News & Commentary

The ride-sharing company has confirmed an October 2016 data breach that compromised 57 million accounts.

Who Am I? Best Practices for Next-Gen Authentication

Commentary | 11/15/2017 |

By their very nature, antiquated, static identifiers like Social Security numbers and dates of birth are worse than passwords.

Inhospitable: Hospitality & Dining’s Worst Breaches in 2017

Slideshows | 11/8/2017 |

Hotels and restaurants are in the criminal crosshairs this year.

How Law Firms Can Make Information Security a Higher Priority

Commentary | 11/8/2017 |

Lawyers always have been responsible for protecting their clients' information, but that was a lot easier to do when everything was on paper. Here are four best practices to follow.

Hiring Outside the Box in Cybersecurity

Commentary | 11/7/2017 |

Candidates without years of experience can still be great hires, as long as they are ready, willing, and able.

How I Infiltrated a Fortune 500 Company with Social Engineering

Commentary | 11/7/2017 |

Getting into the company proved surprisingly easy during a contest. Find out how to make your company better prepared for real-world attacks.

10 Mistakes End Users Make That Drive Security Managers Crazy

Slideshows | 11/2/2017 |

Here's a list of common, inadvertent missteps end users make that can expose company data.

Why Data Breach Stats Get It Wrong

Commentary | 10/26/2017 |

It's not the size of the stolen data dump that is important. It's the window between the date of the breach and the date of discovery that represents the biggest threat.

Advanced Analytics + Frictionless Security: What CISOS Need to Know

Commentary | 10/25/2017 |

Advances in analytics technologies promise to make identity management smarter and more transparent to users. But the process is neither straightforward nor easy.

What's Next after the SEC 'Insider Trading' Breach?

Commentary | 10/19/2017 |

Last month's hack of the Securities and Exchange Commission may prove to be the most high-profile corporate gatekeeper attack to date. But it definitely won't be the last.

Game Change: Meet the Mach37 Fall Startups

Slideshows | 10/18/2017 |

CEOs describe how they think their fledgling ventures will revolutionize user training, privacy, identity management and embedded system security.

Banks Start Broad Use of Blockchain, as JP Morgan, IBM Lead Way

News | 10/17/2017 |

Two major players announced cross-border payment networks built on blockchain technologies Monday, and more financial services will follow soon, despite opinions about Bitcoin.

Google Bolsters Security for Select Groups

Quick Hits | 10/17/2017 |

Business leaders, political campaign teams, journalists, and other high-risk groups will receive advanced email and account protection.

How Systematic Lying Can Improve Your Security

Commentary | 10/11/2017 |

No, you don't have to tell websites your mother's actual maiden name.

SecureAuth to Merge with Core Security

News | 9/20/2017 |

K1 Investment Management, which owns Core Security, plans to acquire the identity management and authentication company for more than $200 million.

How Apple's New Facial Recognition Technology Will Change Enterprise Security

Commentary | 9/19/2017 |

Expect a trickle-down effect, as tech similar to Face ID becomes offered outside of Apple.

Workplace IoT Puts Companies on Notice for Smarter Security

Commentary | 9/6/2017 |

Blacklisting every "thing" in sight and banning connections to the corporate network may sound tempting, but it's not a realistic strategy.

The Active Directory Botnet

Dark Reading Videos | 8/30/2017 |

It's a nightmare of an implementation error with no easy fix. Ty Miller and Paul Kalinin explain how and why an attacker could build an entire botnet inside your organization.

GoT & the Inside Threat: Compromised Insiders Make Powerful Adversaries

Commentary | 8/24/2017 |

14 comments

What Game of Thrones' Arya Stark and the Faceless Men can teach security pros about defending against modern malware and identity theft.

Risky Business: Why Enterprises Can’t Abdicate Cloud Security

Commentary | 8/7/2017 |

It's imperative for public and private sector organizations to recognize the essential truth that governance of data entrusted to them cannot be relinquished, regardless of where the data is maintained.

The Lazy Habits of Phishing Attackers

News | 7/27/2017 |

Most hackers who phish accounts do little to hide their tracks or even mine all of the data they can from phished accounts, mostly because they can afford to be lazy.

4 Steps to Securing Citizen-Developed Apps

Commentary | 7/19/2017 |

Low- and no-code applications can be enormously helpful to businesses, but they pose some security problems.

AWS S3 Breaches: What to Do & Why

Commentary | 7/17/2017 |

Although basic operations in Amazon's Simple Storage Services are (as the name implies) - simple - things can get complicated with access control and permissions.

The High Costs of GDPR Compliance

Commentary | 7/11/2017 |

Looming, increasingly strict EU privacy regulations are pushing privacy spending to the top of IT priorities and budgets.

Avoiding the Dark Side of AI-Driven Security Awareness

Commentary | 7/5/2017 |

Can artificial intelligence bring an end to countless hours of boring, largely ineffective user training? Or will it lead to a surveillance state within our information infrastructures?

