News & Commentary

Teaching users why it's important to commit to security controls is a far more effective strategy than simply demanding that they follow them. Here's how.

Dark Reading Launches Second INsecurity Conference

News | 6/5/2018 |

To be held in Chicago Oct. 23-25, defense-focused conference will feature closed-door discussions, co-resident Black Hat Training sessions

Fortinet Completes Bradford Networks Purchase

Quick Hits | 6/4/2018 |

NAC and security firm added to Fortinet's portfolio.

5 Tips for Protecting SOHO Routers Against the VPNFilter Malware

Slideshows | 6/2/2018 |

Most home office users need to simply power cycle their routers and disable remote access; enterprises with work-at-home employees should move NAS behind the firewall.

The Good News about Cross-Domain Identity Management

Commentary | 5/31/2018 |

Adoption of the SCIM open source, standards-based approach for syncing user information between applications is ratcheting up among SaaS vendors as well as enterprises.

Facebook Must Patch 2 Billion Human Vulnerabilities; How You Can Patch Yours

Commentary | 5/31/2018 |

The situation Facebook is in should be prompting all security teams to evaluate just how defenseless or protected the people in their organizations are.

6 Security Investments You May Be Wasting

Slideshows | 5/31/2018 |

Not all tools and services provide the same value. Some relatively low-cost practices have a major payoff while some of the most expensive tools make little difference.

6 Ways Third Parties Can Trip Up Your Security

Slideshows | 5/29/2018 |

Poor access control, inadequate patch management, and non-existent DR practices are just some of the ways a third party can cause problems

GDPR Oddsmakers: Who, Where, When Will Enforcement Hit First?

News | 5/25/2018 |

12 comments

The GDPR grace period ends today. Experts take their best guesses on when data protection authorities will strike - and what kind of organizations will be first to feel the sting of the EU privacy law.

GDPR 101: Keeping Data Safe Throughout the 'Supply Chain'

Commentary | 5/22/2018 |

There are a lot of moving pieces involved with data collection, retention, and processing in the EU's new General Data Protection Regulation. Here's how to break down responsibilities between your security team and service providers.

Why Isn't Integrity Getting the Attention It Deserves?

Commentary | 5/17/2018 |

A focus on integrity requires a shift in the way many approach security management, but it's one of the most promising approaches to effective enterprise security.

6 Enterprise Password Managers That Lighten the Load for Security

Slideshows | 5/3/2018 |

EPMs offer the familiar password wallet with more substantial administrative management and multiple deployment models.

Spring Clean Your Security Systems: 6 Places to Start

Commentary | 5/2/2018 |

The sun is shining and you have an extra kick in your step. Why not use that newfound energy to take care of those bothersome security tasks you've put off all winter?

'Zero Login:' The Rise of Invisible Identity

Commentary | 4/27/2018 |

Will new authentication technologies that recognize users on the basis of their behaviors finally mean the death of the despised password?

12 Trends Shaping Identity Management

Slideshows | 4/26/2018 |

As IAM companies try to stretch 'identity context' into all points of the cybersecurity market, identity is becoming 'its own solar system.'

Despite Risks, Nearly Half of IT Execs Don't Rethink Cybersecurity after an Attack

Commentary | 4/25/2018 |

6 comments

A recent survey reveals a troubling degree of security inertia lurking among scores of organizations. But there are a few bright spots.

Biometrics Are Coming & So Are Security Concerns

Commentary | 4/20/2018 |

Could these advanced technologies be putting user data at risk?

8 Ways Hackers Monetize Stolen Data

Slideshows | 4/17/2018 |

4 comments

Hackers are craftier than ever, pilfering PII piecemeal so bad actors can combine data to set up schemes to defraud medical practices, steal military secrets and hijack R&D product information.

20 Ways to Increase the Efficiency of the Incident Response Workflow

Commentary | 4/10/2018 |

Despite all the good intentions of some great security teams, we are still living in a "cut-and-paste" incident management world.

Protect Yourself from Online Fraud This Tax Season

Commentary | 4/6/2018 |

Use these tips to stay safe online during everyone's least-favorite time of the year.

One-Third of Internal User Accounts Are 'Ghost Users'

News | 4/4/2018 |

4 comments

Attackers and malware can easily move laterally through an organization, thanks to inadequate access controls on file systems and a proliferation of inactive but enabled users.

Francisco Partners Buys Bomgar

Quick Hits | 4/3/2018 |

Private equity firm Francisco Partners plans to acquire Bomgar, a privileged access and identity management company.

Deconstructing the DOJ Iranian Hacking Indictment

Commentary | 3/29/2018 |

The alleged attackers used fairly simple tools, techniques and procedures to compromise a new victim organization on an almost weekly basis for over five years.

A Data Protection Officer's Guide to the GDPR Galaxy

Commentary | 3/19/2018 |

Impending deadline got you freaking out? These five tips might help you calm down, at least a little.

