Industry Spotlight

PCI DSS, third-party, businessmman with a credit card and computer

Black Friday Scammers are Hard at Work: Security Experts

Scammers are using everything from fraudulent deals and fake ads to spoofed websites and brand impersonation to target online shoppers who are gearing up for Black Friday as the holiday buying season gets underway, according to cybersecurity firms ... Read More
water system cyberthreats EPA OIG

EPA IG Office: ‘High-Risk’ Security Flaws in Hundreds of Water Systems

The watchdog for the EPA found that, of 1,062 U.S. drinking water systems it assessed, 97 had "critical" or "high-risk" security flaws and another 211 had less dangerous vulnerabilities, risking threats from stolen data to disrupted service ... Read More
SolarWinds Uber CISO liability protection

Insurance Firm Introduces Liability Coverage for CISOs

National insurance firm Crum and Forster is offering a professional liability program for CISOs who are facing growing regulatory pressures and sophisticate cyberattacks but often are not covered by their organizations' D&O policies ... Read More
UnitedHealth CISO

UnitedHealth Hires Longtime Cybersecurity Executive as CISO

UnitedHealth Group, which is still picking up the pieces after a massive ransomware attack that affected more than 100 million people, hired a new and experienced CISO to replace the previous executive who became a target of lawmakers for having no cybersecurity background ... Read More
ITRC, cyberattack, small business, tactics, cyber AI, AI attacks, cybersecurity, defense, organization

Small Businesses Boosting Cybersecurity as Threats Grow: ITRC

A report by the Identity Theft Resource Center found that while the number of small businesses hit by a cyberattack and the amount of losses continues to grow, companies are adopting stronger security best practices and investing more in security and compliance tools ... Read More
critical, infrastructure, threats, cybersecurity energy infrastructure CISA NSA

Cloud Security Alliance Advocates Zero Trust for Critical Infrastructure

The Cloud Security Alliance, noting the increasing cyberthreats to critical infrastructure in a highly interconnected world, released a report outlining steps organizations can take to implement zero trust policies to protect against nation-state actors and other threat groups ... Read More