WannaCry Blame Game: Why Delayed Patching is Not the Problem

Commentary | 6/27/2017 |

While post mortems about patching, updating, and backups have some value, the best preventative security controls are increased understanding and knowledge.

WannaCry? You’re Not Alone: The 5 Stages of Security Grief

Commentary | 6/22/2017 |

10 comments

As breach after breach hits the news, security professionals cope with the classic experiences of denial, anger, bargaining, depression, and acceptance.

Climbing the Security Maturity Ladder in Cloud

Commentary | 6/15/2017 |

These five steps will insure that you achieve the broadest coverage for onboarding your most sensitive workloads.

Why Compromised Identities Are IT’s Fault

Commentary | 6/7/2017 |

The eternal battle between IT and security is the source of the problem.

DNS Is Still the Achilles’ Heel of the Internet

Partner Perspectives | 6/1/2017 |

Domain Name Services is too important to do without, so we better make sure it’s reliable and incorruptible

The Case for Disclosing Insider Breaches

Commentary | 5/31/2017 |

Too often organizations try to sweep intentional, accidental or negligent employee theft of data under the rug. Here’s why they shouldn’t.

Deconstructing the 2016 Yahoo Security Breach

Commentary | 5/19/2017 |

One good thing about disasters is that we can learn from them and avoid repeating the same mistakes. Here are five lessons that the Yahoo breach should have taught us.

The Fundamental Flaw in TCP/IP: Connecting Everything

Commentary | 5/17/2017 |

4 comments

Almost 30 years after its inception, it's time to fix the engine that both fuels the modern day Internet and is the root cause of its most vexing security challenges.

Your Grandma Could Be the Next Ransomware Millionaire

Commentary | 5/15/2017 |

Today's as-a-service technology has democratized ransomware, offering practically anyone with a computer and an Internet connection an easy way to get in on the game.

SSA Plans Stronger Website Authentication

Quick Hits | 5/11/2017 |

Starting in June 2017, the US Social Security Administration will require a more secure login process for SSA.gov.

Shining a Light on Security’s Grey Areas: Process, People, Technology

Commentary | 5/9/2017 |

The changing distributed and mobile business landscape brings with it new security and privacy risks. Here’s how to meet the challenge.

Backdoors: When Good Intentions Go Bad

Commentary | 5/5/2017 |

Requiring encrypted applications to provide backdoors for law enforcement will weaken security for everyone.

Google Docs Phishing Scam a Game Changer

News | 5/4/2017 |

Experts expect copycats that take advantage of passive authentication from third-party applications using standards such as OAuth.

Why OAuth Phishing Poses A New Threat to Users

Commentary | 5/4/2017 |

Credential phishing lets attackers gain back-end access to email accounts, and yesterday's Google Docs scam raises the risk to a new level.

Striving For Improvement on World Password Day

News | 5/2/2017 |

Consumer hygiene and poor authentication practices create toxic combo.

Kill Chain & the Internet of Things

Commentary | 4/20/2017 |

IoT “things” such as security cameras, smart thermostats and wearables are particularly easy targets for kill chain intruders, but a layered approach to security can help thwart an attack.

Google Won't Trust Symantec and Neither Should You

Commentary | 4/19/2017 |

As bad as this controversy is for Symantec, the real damage will befall the company and individual web sites deemed untrustworthy by a Chrome browser on the basis of a rejected Symantec certificate.

‘Intrusion Suppression:' Transforming Castles into Prisons

Commentary | 4/18/2017 |

How building cybersecurity structures that decrease adversaries’ dwell time can reduce the damage from a cyberattack.

6 New Security Startups Named to MACH37 Spring Cohort

Slideshows | 4/15/2017 |

The companies selected this year include technical talent that draws from Silicon Valley to Hungary and Western Europe.

Health Savings Account Fraud: The Rapidly Growing Threat

Commentary | 4/14/2017 |

As income tax season comes to a close, financially-motivated cybercriminals are honing new tactics for monetizing medical PII.

OSX.Dok: New & Sophisticated Mac Malware Strikes

Partner Perspectives | 4/7/2017 |

Phishing-deployed malware can capture account credentials for any website users log into.

FAFSA Tool Taken Offline After Breach Report

Quick Hits | 4/7/2017 |

Personal data of 100,000 taxpayers compromised after IRS’ students financial aid tool hacked.

Tax Deadline Leads to Heightened Phishing Email Activities

Quick Hits | 4/3/2017 |

IRS warns tax professionals to watch out for phishing email scams attempting to steal user credentials.

The Business of Security: How your Organization Is Changing beneath You

Commentary | 3/30/2017 |

And why it’s your job to change with it and ‘skate where the puck is headed.’

Privacy Babel: Making Sense of Global Privacy Regulations

Commentary | 3/29/2017 |