Top IT Security Bloggers
CSO Online
-
Trustwave plans to fight "baseless allegations" over Target breach
CSO OnlineLast week, Trustmark National Bank and Green Bank NA, filed a complaint in Chicago federal court accusing Target and Trustwave of failing to properly secure customer data, and enabling the theft of 110 million records, including 40 million credit cards. -
Why you need to measure the right things in your incident reporting process to improve your security culture
CSO OnlineAs building an effective and measurable security culture increases in importance, the approach we take determines our success. Explore how to start by engaging people and using the right measurements to learn, inform, and grow. Find out why it starts with the incident REPORTING process. -
What’s quality got to do, got to do with it?
CSO OnlineAt the CSO40 conference next week, I'll be speaking on ISO 9001 and its application to information security. But what does ISO 9001, an international standard of quality management, have to do with information security? Answer: Lots. -
12,000 Phishing sites hosted on compromised WordPress installs
CSO OnlineStats compiled by Netcraft show that 12,000 WordPress installations were compromised in February and used in Phishing campaigns that targeted Apple customers and PayPal users. -
Focus cyber risk on critical infrastructure: Remote substations are vulnerable
CSO OnlineDoug DePeppe has some especially strong feelings about protecting remote substations from cyber attacks. Here is his guest CSO blog to explain why. -
Our bias for breach prevention is causing blind spots
CSO OnlineWe have an inherent bias toward prevention, even as we freely admit we can’t prevent a breach. That leads to the neglect of detection, response, and the role of culture in building a successful security program. Explore how and why to make the change, including insights to get started. -
After refusing to pay ransom, Basecamp hit with DDoS
CSO OnlineBasecamp, a project management application, is the latest victim of an extortion scheme that promises DDoS attacks unless a ransom is paid. The service was down for several hours on Monday as attackers slammed the network with malicious packets. -
A follow-up on the California DMV breach blamed on Elavon
CSO OnlineOver the weekend the Hash reported on a story published by Brian Krebs, and continued to chase open threads, resulting in new information. Here's a re-cap of the story, including additional commentary in order to address a reader's questions. -
Defending many attack vectors from the 'problem of one'
CSO OnlineThe playing field is tilted in favor of our adversaries. To win, we must defend all possible attack vectors, yet our adversaries need only exploit one. -
Security analysts evolving from security administrators
CSO OnlineThere seems to be a global evolution in security talent worldwide - partly from want and partly from need. The technology, talent and techniques once necessary to support a sound security posture are changing as threats and business needs also change. My most recent trip to Latin America helps amplify these changes.