Features
What is a Trojan horse? How this tricky malware works
A Trojan horse is a type of malware that can wreak havoc on computer networks — but only with your unwitting help.
A new website explains data breach risk
Breach Clarity ranks the risk of stolen or exposed personal data. It's a much needed work in progress.
6 questions to ask before buying an ICS / OT security monitoring tool
Shopping for an ICS / OT monitoring solution? Here's what you need to know about evaluating the vendors.
6 signs the CIO-CISO relationship is broken — and how to fix it
Successful collaboration between the IT and security leaders is essential but not always easy. Here are signs the relationship is broken – and 8 steps you should take to fix it.
DNS hijacking grabs headlines, but it’s just the tip of the iceberg
DNS pioneer Paul Vixie contemplates missed opportunities for improving internet security and advocates for widespread use of DNSSEC, which he helped create, and which he believes would go a long way toward improving DNS security.
How to prepare a SOC-as-a-service RFP
Here's how one company structured its SOCaaS request for proposal document. Key takeaway: Don't be afraid to ask for too many details.
What is PKI? And how it secures just about everything online
Public key infrastructure (PKI) is a catch-all term for everything used to establish and manage public key encryption, one of the most common forms of internet encryption. It is baked into every web browser in use today to secure...
3 email security protocols that help prevent address spoofing: How to use them
DMARC, DKIM and SPF will help cut down on malicious emails from spoofed addresses. Setting them up is easier than you think.
The dirty dozen: 12 top cloud security threats
More data and applications are moving to the cloud, which creates unique infosecurity challenges. Here are the "Treacherous 12," the top security threats organizations face when using cloud services.
Coventry University puts security at the heart of its cloud-first strategy
The school goes cloud-first but aims to lead its sector when it comes to cybersecurity.
6 ways malware can bypass endpoint protection
Breaches from attacks that defeat or run around endpoint protection measures are on the rise. Here's how attackers do it.
What is Magecart? How this hacker group steals payment card data
Hacking groups that make up Magecart are effective and persistent at stealing customer and payment card data through skimmers. Here's how they work and what you can do to mitigate the risk.
How to stick it to LinkedIn romance scammers
LinkedIn is becoming a popular channel for criminals to find victims for romance scams. Here's how to identify, report and block those scammers.
How do you secure the cloud? New data points a way
New reports show big differences in risk among public, private and hybrid cloud deployments. Here’s advice on the tools, information and organizational structure needed to execute a successful cloud security strategy.
5 tips for globalizing security awareness training
Global organizations face particular cultural and linguistic challenges when it comes to awareness training. Here's how 2 companies met that challenge and what you can learn from their experience.
![CSO > Password elimination [conceptual password security lock in a trash bin]](https://images.idgesg.net/images/article/2019/06/cso_password_elimination_abstract_passwords_by_bluebay2014_gettyimages-924698706_trashed_security_lock_in_garbage_can_by_porcorex_gettyimages-916512456_2400x1600-100798132-small.3x2.jpg)
How First Citrus Bank got rid of employee passwords
The Florida bank rolled out passwordless authentication in February that relies on device biometrics of their smartphones.
10 penetration testing tools the pros use
Penetration testing is a simulated cyber attack where professional ethical hackers break into corporate networks to find weaknesses ... before attackers do.
Best new Windows 10 security features: Windows Sandbox, more update options
Here's what you need to know about each security update to Windows 10 as they roll out from Microsoft. Now updated for the 1903 feature release.
Why businesses don’t report cybercrimes to law enforcement
Law enforcement agencies estimate the number of cybercrimes that go unreported by businesses number in the millions. Here why and when you should report breaches and other cyber attacks.
5 ways compliance hurts security
The tasks of meeting regulatory requirements and providing true security that actually mitigates risk do not align. Here's how focusing exclusively on compliance can undermine security.
Sponsored Links