Collaborate Disseminate
Foresight is a powerful human capability – and one that is integral in the field of cybersecurity. Today I revisit the predictions I made a year ago about what we could expect to see in this industry in terms of breaches, malware, regulation… Continue reading 2020 Cybersecurity Predictions
I have been blogging about ransomware for a long time now, given its devastating impact upon small to mid-sized enterprises. However, there have been some indicators lately that people are finally being forced to pay attention to. For instance, th… Continue reading Why Your AV Won’t Stop Ryuk Ransomware
When I talk about security for the SMB, the go-to barrier is insufficient resources to invest in security. While I’m not denying that limited resources for a smaller organization can constrain your options when it comes to building your own … Continue reading Cybersecurity KPIs for the SMB
By now you have likely heard about Zombieload, the latest in a series of vulnerabilities impacting the Intel Core and Xeon processors that power your endpoints. Of course, it’s not the vulnerability itself (appearing in proc’s made aft… Continue reading What is the Impact of Zombieload?
As part of our “C-Suite Accountability” theme, we explore why holding senior executives accountable is a necessary motivator in the prioritization, development, and adoption of cybersecurity initiatives across the small to medium-sized… Continue reading Do SMBs Need a CISO?
As part of our “C-Suite Accountability” theme, we explore why holding senior executives accountable is a necessary motivator in the prioritization, development, and adoption of cybersecurity initiatives across the small to medium-sized… Continue reading Worst (and Best) Cybersecurity Questions Ever
*Title image from Wired magazine’s March 2018 cover, via ZDNet’s article
Facebook has categorically mishandled some extremely sensitive information, our passwords, by allowing them to be written to a plain TEXT FILE on a drive on their intern… Continue reading Facebook Password Debacle – How Did This Happen?
I went to RSA this year, hoping to see solutions to help the organizations that struggle with cybersecurity the most – those facing the same threats as large enterprises, but without the same resources. I wanted to see ways of detecting… Continue reading RSA: Limited Value for SMEs
If you were just starting to relax, having fulfilled your compliance responsibilities for GDPR, I can’t help but wonder – have you thought about CCPA yet? Sure, it’ll be easier this time – many of the policies, programs, an… Continue reading Security Implications of California’s Privacy Law (CCPA)
When looking at monitoring enterprise security, many companies will consider a centralized Security Information and Event Management System (SIEM). Popular names in SIEM, such as ArcSight, Splunk, IBM QRadar, Elasticsearch and others, mention capa… Continue reading Modernizing SIEM with Managed Detection and Response