Tag: risk
-
CISO vs CFO: why are the conversations difficult?
Tags: ai, attack, breach, business, ciso, compliance, cyber, cyberattack, cybersecurity, finance, insurance, jobs, metric, ransomware, RedTeam, risk, risk-management, saas, strategy, technology, threat, toolmight happen, which often means the best outcome is nothing happens. That’s a tough sell.”Although a single cyberattack can wipe out millions of dollars, CFOs and CISOs often approach cybersecurity from fundamentally different perspectives. Bridging this divide requires more than just better communication, it demands, as Argyle put it, a shift in mindset. The disconnect…
-
How CISOs can talk cybersecurity so it makes sense to executives
CISOs know cyber risk is business risk. Boards don’t always see it that way.”‹ For years, CISOs have struggled to get boards to understand security beyond buzzwords. Many … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/05/ciso-talk-cybersecurity-executives/
-
Kundendaten sicher managen – Mit CIAM Kundenbindungen stärken und Datenschutz-Risiken minimieren
Tags: riskFirst seen on security-insider.de Jump to article: www.security-insider.de/strategien-fuer-effektives-ciam-a-84ab5fba2b0e4b27d82a12de7c2f27c4/
-
Zero Trust and Automation Crucial for Securing IoT Devices
Device Authority’s Antill on Secure-by-Design and Continuous Authentication. Many IoT devices were never designed with modern authentication – making them easy targets. Even when certificates are used for authentication, Darron Antill, CEO of Device Authority, points out that frequent expiration and limited visibility create operational and security risks over time. First seen on govinfosecurity.com Jump…
-
Inside the Relentless Liability Pressures Facing CISOs
SolarWinds CISO Tim Brown’s Case Shows Personal, Legal and Health Risks for CISOs. CISOs face tremendous stress in dealing with regulatory scrutiny and legal exposure in the wake of a data breach. SolarWinds CISO Tim Brown shares the personal and professional impact of Securities and Exchange Commission charges against him after the 2020 SolarWinds supply…
-
Seminar zu Generativer KI: Chancen nutzen und Risiken minimieren
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/seminar-generative-ki-chancen-risiken
-
Supervisory Tech Critical to Managing Agentic AI
EMC Advisors’ Edna Conway on Minimizing Risks of Agentic AI Through Oversight. Agentic artificial intelligence has the potential to transform businesses, but Edna Conway, chief executive officer of EMC Advisors, discusses the top risks associated with agentic AI solutions and why supervisory technologies are needed to monitor and control the technology. First seen on govinfosecurity.com…
-
Billions of Apple Devices at Risk from “AirBorne” AirPlay Vulnerabilities
Oligo Security uncovers >>AirBorne,
-
Balancing AI Innovation With Security
Accountability Is Key as Enterprises Adopt AI at Scale, Says Saviynt’s Jim Routh. AI governance must balance innovation with security, making it vital that organizations adopt flexible, consensus-driven approach to ensure responsible AI deployment while addressing risks such as data exposure and software resilience, said Jim Routh, chief trust officer at Saviynt. First seen on…
-
Red Teaming AI: Tackling New Cybersecurity Challenges
DistributedApps.ai’s Ken Huang on Agentic AI Risks and Threat Modeling. As AI agents gain autonomy and access dynamic tools, organizations must adopt new threat modeling approaches like mixture threat modeling, a new method that accounts for AI’s unpredictability, said Ken Huang, chief AI officer at DistributedApps.ai. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/red-teaming-ai-tackling-new-cybersecurity-challenges-a-28235
-
Cybersecurity experts warn of rising AI risks
First seen on scworld.com Jump to article: www.scworld.com/brief/cybersecurity-experts-warn-of-rising-ai-risks
-
RSAC 2025: Top 5 mobile app risks revealed by half a million assessments
First seen on scworld.com Jump to article: www.scworld.com/news/rsac-2025-top-5-mobile-app-risks-revealed-by-half-a-million-assessments
-
Hackers Exploit Critical NodeJS Vulnerabilities to Hijack Jenkins Agents for RCE
Tags: cyber, exploit, flaw, github, hacker, infrastructure, rce, remote-code-execution, risk, supply-chain, vulnerabilitySecurity researchers have identified critical vulnerabilities in the Node.js CI/CD infrastructure, exposing internal Jenkins agents to remote code execution and raising the risk of supply chain attacks. These flaws stemmed from the integration and communication gaps between multiple DevOps platforms-specifically GitHub Apps, GitHub Actions workflows, and Jenkins pipelines-that collectively manage Node.js’ continuous integration processes. Exploiting…
