Security Strategy, Plan, Budget

FBI Director Christopher Wray speaks at an event in Washington, D.C. Security pros knew that attacks on VPNs had become serious when the FBI and CISA issued a warning last fall. Today’s columnist, Dor Knafo of Axis Security, says companies have to think of remote access as a business continuity issue.

Today’s columnist, Christopher Muffat of Dathena, offers CISOs ideas on doing more with less from his experiences working as a security leader at Barclays and other organizations.

Softing Industrial Automation GmbH, Kepware PTC, and Matrikon Honeywell all provided fixes for their respective products after security firm Claroty privately disclosed them during 2020.

Today’s columnist, Ofer Israeli of Illusive Networks, says ransomware attacks like the one last year on George Washington University Hospital won’t subside when the pandemic finally ends. He argues that security teams need to take on a tough, new mindset he calls ‘Triple Zero’ to lock down organizations.

The nonprofit IT trade association CompTIA officially announced the launch of its new Cybersecurity Advisory Council, which will deliver informational content, guidance and recommendations to the tech sector.

Food banks have been a common site around the country as a result of the economic difficulties caused by the pandemic. Today’s columnist, Johanna Baum of S3 Consulting, says as we face continued economic uncertainty and a work-from-home culture, managing identities has become the first line of defense.

Today’s columnist, James Stanger of CompTIA, says the SolarWinds hack was an outgrowth of “status quo” IT management. Stanger urges companies to update code, deploy monitoring and embrace better governance by bringing CISOs and other security leaders into the organization.

Google’s Project Zero this week introduced a six-part series that offers an analysis of four zero-day vulnerabilities on Windows and Chrome, and known-day Android exploits it found during the team’s extensive research last year.