Laden...
CSO US First Look
The day's top cybersecurity news and in-depth coverage
March 06, 2024
4 tabletop exercises every security team should run
Every organization should run tabletop exercises that answer key questions about their preparedness for ransomware and DDoS attacks, third-party risks, and insider threats. Read more
Sponsored by Zscaler: Are you prepared to build a zero trust foundation?
With zero trust emerging as the right security framework for todayâs highly distributed and mobile enterprises, CIOs need to think beyond technology deployment. Click here to read more about preparing a multipronged change management campaign to promote a security-centric culture. Read more
TeamCity hit by critical software supply chain bugs
The bugs can be used to gain administrative control over TeamCity's on-premises service, allowing software supply chain attacks. Read more
Get more from the voice of CSOs and IT leadership
Read more from CSO delivered to your inbox. Subscribe now.
30 years of the CISO role â how things have changed since Steve Katz
The first-ever CISO was mostly a technically oriented executive. Theyâve since evolved into masters of risk management, threat mitigation, regulatory compliance, data privacy, and much more. Read more
International warning: Attackers could gain persistence on Ivanti VPN appliances
Researchers identify methods that could allow attackers to bypass Ivanti integrity checks for recent attacks, perhaps surviving factory resets. Read more
If you are generating SAML signing certificates externally, STOP!!
SAML authentication certificates, generated with tools other than dedicated cloud identity solutions, can be forged by hackers, according to a new proof of concept. Read more
North Korea's Lazarus deploys rootkit via AppLocker zero-day flaw
The new exploit allowed Windows kernel privilege escalation, indicating increased sophistication from Lazarus APT group. Read more
© 2024