News & Commentary

Security requires smart people, processes, and technology. Too often, the "people" portion of the PPT equation is neglected.

Russian National Extradited for 2014 JP Morgan Hack

Quick Hits | 9/10/2018 |

Andrei Tyurin was arrested for his involvement in a hacking campaign targeting US financial institutions, financial news publishers, brokerage firm, and other companies.

DevOps Demystified: A Primer for Security Practitioners

Commentary | 9/10/2018 |

Key starting points for those still struggling to understand the concept.

Mozilla Taps Former Google Exec as it Rethinks Privacy

Quick Hits | 9/4/2018 |

News of the recent hire closely follows Mozilla's decision to block trackers in its Firefox browser by default.

Why Automation Will Free Security Pros to Do What They Do Best

Commentary | 8/31/2018 |

There are three reasons today's security talent pool is neither scalable nor effective in addressing the rapid evolution of cyberattacks.

Lessons From the Black Hat USA NOC

Commentary | 8/30/2018 |

The conference's temporary network operations center provides a snapshot of what is possible when a variety of professionals work together.

4 Benefits of a World with Less Privacy

Commentary | 8/30/2018 |

5 comments

The privacy issue is a problem for a lot of people. I see it differently.

Why CISOs Should Make Friends With Their CMOs

Slideshows | 8/27/2018 |

A partnership between IT security and marketing could offer many benefits to each group — and to the entire enterprise.

How to Gauge the Effectiveness of Security Awareness Programs

Commentary | 8/21/2018 |

If you spend $10,000 on an awareness program and expect it to completely stop tens of millions of dollars in losses, you are a fool. If $10,000 prevents $100,000 in loss, that's a 10-fold ROI.

Proving ROI: How a Security Road Map Can Sway the C-Suite

Commentary | 8/21/2018 |

When executives are constantly trying to cut the fat, CISOs need to develop a flexible structure to improve baseline assessments and target goals, tactics, and capabilities. Here's how.

Data Privacy Careers Are Helping to Close the IT Gender Gap

Commentary | 8/20/2018 |

7 comments

There are three main reasons why the field has been more welcoming for women. Can other tech areas step up?

Make a Wish: Dark Reading Caption Contest Winners

Commentary | 8/18/2018 |

Certification, endpoint security, 2FA, phishing, and PII were among the themes and puns offered by readers in our latest cartoon caption competition. And the winners are ...

Leveraging the Power of your End-Users’ Human Cognition

Dark Reading Videos | 8/17/2018 |

Cofense CEO Rohyt Belani makes a case for more aggressively leveraging the unique ability of your most perceptive and well-trained end-users to help you more quickly spot and stop email threats.

Overcoming 'Security as a Silo' with Orchestration and Automation

Commentary | 8/16/2018 |

When teams work in silos, the result is friction and miscommunication. Automation changes that.

The Data Security Landscape Is Shifting: Is Your Company Prepared?

Commentary | 8/13/2018 |

New ways to steal your data (and profits) keep cropping up. These best practices can help keep your organization safer.

Dark Reading News Desk Live at Black Hat USA 2018

News | 8/9/2018 |

Watch here Wednesday and Thursday, 2 p.m. - 6 p.m. ET to see over 40 live video interviews straight from the Black Hat USA conference in Las Vegas.

Shadow IT: Every Company's 3 Hidden Security Risks

Commentary | 8/7/2018 |

Companies can squash the proliferation of shadow IT if they listen to employees, create transparent guidelines, and encourage an open discussion about the balance between security and productivity.

IT Managers: Are You Keeping Up with Social-Engineering Attacks?

Commentary | 8/6/2018 |

3 comments

Increasingly sophisticated threats require a mix of people, processes, and technology safeguards.

Power Grid Security: How Safe Are We?

Commentary | 8/2/2018 |

Experiencing a power outage? It could have been caused by a hacker … or just a squirrel chewing through some equipment. And that's a problem.

How GDPR Could Turn Privileged Insiders into Bribery Targets

Commentary | 8/2/2018 |

Regulatory penalties that exceed the cost of an extortion payout may lead to a new form of ransomware. These four steps can keep you from falling into that trap.

10 More Women in Security You May Not Know But Should

Slideshows | 7/31/2018 |

The second installment in a series highlighting women who are driving change in cybersecurity but may not be on your radar – yet.

University of Phoenix Poll: 20% of US Adults Have Considered Infosec Careers

Quick Hits | 7/30/2018 |

Many respondents could enter the field by leveraging skills they already have.

The Good & Bad News About Today's Cybersecurity Investment Landscape

Commentary | 7/25/2018 |

Lots of things keep CISOs up at night. But instead of guessing what CISOs want, investors and vendors should incorporate customer feedback throughout product ideation and development cycles.

How 'Projection' Slows Down the Path to Security Maturity

Commentary | 7/24/2018 |

A little bit of self-awareness goes a long way when it comes to evaluating a company's security maturity level. It's also a prerequisite to improving.

