichts anderes ist……
-
Cyber resilience is the new deterrence: Why Congress must act before the next escalation
First seen on scworld.com Jump to article: www.scworld.com/perspective/cyber-resilience-is-the-new-deterrence-why-congress-must-act-before-the-next-escalation