Tag: skills

ISO and ISMS: 9 reasons security certifications go wrong

Nov 17, 2025 7:49 AM

Tags: awareness, business, flaw, monitoring, risk, risk-analysis, skills, training, vulnerability

2. Approaching implementation as a one-off activity: One of the most common reasons why ISO/ISMS implementations fail in companies is that they are not actually integrated into daily business operations. Many view ISO/ISMS implementation as a one-off activity, undertaken simply to obtain the certification. However, they neglect to integrate the established processes into their daily…
Learning Sales Skills Can Make Security Professionals More Effective

Nov 14, 2025 11:49 PM

Tags: service, skills

Amazon Web Services VP Sara Duffer highlights the top lessons she brought back to her security role after taking part in Amazon’s shadow program. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-careers/shadow-program-gives-aws-exec-new-security-lens
How Cross-Training Can Give Security Professionals the Soft Skills They Need

Nov 14, 2025 9:49 PM

Tags: service, skills, training

Amazon Web Services VP Sara Duffer highlights the top lessons she brought back to her security role after taking part in Amazon’s shadow program. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-careers/shadow-program-gives-aws-exec-new-security-lens
Kenya Kicks Off ‘Code Nation’ With a Nod to Cybersecurity

Nov 13, 2025 8:49 AM

Tags: country, cybersecurity, data, skills, software

The African country aims to train 1 million workers in tech skills in the short term, with a focus on software engineering, cybersecurity, and data science. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/kenya-kicks-off-code-nation-nod-cybersecurity
Bridging the Skills Gap: How Military Veterans Are Strengthening Cybersecurity

Nov 11, 2025 3:19 PM

Tags: cybersecurity, defense, intelligence, military, skills, warfare

From intelligence analysts to surface warfare officers, military veterans of all backgrounds are successfully pivoting to cybersecurity careers and strengthening the industry’s defense capabilities. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/military-veterans-strengthening-cybersecurity
Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE Revamps ATTCK Framework

Nov 7, 2025 8:20 PM

Tags: access, ai, android, antivirus, api, apple, attack, authentication, business, cio, cisa, ciso, cloud, communications, container, control, credentials, cryptography, cve, cyber, cybercrime, cybersecurity, data, defense, detection, docker, endpoint, exploit, firewall, flaw, framework, google, governance, group, guide, hacker, identity, infrastructure, injection, Internet, kubernetes, leak, least-privilege, linux, malicious, malware, mfa, microsoft, mitigation, mitre, mobile, network, offense, oracle, programming, resilience, risk, risk-management, service, skills, soc, social-engineering, software, sophos, spam, strategy, supply-chain, switch, tactics, technology, threat, tool, unauthorized, update, vulnerability, windows, zero-day

Learn why Google expects AI to transform cyber defense and offense next year, and explore MITRE’s major update to the ATT&CK knowledge base. We also cover a new McKinsey playbook for agentic AI security, along with the latest on Microsoft Exchange protection and the CIS Benchmarks. Key takeaways Google is forecasting that AI will kick…
Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE Revamps ATTCK Framework

Nov 7, 2025 8:20 PM

Tags: access, ai, android, antivirus, api, apple, attack, authentication, business, cio, cisa, ciso, cloud, communications, container, control, credentials, cryptography, cve, cyber, cybercrime, cybersecurity, data, defense, detection, docker, endpoint, exploit, firewall, flaw, framework, google, governance, group, guide, hacker, identity, infrastructure, injection, Internet, kubernetes, leak, least-privilege, linux, malicious, malware, mfa, microsoft, mitigation, mitre, mobile, network, offense, oracle, programming, resilience, risk, risk-management, service, skills, soc, social-engineering, software, sophos, spam, strategy, supply-chain, switch, tactics, technology, threat, tool, unauthorized, update, vulnerability, windows, zero-day

Learn why Google expects AI to transform cyber defense and offense next year, and explore MITRE’s major update to the ATT&CK knowledge base. We also cover a new McKinsey playbook for agentic AI security, along with the latest on Microsoft Exchange protection and the CIS Benchmarks. Key takeaways Google is forecasting that AI will kick…
Expertise will unlock OT opportunity

Nov 7, 2025 3:19 PM

Tags: skills, technology

Channel advised to develop understanding and skills to support customers looking to connect and protect their operational technology environments First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366634272/Expertise-will-unlock-OT-opportunity
Expertise will unlock OT opportunity

Nov 7, 2025 3:19 PM

Tags: skills, technology

Channel advised to develop understanding and skills to support customers looking to connect and protect their operational technology environments First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366634272/Expertise-will-unlock-OT-opportunity
KI-Malware ist keine Theorie mehr

