Careers & People

12/22/2017
09:00 AM
Connect Directly
Twitter
Twitter
RSS
E-Mail
50%
50%

CISO Holiday Miracle Wish List

If CISOs could make a wish to solve a problem, these would be among the top choices.
Previous
1 of 6
Next

Image Source: Adobe Stock (C) ra2 studio

Image Source: Adobe Stock ra2 studio

With the holiday season in full swing, this is the time of year that has people thinking of happy miracles. Which got us at Dark Reading pondering: if CISOs had their pick of career miracles this holiday season and New Year, what would their miracle be? Based on our engagement with security practitioners, data from recent surveys and opinions from industry pundits, here are our best guesses.

 

Ericka Chickowski specializes in coverage of information technology and business innovation. She has focused on information security for the better part of a decade and regularly writes about the security industry as a contributor to Dark Reading.  View Full Bio

Previous
1 of 6
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
cybersavior
100%
0%
cybersavior,
User Rank: Strategist
12/27/2017 | 11:43:39 AM
The big chair
That's why the big "top security person" chair is so precarious.  "Career Is Soon Over" (CISO), as they say.  It's true.  It is always the hot seat when you are accountable to control and protect against the unknown with limited resources and finite labor.  One unpatched system, one rouge insider and you're toast.

Oh and I disliked the 6-page slideshow format.  I realize that it gets the host exponential opportunities to display ads and content but the consumer experience is annoying. 
Microsoft President: Governments Must Cooperate on Cybersecurity
Kelly Sheridan, Staff Editor, Dark Reading,  11/8/2018
To Click or Not to Click: The Answer Is Easy
Kowsik Guruswamy, Chief Technology Officer at Menlo Security,  11/14/2018
Veterans Find New Roles in Enterprise Cybersecurity
Kelly Sheridan, Staff Editor, Dark Reading,  11/12/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Online Malware and Threats: A Profile of Today's Security Posture
Online Malware and Threats: A Profile of Today's Security Posture
This report offers insight on how security professionals plan to invest in cybersecurity, and how they are prioritizing their resources. Find out what your peers have planned today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-19279
PUBLISHED: 2018-11-14
PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files. On non-SSD devices, this is limited to a 5-second window and file sizes less than 600 bytes. The effect on SSD devices may be greater.
CVE-2018-19280
PUBLISHED: 2018-11-14
Centreon 3.4.x has XSS via the resource name or macro expression of a poller macro.
CVE-2018-19281
PUBLISHED: 2018-11-14
Centreon 3.4.x allows SNMP trap SQL Injection.
CVE-2018-17960
PUBLISHED: 2018-11-14
CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.
CVE-2018-19278
PUBLISHED: 2018-11-14
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed lengt...