Newsroom

Stay informed on the latest news from Infosec.

All news

The Evolution of DevSecOps

For this article, I wanted to go back and see how the adoption of DevSecOps has proceeded over the past two years. In a subsequent article, I‘ll share what these IT professionals now see as the future for DevSecOps. I received input from more than 40 IT professionals. Based on their feedback, the most significant evolution of DevSecOps over the past couple of years has been...

Opportunities for DevSecOps in 2021

For this article, I’m sharing what IT professionals now see as the potential for DevSecOps. I previously shared how these IT professionals have seen the recent evolution of DevSecOps, as well.

Feds say phone tracking data is evidence in Capitol riot charges

The FBI said location tracking data from Google places a Wisconsin man in the U.S. Capitol and on Capitol grounds during the January 6 insurrection. Cybersecurity experts say tech companies are tracking everyone.

Wisdom From The Women Leading The Cybersecurity Industry, With Infosec Resources Author Susan Morrow

Susan’s first career was as an analytical chemist, then for the last 25 years she has worked in the cybersecurity and digital identity space. She is currently the R&D Director at Avoco Secure and creates content for Infosec and others on cybersecurity matters.

The Art & Science of Using Cybersecurity Talent Frameworks & Taxonomies

Study after study shows cybersecurity job descriptions lack clarity across most roles and industries — stifling talent recruitment, development and retention efforts. Infosec Institute and Aspen Cybersecurity Workforce Coalition will provide data-backed insights into how organizations are aligning job descriptions and training to tools like the NICE Framework.

IT and Cybersecurity Teams Are Getting Burnt Out – Here’s What Can Be Done

For IT professionals, the last few months have been brutal – never mind the last year of making sure everyone in the organization has the tools they need to be productive and secure for remote work.

Take this culture quiz to see if your users trust your cybersecurity training and team

Security firm launches 18-question test to measure what employees think of security practices and how comfortable they are with calling out possible risks.

Threat Intelligence for Physical Security: The Beginner’s Guide

Teams must defend a growing number of assets: worksites, employees, infrastructure, intellectual property. And as companies expand internationally, they have to stay up to date on events around the world. Yet given a shortage of qualified analysts, no one has time to comb through the stacks of data.

The password hall of shame (and 10 tips for better password security)

Pop quiz: What has been the most popular — and therefore least secure — password every year since 2013? If you answered “password,” you’d be close. “Qwerty” is another contender for the dubious distinction, but the champion is the most basic, obvious password imaginable: “123456.”

Israelis May Ban High Tech Cars From Bases: ‘Perfect Espionage Vector’

Imagine you work at a chemical research part of a base. Its location is secret. But you have a smart car. Through other espionage activities, I found out you work there. I hack your phone or your car’s online account," Keatron Evans said. "I track your location as you go to work every day. Now I know the specific GPS location of your work facility. It goes downhill quickly from there.

Celebrate Identity Management Day 2021 - Learn about the importance of managing and securing digital identities

Businesses should care about data security and data privacy because one data breach can cost your business millions of dollars and have a lasting impact on your reputation. A tarnished reputation translates to lost revenue. But you can help protect your customers data against malicious attacks by doing the following.

Top 5 skills a SOC analyst needs

A security operations center (SOC) analyst works within a team to monitor and fight threats to an organization's IT infrastructure, as well as to identify security weaknesses and opportunities for potential improvements. Since a SOC analyst must juggle multiple critical tasks spanning technical, analytical, and business areas, finding qualified candidates is often challenging.

6 Cybersecurity Tips for Schools

Cybercriminals are getting savvy with their phishing emails and hiding malicious downloads. Every school is vulnerable to attacks from every individual email account on your network. We asked cybersecurity experts for best practices and warning signs for both students and staff to look for to avoiding phishing, ransomware, and malicious downloads.

Infosec to award lifelong scholarships for cybersecurity training in four categories

One of the nation’s leading cybersecurity education companies is offering 12 new scholarships worth $10,000 each to U.S. military personnel, veterans, students and underrepresented groups to help kickstart and advance their careers.

Gen Z goes virtual for job search during COVID-19

As some students were forced to learn virtually during the pandemic, their internship and job searches went virtual too. “I was very nervous about finding a potential internship,” said Sydney Beasely, a college student at Xavier University of Louisiana. Beasely is a member of Generation Z, anyone born between 1997 and 2015. The pandemic left her future uncertain.

4 Kinds of Insider Threats — and How to Minimize Them

The man who had just stormed out on Justin Fier still hadn’t returned, but the room could see what he was up to. Fier, director of cyber intelligence and analytics at Darktrace, had been explaining his company’s cyber AI product to the IT department of a new client.

Job Satisfaction at Infosec Brings Rewards

The cybersecurity education company Infosec lives by a simple equation. Employees who know their work matters are likely to be successful. And employee success equals corporate success. It all adds up at Infosec.

Getting to Know DevSecOps

You’ve probably heard the term DevSecOps thrown around a lot in recent years, and for good reasons. The software industry is more competitive than ever, and paired with a shift in consumer expectations, today’s development organizations often race against the clock to get the next innovative app to the market. Security is often sacrificed in the pursuit of speed.

Finalists: Best IT Security-Related Training Program

Insider threats are a reality facing all organizations big and small. But many of the exposures that stem from employees happen not from malicious intent, but rather lack of understanding of risky behavior and failure to recognize the tactics of external attackers.

How to Build a Strong Information Security Policy

Every organization needs to have security measures and policies in place to safeguard their data. Along with risk management plans and purchasing insurance policies, it’s one of the best and most important ways to protect your data, your employees, your customers, and your business.

Special awards acknowledge high-performing companies

Among this year’s Top Workplaces, employees singled out several companies for their extraordinary efforts in important phases of workplace life, ranging from leadership to transparency.

Meet Madison area's Top Workplaces: Transparency, community involvement drive Infosec culture

When Jack Koziol started Infosec in 2004, he felt that workplace culture was nothing more than a corporate buzzword. Seventeen years later, he knows better. “Culture is the most important thing. It’s really the only thing you can control,” Koziol said.

Jack Koziol, Founder & CEO of Infosec Institute – Cybersecurity Interviews

Jack Koziol is founder & CEO of Infosec. They specialize in fortifying organizations and their employees against security threats with award-winning security and privacy education.

Survey shows users support real ID requirements for social media, but platforms may not agree

Social media platforms face increasing pressure to clamp down on hate speech and disinformation, especially after the massive political and social upheavals of recent years. Now, a new survey has found that a majority of the British public are in favour of mandatory identification for social media, believing it would help reduce online hate speech.