Nov 7, 2025 2:20 PM

Tags: access, ai, antivirus, api, control, cyberattack, cybercrime, cybersecurity, data, exploit, github, google, group, hacker, intelligence, LLM, malware, ransomware, RedTeam, service, skills, social-engineering, software, threat, tool, vulnerability

KI boomt auch unter Cyberkriminellen. Die ersten operativen Ergebnisse dieses Trends beleuchten Google-Sicherheitsforscher in einem aktuellen Report.Was lange befürchtet und vermutet wurde, will die Google Threat Intelligence Group (GTIG) nun im Rahmen einer aktuellen Untersuchung belegen: Cyberkriminelle nutzen KI im Rahmen ihrer Malware-Angriffskampagnen. Aber längst nicht mehr nur für Vibe-Coding-Zwecke oder zur technischen Unterstützung. Wie…
KI-Malware ist keine Theorie mehr

Nov 7, 2025 2:20 PM

Tags: access, ai, antivirus, api, control, cyberattack, cybercrime, cybersecurity, data, exploit, github, google, group, hacker, intelligence, LLM, malware, ransomware, RedTeam, service, skills, social-engineering, software, threat, tool, vulnerability

KI boomt auch unter Cyberkriminellen. Die ersten operativen Ergebnisse dieses Trends beleuchten Google-Sicherheitsforscher in einem aktuellen Report.Was lange befürchtet und vermutet wurde, will die Google Threat Intelligence Group (GTIG) nun im Rahmen einer aktuellen Untersuchung belegen: Cyberkriminelle nutzen KI im Rahmen ihrer Malware-Angriffskampagnen. Aber längst nicht mehr nur für Vibe-Coding-Zwecke oder zur technischen Unterstützung. Wie…
KI-Malware ist keine Theorie mehr

Nov 7, 2025 2:20 PM

Tags: access, ai, antivirus, api, control, cyberattack, cybercrime, cybersecurity, data, exploit, github, google, group, hacker, intelligence, LLM, malware, ransomware, RedTeam, service, skills, social-engineering, software, threat, tool, vulnerability

KI boomt auch unter Cyberkriminellen. Die ersten operativen Ergebnisse dieses Trends beleuchten Google-Sicherheitsforscher in einem aktuellen Report.Was lange befürchtet und vermutet wurde, will die Google Threat Intelligence Group (GTIG) nun im Rahmen einer aktuellen Untersuchung belegen: Cyberkriminelle nutzen KI im Rahmen ihrer Malware-Angriffskampagnen. Aber längst nicht mehr nur für Vibe-Coding-Zwecke oder zur technischen Unterstützung. Wie…
Google researchers detect first operational use of LLMs in active malware campaigns

Nov 7, 2025 2:20 PM

Tags: ai, api, attack, cybercrime, cybersecurity, encryption, exploit, finance, google, group, iran, LLM, malware, marketplace, phishing, RedTeam, service, skills, social-engineering, threat, tool, vulnerability

Using social engineering against LLMs: Additionally, GTIG found that attackers are increasingly using “social engineering-like pretexts” in their prompts to get around LLM safeguards. Notably, they have posed as participants in a “capture-the-flag” (CTF) gamified cybersecurity competition, persuading Gemini to give up information it would otherwise refuse to reveal. In one interaction, for instance, an attacker…
Google researchers detect first operational use of LLMs in active malware campaigns

Nov 7, 2025 2:20 PM

Tags: ai, api, attack, cybercrime, cybersecurity, encryption, exploit, finance, google, group, iran, LLM, malware, marketplace, phishing, RedTeam, service, skills, social-engineering, threat, tool, vulnerability

Using social engineering against LLMs: Additionally, GTIG found that attackers are increasingly using “social engineering-like pretexts” in their prompts to get around LLM safeguards. Notably, they have posed as participants in a “capture-the-flag” (CTF) gamified cybersecurity competition, persuading Gemini to give up information it would otherwise refuse to reveal. In one interaction, for instance, an attacker…
Defending digital identity from computer-using agents (CUAs)

Nov 7, 2025 2:20 PM

Tags: access, ai, api, attack, authentication, automation, breach, captcha, cisa, computer, control, corporate, credentials, cybersecurity, data, data-breach, defense, detection, email, exploit, fido, google, identity, infrastructure, login, malicious, malware, nfc, passkey, password, phishing, saas, service, skills, social-engineering, tool, unauthorized, update

Principle of least effort: Our brains seek shortcuts to reduce cognitive load, making password reuse seem rational.Security fatigue: Frequent password changes and complex rules frustrate users, pushing them toward reuse.As a result, users often rotate between 410 core passwords. According to an article by Enzoic, the average person reuses the same password across as many as 14…
Defending digital identity from computer-using agents (CUAs)

