Skip to main content

Topic

Risk & Security

Firmware Flaws Put Laptops at Risk

Attackers are always seeking new ways to infiltrate endpoints. Today they're targeting system firmware. Here's what you need to know.

Why Workers Violate Cybersecurity Policies

Some cybersecurity risks cannot be solved with technology. This is one of them. And it’s more predictable (and fixable) than you might think.

Survey by Harvard Business Review Analytics Services Reveals a Communications Breakdown in Risk Reporting

New Harvard Business Review Analytic Services report sponsored by Tanium shows organizations are struggling to measure and monitor cyber risk.

Spring4Shell Vulnerability: Critical Details and How to Protect Your Organization

Named CVE-2022-22965, this vulnerability in the widely used Spring Framework has substantial exploit potential.

Spring4Shell and Other Bugs Make Patching Top Priority for Business

This week’s Spring4Shell and other high-profile hack alerts underscore the need for automated patch management. Here’s your 101.

Why Organizations Need to Patch a Critical Zero-Day in Chrome

A new vulnerability has been found in both Chrome and Microsoft’s Chromium-based Edge products. Here's what you need to know.

The Future Is Passwordless

Enterprises are (finally) trading passwords for biometrics, multifactor authentication and single-sign-on tools. Here’s why.

How the Ukraine War Impacts Cybersecurity Insurance

As insurance companies review and rewrite their war exclusion clauses, enterprises must double down on proactive cyber hygiene.

Blog image for Mastering Employee Engagement Surveys: From Data to Action

With President Biden warning this week that Russian cyberattacks on U.S. businesses are “coming,” a new ISACA survey lays bare the latest (sobering) data points.

Image for What is CIS Compliance blog post

The Harvard professor and data privacy pioneer will speak at this week’s Women in Cybersecurity conference about cyber problems we’re still not addressing.

The Strengthening American Cybersecurity Act Aims to Fix Critical Gaps

The Senate just passed the most significant cybersecurity legislation in U.S. history. Here are three ways to prep.

Shining a Light on Dark Patterns and Personal Data Collection

Enterprises use dark patterns to trick us into giving up sensitive data. That puts pressure on them to track and protect that data.