Collaborate Disseminate
Today, a stark disconnect exists between the inadequacy of crisis exercising and the desire to build an effective cyber crisis response function, according to an Osterman Research study. The report into senior security leaders at 402 organizations with… Continue reading Cyber crisis response failing to adapt to modern threats
The SANS Institute, which trains cybersecurity professionals around the world, was hacked, resulting in the compromise of 28,000 records of personally identifiable information, the organization said Tuesday. The Maryland-based research and educational outfit said the breach was the result of a single phishing email sent to a SANS employee, which led to more than 500 of the organization’s emails being forwarded. The breached data included names, email addresses, and physical addresses — information submitted by attendees of a recent SANS virtual training event. After discovering the breach on Aug. 6, SANS said it “quickly stopped any further release of information” from the compromised email account, which was forwarding the data to an “unknown external email address.” The institute did not identify who was responsible for the hack. “We are investigating this incident with the support of some of the world’s top forensic experts to be certain that we understand the complete […]
The post SANS Institute, which drills cyber professionals in defense, suffers data breach appeared first on CyberScoop.
Continue reading SANS Institute, which drills cyber professionals in defense, suffers data breach
There are unrealized gaps between the rate of implementation or operation and the effective use of cloud security access brokers (CASB) within the enterprise, according to a global Cloud Security Alliance survey of more than 200 IT and security profess… Continue reading Half of IT teams can’t fully utilize cloud security solutions due to understaffing
The fundamental causes for the skill gap are myriad, starting with a lack of training and career-development opportunities. Continue reading Cybersecurity Skills Gap Worsens, Fueled by Lack of Career Development
We’re circling back to some more CISSP-related materials. Today’s topic will be encryption, which can be found in CISSP Domain 3. By its very nature, encryption is meant to hide the meaning or intent of a communication from unintended… Continue reading Encryption – CISSP Domain 3
Today we’re going to take a quick look at encoding, as covered in Domain 3 of the CISSP common body of knowledge (CBK). There is often some confusion between encoding and encryption, so one of the purposes of this article is to look at how the CB… Continue reading Encoding – CISSP Domain 3
Today we’re going to take a quick look at hashing functions, as covered in Domain 3 of the CISSP common body of knowledge (CBK). There is often some confusion between hashing, encryption, and encoding, so one of the purposes of this article… Continue reading Hashing Functions – CISSP Domain 3
For years, the Peerlyst social network has been a resource for software developers looking for a job or cybersecurity enthusiasts wanting to host meet-ups across the world. But on Aug. 27, the website will shut down, Peerlyst founder Limor Elbaz said Monday, citing financial pressure. “[W]e are realizing that we would not be able to grow [the website] as a VC-backed business without making huge compromises on quality,” Elbaz wrote, encouraging users of the platform to save a copy of their collaborations. Cybersecurity professionals lamented the end of the platform. “I took the news hard,” said J. Wolfgang Goerlich, an advisory CISO at Duo Security who has posted nearly 700 times on Peerlyst. “With the Peerlyst going away, we’re losing a central watering hole. The conversations may continue over LinkedIn and Facebook groups. But the loss of a dedicated security social media site will be felt for some time.” The site […]
The post Security professionals lose ‘central watering hole’ with demise of Peerlyst appeared first on CyberScoop.
Continue reading Security professionals lose ‘central watering hole’ with demise of Peerlyst
Secure Ideas has been in the business for 10 years and over the last ten years we have found that everyone learns differently. There is no set way for someone to understand and retain new information. Because of this, we have worked on different ways t… Continue reading Visual Learner? Look no further!
A study from North Carolina State University and Microsoft finds that the technical interviews currently used in hiring for many software engineering positions test whether a job candidate has performance anxiety rather than whether the candidate is co… Continue reading Tech sector job interviews test performance anxiety rather than competence at coding