Nov 7, 2025 2:20 PM

Tags: access, ai, api, attack, authentication, automation, breach, captcha, cisa, computer, control, corporate, credentials, cybersecurity, data, data-breach, defense, detection, email, exploit, fido, google, identity, infrastructure, login, malicious, malware, nfc, passkey, password, phishing, saas, service, skills, social-engineering, tool, unauthorized, update

Principle of least effort: Our brains seek shortcuts to reduce cognitive load, making password reuse seem rational.Security fatigue: Frequent password changes and complex rules frustrate users, pushing them toward reuse.As a result, users often rotate between 410 core passwords. According to an article by Enzoic, the average person reuses the same password across as many as 14…
Starting Over in Cybersecurity: Advice I Wish I’d Had

Nov 5, 2025 11:19 PM

Tags: business, cybersecurity, risk, skills

Learn the Business, Be Intentional, Find a Mentor and Build Non-Technical Skills New to cybersecurity? Start by learning how organizations work – their people, processes and priorities – before diving deep into technical stacks. Understanding how to translate technical findings into business risk differentiates a professional from a technician. First seen on govinfosecurity.com Jump to…
How crooks use IT to enable cargo theft

Nov 5, 2025 5:19 AM

Tags: access, ai, api, attack, authentication, awareness, breach, business, control, crime, cyber, cybersecurity, data, detection, email, endpoint, finance, fraud, government, group, incident response, infosec, infrastructure, insurance, Internet, jobs, law, login, mfa, network, password, phishing, privacy, risk, skills, smishing, social-engineering, supply-chain, technology, theft, threat, tool, training, vulnerability

Value of stolen shipments has doubled: It’s hard to determine the size of this IT-related cargo theft problem. The US National Insurance Crime Bureau estimates cargo theft losses from all sources increased 27% last year compared to 2023, to $35 billion.Versik CargoNet, a company that tracks physical supply chain crime for law enforcement agencies, insurance…
How crooks use IT to enable cargo theft

Nov 5, 2025 5:19 AM

Tags: access, ai, api, attack, authentication, awareness, breach, business, control, crime, cyber, cybersecurity, data, detection, email, endpoint, finance, fraud, government, group, incident response, infosec, infrastructure, insurance, Internet, jobs, law, login, mfa, network, password, phishing, privacy, risk, skills, smishing, social-engineering, supply-chain, technology, theft, threat, tool, training, vulnerability

Value of stolen shipments has doubled: It’s hard to determine the size of this IT-related cargo theft problem. The US National Insurance Crime Bureau estimates cargo theft losses from all sources increased 27% last year compared to 2023, to $35 billion.Versik CargoNet, a company that tracks physical supply chain crime for law enforcement agencies, insurance…
Shortfall in Cyber Workforce Leads to Skills Gap

Nov 3, 2025 9:20 PM

Tags: breach, cyber, cybersecurity, data, data-breach, fortinet, risk, skills

Fortinet’s da Gama on Global Cyber Skill Shortage. The global cybersecurity skills shortage is leaving organizations open to more risk than ever, including increased data breach rates, higher recovery costs and prolonged disruptions. According to Fortinet’s latest Global Cybersecurity Skills Gap Report, 86% of organizations experienced some type of breach in 2024 a number only…
Government Approach to Disrupt Cyber Scams is ‘Fragmented’

Nov 3, 2025 8:20 PM

Tags: cyber, cybersecurity, government, scam, skills

Users contend with cybersecurity scams throughout their day; a new Cyber Civic Engagement program wants to provide them with the skills to fight back. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/government-approach-to-disrupt-cyber-scams-is-fragmented-
AI Developed Code: 5 Critical Security Checkpoints for Human Oversight

Nov 3, 2025 2:19 PM

Tags: ai, LLM, skills, tool

To write secure code with LLMs developers must have the skills to use AI as a collaborative assistant rather than an autonomous tool, Madou argues. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/ai-code-security-checkpoints
AI Developed Code: 5 Critical Security Checkpoints for Human Oversight

Nov 3, 2025 2:19 PM

Tags: ai, LLM, skills, tool

To write secure code with LLMs developers must have the skills to use AI as a collaborative assistant rather than an autonomous tool, Madou argues. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/ai-code-security-checkpoints
A Walk in the Park

Nov 2, 2025 5:19 AM

Tags: data, government, service, skills

In August of 2024 I stopped in my local book shop (shoutout to The Raven Bookstore) as I often do to browse the shelves and see if there was anything I couldn’t live without. A very colorful book jacket caught my eye. It was Kevin Fedarko’s A Walk in the Park: The True Story of…
Cybersecurity Snapshot: Top Guidance for Improving AI Risk Management, Governance and Readiness

