Strategy: Page 11
-
Sponsored by Synopsys
DevSecOps, done right, can achieve both speed and security in software development
You don’t have to choose between speed or security if you do DevSecOps correctly. Learn how.
April 15, 2024 -
CISO role shows significant gains amid corporate recognition of cyber risk
A report from Moody’s Ratings shows CISOs and other senior-level cyber executives have become key decision makers within the C-suite.
By David Jones • April 9, 2024 -
Explore the Trendlineâž”
.shock via Getty ImagesTrendlineRisk Management
An esclation of cyber risks facing businesses and government has made cyber resilience a major priority.
By Cybersecurity Dive staff -
Industry stakeholders seek 30-day delay for CIRCIA comments deadline
Industry officials are asking for additional time to comb through hundreds of pages of detailed rules about disclosure of covered cyber incidents and ransom payments.
By David Jones • April 8, 2024 -
Sponsored by Fortinet
The top 5 SecOps strategies to strengthen business in 2024
Learn the importance of specialized security fueled by artificial intelligence and machine learning, why comprehensive coverage from attacks is critical and how to embrace new methods of supporting your IT teams.
April 8, 2024 -
Cybersecurity venture funding remains weak, near three-year low
Quarterly funding levels hit $2.3 billion in Q1 2024, a far cry from the $8 billion high the market achieved in the final quarter of 2021, according to Pinpoint Search Group.
By Matt Kapko • April 5, 2024 -
What’s missing for SMBs? A solid cybersecurity culture
Small businesses can be especially vulnerable to cyberattacks because of their limited resources, and few have employees on staff who truly understand the value of secure business operations.
By Sue Poremba • April 1, 2024 -
Water woes: A federal push for cyber mitigation is highlighting the sector’s fault lines
The water utility industry says they recognize the heightened threat environment, but the current federal push fails to account for their resource constraints.
By David Jones • March 28, 2024 -
CISA issues notice for long-awaited critical infrastructure reporting requirements
CIRCIA will require covered entities to promptly disclose major cyber incidents and ransomware payments.
By David Jones • March 27, 2024 -
Marsh launches group captive insurance firm for cyber
The company wants to provide larger, financially stable companies with alternatives for managing risk, after years of volatility in pricing and coverage.
By David Jones • March 25, 2024 -
How companies describe cyber incidents in SEC filings
The words businesses use in cybersecurity disclosures matter. They can channel confidence in the recovery process, potential impacts and legal liabilities.
By Matt Kapko • March 19, 2024 -
Sponsored by Palo Alto Networks
Security consultation is a non-negotiable for M&A activity
Over 20% of external cloud services change monthly. Without visibility, it is easy to lose track of changes and prevent risks. Get the report to learn more.
By Matt Kraning, CTO, Cortex, Palo Alto Networks • March 18, 2024 -
Audit committees rank cybersecurity as top priority amid SEC crackdown
Cyberattacks are just one of several rapidly changing threats confronting audit committees, according to the Center for Audit Quality and Deloitte.
By Jim Tyson • March 14, 2024 -
Google Cloud CISO spots asymmetric advantage for AI in defense
Organizations have the upper hand in using generative AI for security because it’s trained on data they own and context they tune against it, Phil Venables says.
By Matt Kapko • March 13, 2024 -
Ransomware festers as a top security challenge, US intel leaders say
U.S. intelligence leaders warn ransomware activity is growing, despite high profile efforts to seize threat actors’ infrastructure.
By Matt Kapko • March 12, 2024 -
What’s behind the demand for MDR and IAM systems
It's not just the front door businesses need to protect. Organizations also have to recognize the damage threat actors can do once they’re inside.
By Sue Poremba • March 7, 2024 -
CrowdStrike dodges pricing war with Palo Alto Networks
CEO George Kurtz called out CrowdStrike's largest competitor, dismissing Palo Alto Network's strategy of free incentives. "Free is never free," he said.
By Matt Kapko • March 6, 2024 -
AWS CISO: Generative AI is just a tool, ‘not a magic wand’
Attackers and defenders have access to the same capabilities in generative AI. Clear advantages for either side have yet to materialize.
By Matt Kapko • March 5, 2024 -
Why Okta is overhauling its priorities, culture around security
CSO David Bradbury acknowledges the company’s brand is tarnished. “We need a track record of zero breaches. That’s what builds trust.”
By Matt Kapko • March 1, 2024 -
NIST makes it official: governance is a critical part of cybersecurity
A collection of resources accompany CSF 2.0 to make the guidance easier for businesses to use and put into practice across their operations.
By Matt Kapko • Feb. 29, 2024 -
Okta reports ‘minimal’ financial impact following support portal attack
The identity and access management firm is promising to make security a top priority, even though Okta’s CFO said the attack fallout is “not quantifiable.”
By Matt Kapko • Feb. 29, 2024 -
Okta, with a bruised reputation, rethinks security from the top down
CSO David Bradbury detailed to Cybersecurity Dive what the identity and access management company got wrong and the security pledges it's making to customers.
By Matt Kapko • Feb. 27, 2024 -
CFOs take backseat to CISOs on SEC cyber rules
Less than half of finance chiefs are involved in the SEC's cybersecurity breach disclosure process, AuditBoard found.
By Alexei Alexis • Feb. 27, 2024 -
LockBit group revives operations after takedown
The comeback is no surprise to experts — and some think LockBit as a brand is dead — but the reemergence underscores persistent challenges for authorities.
By Matt Kapko • Feb. 26, 2024 -
Palo Alto Networks’ free incentives offer sparks investor anxiety
The firm is giving away services and offering deferred billing to corral new customers into its consolidated cybersecurity platforms.
By David Jones • Feb. 21, 2024 -
State Department puts $10M bounty on AlphV ransomware group
The prolific ransomware group and its affiliates are behind some of the most high-profile attacks in the last year.
By Matt Kapko • Feb. 15, 2024