-
Beyond Models: Securing AI’s Real-World Use
Menlo Venture’s Rama Sekhar on AI Threats and Opportunities. Public attention has been focused on the dangers of large language models such as hallucinations or harmful output, but the most pressing security risks are no longer rooted in the models, but in how they are integrated with real-world tools, said Rama Sekhar, partner at Menlo…
-
The Cloud Illusion: Why Your Database Security Might Be at Risk
With the right cloud database architecture, you gain versatility as well as optimal security. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/the-cloud-illusion-why-your-database-security-might-be-at-risk/
-
Your graphics card’s so fat, it’s got its own gravity alert
Tags: riskAsus implements droop detector for PCIe slots as GPUs now so heavy they risk toppling out First seen on theregister.com Jump to article: www.theregister.com/2025/04/30/gpu_pcie_droop/
-
Statements von IT-Experten zum Koalitionsvertrag zwischen CDU/CSU und SPD
In einer Zeit tiefgreifender geopolitischer Verwerfungen und wachsender globaler Ungewissheit steht Europa vor enormen Herausforderungen. Strategische Abhängigkeiten haben sich als Risiko für Sicherheit und Wohlstand erwiesen und erfordern ein entschlossenes Handeln. Jetzt ist es an der Europäischen Union und insbesondere an Deutschland, Verantwortung zu übernehmen, ihre Resilienz zu stärken und ihre digitale Souveränität zu festigen.…
-
Mehr Assets mehr Angriffsfläche mehr Risiko
Unternehmen sollten ihre Angriffsflächen genau kennen.Nur wer seine Angriffsflächen kennt, kann diese wirksam verteidigen. Was eine Binsenweisheit scheint, scheint vielen Unternehmen jedoch Probleme zu bereiten. Laut einer Umfrage des Security-Anbieters Trend Micro unter mehr als 2.000 Cybersecurity-Führungskräften mussten knapp drei Viertel (73 Prozent) von ihnen einräumen, schon einmal einen Sicherheitsvorfall erlebt zu haben, weil Assets…
-
CISA Issues New ICS Advisories Addressing Critical Vulnerabilities and Exploits
The Cybersecurity and Infrastructure Security Agency (CISA) has issued two new advisories revealing critical vulnerabilities found in widely used Industrial Control Systems (ICS). Released on May 1, 2025, the advisories spotlight severe security risks affecting KUNBUS GmbH’s Revolution Pi devices and the MicroDicom DICOM Viewer, with some vulnerabilities scoring the highest possible rating for risk…
-
Phone theft is turning into a serious cybersecurity risk
Phone theft is a rising issue worldwide, and it’s more than just a property crime. It’s a serious cybersecurity threat. In the UK alone, the Metropolitan Police recovers 1,000 … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/02/phone-theft-cybersecurity-threat/
-
CISA Issues Alert on Actively Exploited Apache HTTP Server Escape Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a newly discovered and actively exploited vulnerability in the widely used Apache HTTP Server. The flaw, catalogued as CVE-2024-38475, affects the server’s mod_rewrite module and poses significant risks to organizations worldwide. Details of the Vulnerability CVE-2024-38475 is classified as an >>improper escaping…
-
Half of red flags in third-party deals never reach compliance teams
Third-party risk management (TPRM) is compromised in many organizations because those holding the relationship with the third-party (relationship owners) don’t escalate red … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/02/third-party-relationship-owners/
-
The Myth of the Perfect CISO: A Multitalented Master of All
Ellis of YL Ventures on How Modern CISOs Must Lead, Not Master Every Discipline. There were never many ‘do everything’ CISOs. Today there are even fewer. But with a specialist area, strong overview and ability to channel expertise, CISOs can align with business goals, embrace the business enabler role, demonstrate quick wins, and ensure their…
-
Capgemini Launches pKYC Sandbox to Modernize Compliance and Streamline Risk Management
First seen on scworld.com Jump to article: www.scworld.com/news/capgemini-launches-pkyc-sandbox-to-modernize-compliance-and-streamline-risk-management
-
Preparing for Quantum Cybersecurity Risks CISO Insights
Quantum cybersecurity risks represent a paradigm shift in cybersecurity, demanding immediate attention from Chief Information Security Officers worldwide. While practical quantum computers capable of breaking current encryption standards may still be years away, the threat is already present through >>harvest now, decrypt later