Organisations Know Third-Party Cyber Risk Is Serious but Fail to Act, CyberGRX Study Finds
A Forrester study commissioned by CyberGRX finds 95% of organisations struggle to manage third-party cyber risk even as data shared with vendors grows.
Topic
Threat Detection & Defence page 7
HackerOne Adds a Global Top 10, CVE Exploitation Index and Bounty Calculator to Its Platform
HackerOne used its Security@ conference to unveil a Global Top 10 vulnerability table, a CVE Exploitation Index, bounty tools for hackers and enterprise workflow updates.
Ten Reasons for Pessimism About Cybersecurity, According to BeyondTrust's CTO
BeyondTrust CTO Morey Haber lists ten reasons defenders feel they are losing, from attackers staying ahead and staff shortages to IoT and net neutrality.
Ten Reasons for Optimism About Cyber Security, According to Morey Haber
BeyondTrust CTO Morey Haber answers his own list of ten reasons for pessimism, from skills shortages and IoT to end-of-life systems, with a case for optimism.
ZeroFox and Mandiant Form Global Partnership to Take Down Online Threats
ZeroFox's takedown and disruption services for malicious domains and social media accounts become available inside Mandiant's Advantage SaaS platform.
PhishLabs Report: Phishing Volume Up 22% in First Half, With Crypto and SSO Accounts in Focus
PhishLabs' quarterly threat report finds phishing up 22% in the first half, crypto firms hit tenfold harder, and 45% of phishing sites after SSO accounts.
Kaspersky Urges Malaysian Organisations to Know Their Enemy Through Threat Intelligence
At a briefing for Malaysian media, Kaspersky set out three kinds of threat groups and argued that threat intelligence lets organisations go on the offence.
Healthcare Hit Hardest by DNS Attacks During the Pandemic, EfficientIP and IDC Report Finds
The 2021 Global DNS Threat Report from EfficientIP and IDC puts the average cost of a DNS attack on a healthcare organisation at $862,630, up 12% in a year.
RiskSense CEO Srinivas Mukkamala on the “Cyber Pandemic” and Joining Ivanti
Srinivas Mukkamala of RiskSense talks about attacks on supply chains, how ransomware has changed, and why Ivanti bought the company after a partnership.
.webp)
Why Hybrid Work Demands a Rethink of Vulnerability and Patch Management
ManageEngine's Joyal Bennison argues that separate scanning and patching tools slow fixes for remote endpoints, and makes the case for one integrated process.
Passwords and Missed Patches: The Two Weak Points Behind Most Data Breaches
Ivanti's Michael Waring on why reused passwords and slow patching still drive data breaches, and how contextual access and patch automation support zero trust.
Threats Hiding Inside the Network, and How Inline Security Exposes Them
Keysight's Barb Rigel on why breaches go unseen for 206 days, how alert fatigue helps attackers, and why she backs inline security with packet brokers.