What's the biggest attack vector for breaches besides all of the human related ones (i.e. social engineering, phishing, compromised credentials, etc.)? You might think vulnerabilities, but it's actually misconfiguration. The top breach attack vectors are stolen or compromised credentials, phishing, and misconfigurations, which often work together. ...
At the ISC2 Security Congress 2025, CISO Jon France explained ISC2's core mission and how it is adapting its certification programs to accommodate AI and other emerging technologies.
As cybersecurity teams head into the year’s most demanding months, the pressures of reduced staffing, nonstop alerts, and global volatility create a perfect storm of fatigue and risk. Holiday Mode On, a new eBook from CyberRisk Collaborative, SC Media, and CISO Stories, explores how leaders can turn that pressure into a catalyst for resilience.
...
At InfoSec World 2025, cybersecurity legend Dr. Ron Ross delivered a message both urgent and transformative: after half a century of progress, the industry has reached a crossroads.
The holiday season brings a perfect storm for cybersecurity teams — reduced staffing, nonstop alerts, and an “always-on” culture that makes it difficult to rest. According to industry data, 68% of security professionals say they can’t fully disconnect during the holidays, and one in three report performance dips from lack of rest in Q4. The result...
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
