Dark Reading Daily -- October 28, 2023

Do Small Companies Need Fractional AppSec Teams Akin to Virtual CISOs?

Zatik takes a fractional approach to AppSec leadership to help small firms access the expertise they need to build secure-by-design software.

Securing Cloud Identities to Protect Assets and Minimize Risk

Preventative security should be driven by data and risk assessment, not compliance.

SMBs Need to Balance Cybersecurity Needs and Resources

Small and midsize businesses face the same cyberattacks as enterprises, but with fewer resources. Here's how to protect a company that has leaner means.

Understand the True Cost of a UEM Before Making the Switch

When investing in a unified endpoint management solution, prioritize the needs of your network and users ahead of brand names. This Tech Tip focuses on questions to ask.

How State and Local Governments Can Serve Citizens More Securely

The top 10 priorities of state CIOs underscore the importance of securing applications and APIs in complex environments.

IriusRisk Brings Threat Modeling to Machine Learning Systems

The newly launched AI & ML Security Library allows developers to analyze the code used in machine learning systems to identify and address risks.

Octo Tempest Group Threatens Physical Violence as Social Engineering Tactic

The financially motivated English-speaking threat actors use advanced social engineering techniques, SIM swapping, and even threats of violence to breach targets.

Virtual Alarm: VMware Issues Major Security Advisory

VMware vCenter Servers need immediate patch against critical RCE bug as race against threat actors begins.

As Citrix Urges Its Clients to Patch, Researchers Release an Exploit

In the race over Citrix's latest vulnerability, the bad guys have a huge head start, with broad implications for businesses and critical infrastructure providers worldwide.

From Snooze to Enthuse: Making Security Awareness Training 'Sticky'

Most companies offer some kind of awareness training these days. But how much of those lessons are employees actually retaining?

What CISOs Should Exclude From SEC Cybersecurity Filings

Should CISOs include only known information in the SEC filings for a material security incident, or is there room to include details that may change during the investigation?

Name That Edge Toon: Office Artifacts

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

Tips for a Streamlined Transition to Zero Trust