Newsroom

Stay informed on the latest news from Infosec.

All news

Building an Effective Cybersecurity Culture

You can have a top-notch cybersecurity defense in place, but if employees aren't taking their responsibilities seriously, your organization will still be at risk. That's why a strong cybersecurity culture is a must.

Reaction to Social Engineering Indicative of Cybersecurity Culture

During COVID-19, threat actors used fear of the virus and hope of a vaccine to trick unwitting victims into downloading malware or giving up their credentials. It was a master class in social engineering, one that put an organization’s security posture at risk.

Cyberbullying Insurance Is Here. Do You Need It?

If you’re a victim of cyberbullying, you might be entitled to compensation. That’s the pitch insurance companies are selling to families and individuals, as cyberbullying among adults, tweens and teens becomes more common.

Study Reveals an Urgent Need to Quantify Cybersecurity Culture

Studies have shown that organizations with strong cybersecurity cultures experience increased visibility into potential threats, reduced cyber incidents and greater post-attack resilience among other benefits. However, cybersecurity culture has historically been seen as an abstract concept and difficult to quantify.

A series of unfortunate events… Or more? What story the recent cybersecurity attacks could be telling

Recently there has been a dizzying number of major breaches disclosed within just months and sometimes weeks of each other. I’ve been paying close attention and doing a bit of research into the most recent data breaches, especially the more notable ones. The most recent heavily covered incident, the JBS hack, is already having an impact on the food industry.

10 old software bugs that took way too long to squash

In 2021, a vulnerability was revealed in a system that lay at the foundation of modern computing. An attacker could force the system to execute arbitrary code. Shockingly, the vulnerable code was almost 54 years old—and there was no patch available, and no expectation that one would be forthcoming.

7 ways technical debt increases security risk

Shoddily developed and deployed projects can leave your enterprise vulnerable to attacks. Here's how to stop technical debt from sending your organization to the cyber-poorhouse.

Employees Can Be Major Contributors To Your Cyber Defense: Infosec Security Awareness Training

Tyler Schultz, product marketing manager at Infosec, talks to us about Infosec IQ, current trends in cyber security, and the importance of building a strong cybersecurity culture with employees at the heart of it.

Wisdom From The Women Leading The Cybersecurity Industry, With Andrea Harston of Infosec

The cybersecurity industry has become so essential and exciting. What is coming around the corner? What are the concerns we should keep an eye out for? How does one succeed in the cybersecurity industry? As a part of this interview series called “Wisdom From The Women Leading The Cybersecurity Industry”, we had the pleasure of interviewing Andrea Harston, Curriculum Director of Content,

Securing The Next Generation Of 911

Shifting from an analog to digital operating environment — the next generation of 911 — will require strategic investments into three key areas: people, processes and technology. As call center technology evolves nationwide, the need for greater cybersecurity in the public safety space has never been more important.

McDonald's suffers cyberattack in US, South Korea and Taiwan

McDonald's is the latest company to fall victim to a cyberattack exposing customer and other data in the U.S., Taiwan and China, The Wall Street Journal has reported. The restaurant giant reportedly told the paper that it has hired external investigators to analyze unauthorized activity on an internal security system.

Department of Justice recovers more than half ransom paid by Colonial Pipeline

The Department of Justice recently recovered more than half of the ransom Colonial Pipeline paid to hackers after shutting down its East Coast pipeline for six days. Still, other corporate ransomware victims should not count on getting similar assistance.

Should You Invest in Cardano?

Ethereum – the name of the blockchain platform itself is often used interchangeably with its native cryptocurrency token, Ether (ETH) – is the second most valuable cryptocurrency project out there, only trailing Bitcoin (BTC). Yet, even as Ethereum seeks to overtake Bitcoin, it has a newer rival coming up to try to take its place.

Data Protection is Security: 4 Ways MSPs Can Sell the Value of BDR

Managed Service Providers (MSPs) and their clients are growing numb to the ransomware threat, but that doesn’t change the very real situation that remains. As you know, not only have ransomware attacks been rising year after year, but since remote work became a must, it continues to spike. No, this is not another ransomware article.

9 Modern-Day Best Practices for Log Management

Log management is nothing new. But doing so smartly, correctly, and concisely in today's data-driven world is another story.

ROUNDTABLE: Experts react to President Biden’s exec order in the aftermath of Colonial Pipeline hack

As wake up calls go, the Colonial Pipeline ransomware hack was piercing. The attackers shut down the largest fuel pipeline in the U.S., compelling Colonial to pay them 75 bitcoins, worth a cool $5 million.

Wi-Fi Design, Implementation Flaws Allow a Range of Frag Attacks

Every Wi-Fi product is affected by at least one fragmentation and aggregation vulnerability, which could lead to a machine-in-the-middle attack, researcher says.

The Colonial Pipeline Attack is Emblemic of Bigger IIoT Woes

With the regularity of cyberattacks, it comes as a surprise the attention the hack of the Colonial Pipeline has received. It’s not because the attackers had a nefarious plan to disable critical infrastructure like we’ve seen in the past with PLC attacks like Stuxnet and DDoS attacks like WannaCry – they didn’t.

FragAttacks Wi-Fi Vulnerabilities Pose Widespread Threat to Individuals, Businesses

FragAttacks, a new set of Wi-Fi vulnerabilities, can be exploited to steal user information or attack devices. And every Wi-Fi is affected by by at least one vulnerability.

Quick-Response Report: Lessons Learned & Next Steps After The Colonial Pipeline Hack

The Colonial Pipeline, which delivers nearly half of the diesel and gasoline consumed on the East Coast of the United States, shut down Friday, May 7 in response to a cyberattack. The ransomware attack has disrupted life around the US.

Qwick Takes: The Colonial Pipeline attack and its wider security implications

This week, Talking Biz News Deputy Editor Erica Thompson reached out to Qwoted’s community of experts to inquire about the security implications of the Colonial Pipeline outage following a ransomware attack last week.

How do I get my users to pay attention to security training?

As cyber security risks grow daily, businesses must educate staff about these through cyber awareness training. But how can they ensure this is taken seriously by employees?

10 Security Awareness Training Mistakes to Avoid

"A common mistake is assignment of the same security awareness training to everyone within the organization," says Adam Kohnke, an information security manager at the Infosec Institute. "Matching training to employee roles and motivations, while time-consuming, is one of the most important steps in any awareness training program."

A few thoughts about the Colonial Pipeline hack

I want to first address the world of ransomware. The more I learn about this incident, the more it sounds like they either paid or are considering paying the ransom.