Industry
Industry | News, how-tos, features, reviews, and videos
Medical device vulnerability could let hackers steal Wi-Fi credentials
Vulnerabilities on battery units for medical infusion pump devices made by Baxter could allow for network access, DoS and man-in-the-middle attacks, highlighting IoT security issues and the need to properly decommission equipment,...
The CSO guide to top security conferences
Tracking postponements, cancellations, and conferences gone virtual — CSO Online’s calendar of upcoming security conferences makes it easy to find the events that matter the most to you.
![A user reviews data and statistical models. [analytics / analysis / tracking / monitoring / logging]](https://images.idgesg.net/images/article/2020/08/user_reviews_data_tracking_monitoring_analytics_event_logging_analysis_threat_detection_by_laurence_dutton_gettyimages-1170687091_2400x1600-100855964-small.3x2.jpg?auto=webp&quality=85,70){kind=tracking}
Top 12 managed detection and response solutions
These MDR services offer human and machine monitoring of your network to identify and respond to the most likely threats.
Apple pushes out emergency updates to address zero-day exploits
Apple has encouraged users of older mobile and desktop devices to update their software ASAP, as a vulnerability could allow an attacker to take complete control of older Apple devices.
How Carrier’s product security team delivers the ‘right support for the right product’
Carrier CPSO John Deskurakis developed a framework for product security that works for the lifecycle of all products across all business lines
Lloyd’s of London to exclude state-backed attacks from cyber insurance policies
From March 2023, Lloyd’s of London will require all its insurer groups to exclude liability for losses arising from state-backed cyberattacks.
How ABM built a cohesive security program around zero trust
CISO Stephanie Franklin-Thomas advances ABM’s security program with a holistic approach to zero trust, putting equal emphasis on people, process, and technology.
Google updates Chronicle with enhanced threat detection
Google Cloud’s Chronicle will now offer curated threat detection as part of its analytics initiative in the Chronicle SecOps suite.
Microsoft urges Windows users to run patch for DogWalk zero-day exploit
Despite previously claiming the DogWalk vulnerability did not constitute a security issue, Microsoft has now released a patch to stop attackers from actively exploiting the vulnerability.
![Tech Spotlight > Cloud [CSO] > Conceptual image of laptop users with cloud security overlay.](https://images.idgesg.net/images/idge/imported/imageapi/2022/05/16/16/spot_cloud_3x2_03_cso_laptop_users_with_ccloud_security_overlay__by_metamorworks_gettyimages-1132912672_b-100891925-small.3x2-100928038-small.3x2.jpg?auto=webp&quality=85,70)
Palo Alto debuts Unit 42 team for managed detection and response
Live expert service builds on Palo Alto’s Cortex extended detection and response (XDR) platform provide, offering a managed detection and response (MDR) team for more personalized cybersecurity management and incident response.
![Computerworld - Scary Tech [Slide-02] - IoT that’s always listening](https://images.idgesg.net/images/article/2017/10/cw_scary_tech_02-100740214-small.3x2.jpg?auto=webp&quality=85,70)
China, Huawei, and the eavesdropping threat
In the world of intelligence, “capability present” changes the conversation from if to when. Huawei is an espionage threat not because of what it has done but because of what it can do.
Thoma Bravo snares Ping Identity in $2.8 billion go-private deal
Private equity firm Thoma Bravo announced plans to purchase IAM (identity and access management) provider Ping Identity, its latest in a lengthy line of security-focused mergers and acquisitions.
5 best practices for secure collaboration
How successful companies are facing the challenges of securing emerging communication technologies.
Deloitte expands its managed XDR platform
New additions beef up intelligence gathering, threat hunting, and mobile device security.
MITRE Engage: a framework for deception
The new framework helps security teams understand their adversaries by creating engagement opportunities that keep defenders in control, says MITRE CISO Bill Hill.
Johnson & Johnson CISO Marene Allison: ‘You can’t sit on today’s technology’
The CSO Hall of Fame inductee stresses the importance of having a roadmap that allows you to anticipate what’s coming and pivot quickly.
How Code42 automates insider risk response
When insiders exhibit risky behaviors, good-natured bots reach out to provide support in this CSO50 award-winning project.
Recorded Future closes acquisition of malware analysis firm Hatching
The deal adds malware analysis to Recorded Future’s existing lineup of threat information services.