Information security
fromThe Hacker News
1 hour agoNo Exploit Needed: How Attackers Walk Through the Front Door via Identity-Based Attacks
Stolen credentials remain the primary entry point for attackers, despite advancements in cybersecurity.
#cybersecurity-preparedness
#cybersecurity-preparedness
[ follow ]
#cybersecurity #vulnerabilities #data-breach #vulnerability #ransomware #security #risk-management #vercel
fromSecuritymagazine
2 months agoThe New Battleground of Cybersecurity
I've always had what I would consider a hacker mindset, a curiosity to take things apart, understand them, and use that knowledge to solve problems. That mindset took me on a circuitous route into the cybersecurity industry; after being kicked out of high school for hacking computer systems, I worked a range of jobs, managing office supply companies by day and cracking Wi-Fi networks by night until I started a Digital Forensics degree which led me to the world of security research.
Science
fromSecurityWeek
1 week agoMITRE Releases Fight Fraud Framework
"These incidents involve the intentional use of deceptive or illegal practices to fraudulently obtain money, assets, or information from individuals or institutions, and include actions carried out over cyber channels."
Information security
Information security
fromThe Hacker News
1 month agoWhy Security Validation Is Becoming Agentic
Security validation tools operate in silos while attackers exploit interconnected systems, creating a structural blind spot that Agentic Exposure Validation can address through continuous, autonomous, context-aware assessment.
Information security
fromThe Hacker News
1 month agoAttackers Don't Just Send Phishing Emails. They Weaponize Your SOC's Workload
Attackers deliberately overwhelm SOC analysts with high-volume phishing campaigns to delay investigations and create windows for successful breaches, making analyst capacity a critical vulnerability.
Information security
fromSecuritymagazine
1 month agoCracking Cyber's Talent Gap Challenge
Cybersecurity talent shortage stems from outdated hiring practices and narrow role definitions, not insufficient candidates; organizations overlook diverse talent while creating specialized AI roles that widen entry-level gaps.
Information security
fromComputerWeekly.com
1 month agoVulnerability reports: Increase in quantity, decrease in quality? | Computer Weekly
Bug bounty programs face sustainability challenges due to increased low-quality submissions, prompting cURL founder Daniel Stenberg to shut down his HackerOne program and switch to GitHub for vulnerability reporting.
Information security
fromSecuritymagazine
1 month agoThe Great Security Culture Shift: Building a Proactive Defense in an Era of Advanced Threats and Social Engineering
Hackers exploit DLL side-loading on trusted platforms like LinkedIn to deliver malware through seemingly legitimate file attachments, bypassing traditional security defenses and compromising entire corporate networks.
fromSecuritymagazine
2 months agoWhy Traditional Upskilling Strategies Fall Short in Cybersecurity
Hoang: My background sits at the intersection of enterprise IT, data protection, and cybersecurity. I've spent much of my career working with CIOs and CISOs on resilience - how organizations protect, recover, and govern their most critical data in the face of cyber threats, outages, and operational risk. Today, as CIO at Commvault, I see security not as a standalone function, but as a core business capability.
Information security
Information security
fromSecuritymagazine
2 months agoUnderstanding Breaches Before and After They Happen: What Every Organization Should Know
Most security breaches result from neglected fundamentals—human error, unpatched systems, weak authentication, and poor network segmentation—rather than advanced, novel exploits.
[ Load more ]