Blog

The strong link between cyber threat intelligence and digital risk protection

While indicators of compromise (IoCs) and attackers’ tactics, techniques, and processes (TTPs) remain central to threat intelligence, cyber threat intelligence (CTI) needs have grown over the past few years, driven by things like digital transformation, cloud computing, SaaS propagation, and remote worker support. In fact, these changes have led to a CTI subcategory focused on digital risk protection. DRP is broadly defined as, “telemetry, analysis, processes, and technologies used to identify and mitigate risks associated with digital assets.” I’ve earlier examined ESG research on enterprise CTI programs based on. CISOs are investing here but challenges remain. I’ve also dug into the CTI lifecycle. Nearly three-quarters (74%) of organizations claim they employ a lifecycle, but many describe bottlenecks in one or several of the lifecycle phases. To read this article in full, please click here
http://news.poseidon-us.com/SmrGs0

Intruder joins Google Cloud Partner Advantage program

Intruder has joined the Google Cloud Partner Advantage program as a technology partner, giving organisations the ability to easily monitor their cloud systems for potential security breaches and vulnerabilities. As part of the collaboration, customers are able to connect Intruder to Google Cloud to synchronise assets. With the integration and as a partner, Intruder offers a cybersecurity solution to customers who are deploying numerous assets in their cloud accounts. Intruder’s vulnerability management and attack surface … More → The post Intruder joins Google Cloud Partner Advantage program appeared first on Help Net Security.
http://news.poseidon-us.com/SmqNqk

Dashlane launches Confidential SSO powered by AWS Nitro Enclaves

Dashlane has unveiled an integration of AWS Nitro Enclaves into its security architecture, starting with the launch of Dashlane Confidential SSO in public beta. Leveraging AWS Nitro Enclaves to create isolated computing environments to further protect and securely process highly sensitive data, this single sign-on (SSO) integration for businesses is the first release in a series of breakthrough security features planned over the coming months. While the combination of Dashlane and SSO already ensures reliable … More → The post Dashlane launches Confidential SSO powered by AWS Nitro Enclaves appeared first on Help Net Security.
http://news.poseidon-us.com/SmqNqj

Talon Cyber Security collaborates with Microsoft to provide ChatGPT access

Talon Cyber Security has integrated the Talon Enterprise Browser with Microsoft Azure OpenAI Service to provide enterprise-grade ChatGPT access to customers. “The productivity gains that ChatGPT enables for organizations are too game changing for us to not make an enterprise-level version of this easily available to our customers,” said Ofer Ben-Noon, CEO, Talon Cyber Security. “By embedding Microsoft Azure OpenAI Service in Talon’s Enterprise Browser, organizations can embrace ChatGPT for enterprise use in a manner … More → The post Talon Cyber Security collaborates with Microsoft to provide ChatGPT access appeared first on Help Net Security.
http://news.poseidon-us.com/SmqNpq

Five Eye nations release new guidance on smart city cybersecurity

New guidance, Cybersecurity Best Practices for Smart Cities, wants to raise awareness among communities and organizations implementing smart city technologies that these beneficial technologies can also have potential vulnerabilities. A collaboration among the Five Eye nations (Australia, Canada, New Zealand, the UK, and the US), it advises communities considering becoming smart cities to assess and mitigate the cybersecurity risks that comes with the technology. What makes smart cities attractive to attackers is the data being collected and processed. Because AI-powered systems are being used to integrate this data, these should be given special attention when checking for vulnerabilities. To read this article in full, please click here
http://news.poseidon-us.com/SmnYMK

The biggest data security blind spot: Authorization

Too many people have access to company data they don’t need. Also, too many companies focus on authentication (verifying identity) as a security measure and overlook the importance of authorization (verifying right to access). While it’s important to give employees access to the data they require to do their job, granting too much access increases the risk of data breaches. Maintaining proper authorization is particularly important when we’re facing the economic distress that comes with … More → The post The biggest data security blind spot: Authorization appeared first on Help Net Security.
http://news.poseidon-us.com/SmmkHN

LogRhythm and Zscaler integration streamlines website access control

LogRhythm and Zscaler work together to help organizations around the globe increase network insight and address a variety of cloud access security challenges faced by the modern SOC. LogRhythm SIEM and the Zscaler Zero Trust Exchange platform provide visibility and security to facilitate a modern zero trust architecture. Zscaler secures all user, workload, and device communications over any network, anywhere. The integration with LogRhythm provides visibility into everything occurring in your network, and the websites … More → The post LogRhythm and Zscaler integration streamlines website access control appeared first on Help Net Security.
http://news.poseidon-us.com/SmmJqP

Lean Construction Principles & Best Practices

There’s more than one way to manage a construction project. From the world of manufacturing comes an approach called lean construction. But lean manufacturing and lean construction are two different things. Let’s explore lean construction, defining what it is and…Read More The post Lean Construction Principles & Best Practices appeared first on ProjectManager.
http://news.poseidon-us.com/SmmJKL

Microsoft Security Nomenclature Switches to Bad Weather Naming Scheme

Microsoft announced this week that it has scrapped its security threat nomenclature for a new weather-themed one.
http://news.poseidon-us.com/SmmGZx

Top risks and best practices for securely offboarding employees

Employees won’t work for the same organization forever and dealing with their departures is just part and parcel of business. But the security risks posed by departing staff can be significant. Without secure off-boarding processes, organizations expose themselves to a variety of cybersecurity risks ranging from the innocuously accidental to the maliciously deliberate. High turnover rates and layoffs only add to the offboarding security pressures, with potentially large numbers of employees exiting organizations, sometimes at short notice. CISOs, security teams, and relevant businesses functions should regularly review their offboarding processes to pinpoint potential risks and vulnerabilities, addressing key factors to ensure offboarding strategies remain secure amid evolving cyberthreats and workforce patterns. To read this article in full, please click here
http://news.poseidon-us.com/Smk9ps