Skip to main content

Topic

Risk & Security

Firmware Flaws Put Laptops at Risk
Apr 20, 2022

Attackers are always seeking new ways to infiltrate endpoints. Today they're targeting system firmware. Here's what you need to know.

Why Workers Violate Cybersecurity Policies
Apr 12, 2022

Some cybersecurity risks cannot be solved with technology. This is one of them. And it’s more predictable (and fixable) than you might think.

Survey by Harvard Business Review Analytics Services Reveals a Communications Breakdown in Risk Reporting
Apr 4, 2022

New Harvard Business Review Analytic Services report sponsored by Tanium shows organizations are struggling to measure and monitor cyber risk.

Spring4Shell Vulnerability: Critical Details and How to Protect Your Organization
Apr 1, 2022

Named CVE-2022-22965, this vulnerability in the widely used Spring Framework has substantial exploit potential.

Spring4Shell and Other Bugs Make Patching Top Priority for Business
Apr 1, 2022

This week’s Spring4Shell and other high-profile hack alerts underscore the need for automated patch management. Here’s your 101.

Why Organizations Need to Patch a Critical Zero-Day in Chrome
Apr 1, 2022

A new vulnerability has been found in both Chrome and Microsoft’s Chromium-based Edge products. Here's what you need to know.

The Future Is Passwordless
Mar 29, 2022

Enterprises are (finally) trading passwords for biometrics, multifactor authentication and single-sign-on tools. Here’s why.

How the Ukraine War Impacts Cybersecurity Insurance
Mar 24, 2022

As insurance companies review and rewrite their war exclusion clauses, enterprises must double down on proactive cyber hygiene.

Blog image for Mastering Employee Engagement Surveys: From Data to Action
Mar 23, 2022

With President Biden warning this week that Russian cyberattacks on U.S. businesses are “coming,” a new ISACA survey lays bare the latest (sobering) data points.

Image for What is CIS Compliance blog post
Mar 16, 2022

The Harvard professor and data privacy pioneer will speak at this week’s Women in Cybersecurity conference about cyber problems we’re still not addressing.

The Strengthening American Cybersecurity Act Aims to Fix Critical Gaps
Mar 9, 2022

The Senate just passed the most significant cybersecurity legislation in U.S. history. Here are three ways to prep.

Shining a Light on Dark Patterns and Personal Data Collection
Mar 1, 2022

Enterprises use dark patterns to trick us into giving up sensitive data. That puts pressure on them to track and protect that data.