Voice-Operated Devices, Enterprise Security & the 'Big Truck' Attack

Commentary | 3/15/2018 |

The problem with having smart speakers and digital assistants in the workplace is akin to having a secure computer inside your office while its wireless keyboard is left outside for everyone to use.

Segmentation: The Neglected (Yet Essential) Control

Commentary | 3/14/2018 |

Failure to deploy measures to contain unauthorized intruders is a recipe for digital disaster.

IoT Product Safety: If It Appears Too Good to Be True, It Probably Is

Commentary | 3/12/2018 |

Proposed new connected-product repair laws will provide hackers with more tools to make our lives less secure.

DevSecOps: The Importance of Building Security from the Beginning

Commentary | 3/9/2018 |

Here are four important areas to tackle in order to master DevSecOps: code, privacy, predictability, and people.

Privilege Abuse Attacks: 4 Common Scenarios

Commentary | 3/7/2018 |

It doesn't matter if the threat comes from a disgruntled ex-employee or an insider anticipating financial gain, privilege abuse patterns are pretty much the same, and they're easy to avoid.

Identity Management: Where It Stands, Where It's Going

News | 3/6/2018 |

How companies are changing the approach to identity management as people become increasingly digital.

What Enterprises Can Learn from Medical Device Security

Commentary | 3/1/2018 |

In today's cloud-native world, organizations need a highly distributed approach that ties security to the workload itself in order to prevent targeted attacks.

How to Secure 'Permissioned' Blockchains

Commentary | 2/28/2018 |

At the heart of every blockchain is a protocol that agrees to the order and security of transactions in the next block. Here's how to maintain the integrity of the chain.

Leveraging Security to Enable Your Business

Commentary | 2/23/2018 |

When done right, security doesn't have to be the barrier to employee productivity that many have come to expect. Here's how.

C-Suite Divided Over Security Concerns

News | 2/21/2018 |

Survey shows 60% of CEOs plan to invest the most resources in malware prevention, but CISOs, CIOs, and CTOs are on a different page.

IRS Reports Steep Decline in Tax-Related ID Theft

News | 2/15/2018 |

Research group Javelin confirms that the numbers are trending in the right direction, with total fraud losses dropping more than 14% to $783 million.

Back to Basics: AI Isn't the Answer to What Ails Us in Cyber

Commentary | 2/9/2018 |

The irony behind just about every headline-grabbing data breach we've seen in recent years is that they all could have been prevented with simple cyber hygiene.

20 Signs You Need to Introduce Automation into Security Ops

Commentary | 2/8/2018 |

Far too often, organizations approach automation as a solution looking for a problem rather than the other way around.

Identity Fraud Hits All-Time High in 2017

News | 2/6/2018 |

Survey reports that the number of fraud victims topped 16 million consumers last year, and much of that crime has moved online.

Lieberman Software Acquired by Bomgar

Quick Hits | 2/1/2018 |

Deal combines privileged access management products, technologies.

Google Cloud Least-Privilege Function Goes Live

Quick Hits | 1/31/2018 |

Custom Roles for Cloud IAM now available in production from Google.

Passwords: 4 Biometric Tokens and How They Can Be Beaten

Commentary | 1/31/2018 |

Authentication security methods are getting better all the time, but they are still not infallible.

K-12 Study Gives Schools Low Marks for Protecting Student Privacy Online

News | 1/31/2018 |

Survey says local school districts and education departments lack even the most basic security and privacy safeguards.

6 Tips for Building a Data Privacy Culture

Slideshows | 1/26/2018 |

Experts say it's not enough to just post data classification guidelines and revisit the topic once a year. Companies have to build in privacy by design.

New Voice MFA Tool Uses Machine Learning

Quick Hits | 1/25/2018 |

Pindrop claims its new multi-factor authentication solution that uses the "Deep Voice" engine could save call centers up to $1 per call.

Facebook Buys Identity Verification Firm

Quick Hits | 1/25/2018 |

6 comments

Facebook has purchased startup Confirm, which uses pattern analysis to confirm identities.

GDPR: Ready or Not, Here It Comes

Commentary | 1/24/2018 |

As organizations all over the world look ahead to May 25 when Europe's General Data Protection Regulation takes effect, many will fall short.

One Identity Acquires Balabit

Quick Hits | 1/17/2018 |

Union expands One Identity's privileged access management and analytics offerings.

1 in 9 Online Accounts Created in 2017 Was Fraudulent

Quick Hits | 1/16/2018 |

Account takeovers hot, stolen credit cards not.

6 Tips to Protect Against Technical Support Fraud

Slideshows | 12/27/2017 |

Just when you’re having fun over the holidays and not paying attention, you can be hit with a tech support scam. Here's how to stay safe into the new year.

Oracle Product Rollout Underscores Need for Trust in the Cloud

News | 12/11/2017 |