Oct 31, 2025 7:19 PM

Tags: access, ai, api, attack, awareness, breach, business, ceo, cloud, compliance, computer, control, corporate, crime, cryptography, cyber, cybersecurity, data, data-breach, encryption, exploit, finance, framework, germany, google, governance, guide, hacking, ibm, identity, india, infrastructure, intelligence, jobs, law, leak, metric, microsoft, network, penetration-testing, privacy, risk, risk-management, scam, security-incident, skills, strategy, technology, threat, tool, training, vulnerability, vulnerability-management

Many organizations are playing catch-up in key AI security policy areas, such as usage governance, risk oversight, data protection, and staff training. In this Cybersecurity Snapshot special edition, we round up recent guidance on preparing for, managing and governing AI cyber risks. Key takeaways Most organizations’ AI adoption is dangerously outpacing their security strategies and…
Cybersecurity Snapshot: Top Guidance for Improving AI Risk Management, Governance and Readiness

Oct 31, 2025 7:19 PM

Tags: access, ai, api, attack, awareness, breach, business, ceo, cloud, compliance, computer, control, corporate, crime, cryptography, cyber, cybersecurity, data, data-breach, encryption, exploit, finance, framework, germany, google, governance, guide, hacking, ibm, identity, india, infrastructure, intelligence, jobs, law, leak, metric, microsoft, network, penetration-testing, privacy, risk, risk-management, scam, security-incident, skills, strategy, technology, threat, tool, training, vulnerability, vulnerability-management

Many organizations are playing catch-up in key AI security policy areas, such as usage governance, risk oversight, data protection, and staff training. In this Cybersecurity Snapshot special edition, we round up recent guidance on preparing for, managing and governing AI cyber risks. Key takeaways Most organizations’ AI adoption is dangerously outpacing their security strategies and…
Tips for CISOs switching between industries

Oct 30, 2025 4:19 PM

Tags: breach, ceo, ciso, corporate, country, cyber, cybersecurity, data, data-breach, defense, finance, healthcare, identity, jobs, law, mobile, office, risk, service, skills

Understand and demonstrate achieved results: Making the jump into a new industry isn’t about matching past job titles but about proving you can create impact in a new context. DiMarco says the key is to demonstrate relevance early.”When I pitch a candidate, I explain what they did, how they did it, and what their impact…
Building Tomorrow’s Security Team: The Skills Crisis No One Talks About

Oct 28, 2025 7:26 AM

Tags: cybersecurity, skills, training

Cybersecurity teams face burnout, talent shortages, and widening skills gaps despite growing certifications. Learn why traditional training fails, how to audit your team’s real capabilities, and what steps to take to build practical, high-performance security operations that can actually defend your organization. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/10/building-tomorrows-security-team-the-skills-crisis-no-one-talks-about/
How to Take Vulnerability Management to the Next Level and Supercharge Your Career

Oct 27, 2025 7:26 PM

Tags: access, ai, attack, authentication, awareness, business, ciso, cloud, compliance, cve, cvss, cybersecurity, data, exploit, flaw, framework, governance, identity, metric, mfa, risk, skills, strategy, technology, tool, update, vulnerability, vulnerability-management

At Tenable, we believe the next generation of great CISOs and security leaders will arise from those vulnerability management professionals who are driving the shift to exposure management today. Key takeaways: Vulnerability management is crucial for the evolution toward a more strategic, business-aligned approach to cybersecurity, that’s why these professionals are best positioned to lead…
Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and for Securing AI Systems

Oct 24, 2025 7:26 PM

Tags: access, ai, attack, authentication, awareness, best-practice, breach, business, chatgpt, china, ciso, cloud, computing, container, control, credentials, crime, cve, cyber, cyberattack, cybersecurity, data, defense, detection, email, exploit, extortion, finance, flaw, framework, fraud, google, governance, government, group, guide, hacker, hacking, healthcare, iam, identity, incident response, intelligence, LLM, malicious, malware, mitigation, monitoring, network, open-source, openai, organized, phishing, ransom, risk, risk-management, russia, sans, scam, service, skills, soc, strategy, supply-chain, technology, theft, threat, tool, training, vulnerability, zero-trust

As organizations eagerly adopt AI, cybersecurity teams are racing to protect these new systems. In this special edition of the Cybersecurity Snapshot, we round up some of the best recent guidance on how to fend off AI attacks, and on how to safeguard your AI systems. Key takeaways Developers are getting new playbooks from groups…