Why Security Startups Fly – And Why They Crash

News | 7/20/2018 |

What makes startups stand out in a market flooded with thousands of vendors? Funding experts and former founders share their thoughts.

The Fundamental Flaw in Security Awareness Programs

Commentary | 7/19/2018 |

4 comments

It's a ridiculous business decision to rely on the discretion of a minimally trained user to thwart a highly skilled sociopath, financially motivated criminal, or nation-state.

SOCs Use Automation to Compensate for Training, Technology Issues

News | 7/13/2018 |

Executives and front-line SOC teams see human and technology issues in much different ways, according to two new reports.

What's Cooking With Caleb Sima

News | 7/12/2018 |

Security Pro File: Web app security pioneer dishes on his teenage security career, his love of electric scooters, Ace Ventura – and a new baby food business venture with his wife and famed chef, Kathy Fang.

Lessons from My Strange Journey into InfoSec

Commentary | 7/12/2018 |

Establishing an entrée into the security world can be a maddeningly slow process. For those of us already here, it can be an opportunity to help others.

New Cyber Center Opens at Augusta University in Georgia

Quick Hits | 7/11/2018 |

University partners with state on $100 million Georgia Cyber Center for cybersecurity education and research.

WEF: 217 More Years Until Women and Men Reach Economic Equality

News | 7/5/2018 |

Progress toward economic parity is in reverse for the first time since 2006, but cybersecurity can help change the game.

4 Basic Principles to Help Keep Hackers Out

Commentary | 7/5/2018 |

3 comments

The most effective hackers keep things simple, something organizations must take into account.

6 Drivers of Mental and Emotional Stress in Infosec

Slideshows | 7/2/2018 |

4 comments

Pressure comes in many forms but often with the same end result: stress and burnout within the security community.

There's No Automating Your Way Out of Security Hiring Woes

News | 6/28/2018 |

Call it the paradox of cybersecurity automation: It makes your staff more productive but takes more quality experts to make it work.

The 3 R's for Surviving the Security Skills Shortage

News | 6/27/2018 |

How to recruit, retrain, and retain with creativity and discipline.

First Women-Led Cybersecurity Venture Capital Firm Launches

News | 6/26/2018 |

Chenxi Wang, former Forrester VP of research and Twistlock executive, heads up Rain Capital, with the intent to also help build new startups.

Intel Names Window Snyder as Chief Software Security Officer

News | 6/25/2018 |

The microprocessor giant hires security veteran credited with leading both Microsoft's and Apple's security advancements.

Cisco CPO: Privacy Is Not About Secrecy or Compliance

News | 6/19/2018 |

Michelle Dennedy sat down with Dark Reading at the recent Cisco Live event to set the record straight about privacy, regulation, encryption, and more.

3 Tips for Driving User Buy-in to Security Policies

Commentary | 6/18/2018 |

Teaching users why it's important to commit to security controls is a far more effective strategy than simply demanding that they follow them. Here's how.

Demystifying Mental Health in the Infosec Community

News | 6/14/2018 |

Security experts talk about burnout, diversity, mental health, and legal issues in a new Community track at Black Hat USA.

LeBron vs. Steph: The NBA Version of Cyber Defense vs. Cyberattacks

Commentary | 6/13/2018 |

It takes an aggressive, swarming approach to overcome the most dangerous threats today.

Why CISOs Need a Security Reality Check

Commentary | 6/13/2018 |

We deserve a seat at the executive table, and we'll be much better at our jobs once we take it.

6 Ways Greed Has a Negative Effect on Cybersecurity

Commentary | 6/11/2018 |

3 comments

How the security industry can both make money and stay true to its core values, and why that matters.

Threat Landscape: Dark Reading Caption Contest Winners

Commentary | 6/8/2018 |

Insider threats -- desktop attacks, security awareness, caffeine -- all worthy contenders in our cartoon caption competition. And the winners are ...

Dark Reading Launches Second INsecurity Conference

News | 6/5/2018 |

To be held in Chicago Oct. 23-25, defense-focused conference will feature closed-door discussions, co-resident Black Hat Training sessions

Facebook Must Patch 2 Billion Human Vulnerabilities; How You Can Patch Yours

Commentary | 5/31/2018 |

The situation Facebook is in should be prompting all security teams to evaluate just how defenseless or protected the people in their organizations are.

Machine Learning, Artificial Intelligence & the Future of Cybersecurity

Commentary | 5/30/2018 |

The ability to learn gives security-focused AI and ML apps unrivaled speed and accuracy over their more basic, automated predecessors. But they are not a silver bullet. Yet.

Getting Revolutionary (Not Evolutionary) about Cybersecurity

Commentary | 5/30/2018 |

Being a security revolutionary isn't purely about new, ground-breaking ideas. It's about anticipating, outpacing, and influencing your world, both internally and externally. Here are five keys to success.

How to Empower Today's 'cISOs'

Commentary | 5/29/2018 |