michaelsantarcanelothumbnail

More conversation: How the right questions can lead to less friction with vendors

jimrouththumbnail

How to align zero trust with a hybrid workforce

djohnson_jneuhaus

The art of persona tracking: How security firms are going undercover

Security Strategy, Plan, Budget

Editorial-style stock photo of a Chief Information Security Officer (CISO) using negative space photography techniques. The setting is a modern office environment, with the CISO positioned off-center to create negative space. The composition is carefully framed to highlight the CISO's authoritative presence and the surrounding empty space, symbolizing the need for security and protection in digital landscapes. The background features elements of the office, such as computers, monitors, and security-related visuals, adding context to the CISO's role. The lighting is subtle yet impactful, drawing attention to the CISO while emphasizing the importance of cybersecurity. The mood is professional and vigilant, conveying the CISO's dedication to safeguarding sensitive information and digital assets. --ar 7:4 --v 6 Job ID: f89a8dfb-ebea-4c46-ad40-7b415579d10a

100424_ciso

Leadership

Perspective

The three qualities modern CISOs must have today to succeed  

<body>This week in the enterprise security news, we've got:</body>

<body>This week in the enterprise security news, we've got:</body>

<ol class="wp-block-list">
<li>Torq, Tamnoon, and Defect Dojo raise funding</li>


<li>Checkmarx acquires ZAP</li>


<li>Commvault acquires Clumio</li>


<li>Would you believe San Francisco is NOT the most funded metro area for cybersecurity?</li>


<li>Auto-doxxing Smart glasses are now possible</li>


<li>Meta gets fined $100M for storing plaintext passwords</li>


<li>AI coding assistants might not be living up to expectations</li>


<li>Worst Practices</li>


<li>Dumpster fires and truth bombs</li>
</ol>

<body><ol><li>Torq, Tamnoon, and Defect Dojo raise funding</li><li>Checkmarx acquires ZAP</li><li>Commvault acquires Clumio</li><li>Would you believe San Francisco is NOT the most funded metro area for cybersecurity?</li><li>Auto-doxxing Smart glasses are now possible</li><li>Meta gets fined $100M for storing plaintext passwords</li><li>AI coding assistants might not be living up to expectations</li><li>Worst Practices</li><li>Dumpster fires and truth bombs</li></ol></body>

<body>All that and more, on this episode of Enterprise Security Weekly!</body>

<body>All that and more, on this episode of Enterprise Security Weekly!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”13173″} podcast from PPWorks

AI benefits/risks

Acquisition

Cybersecurity best practices are the worst, AI indegestion, real time doxxing – ESW #378

Five ways to craft a strategic remediation plan

The US doesn’t need another task force on the Chinese cyber threat

Data Security

Encryption

News

G7 Cyber Expert Group warns financial sector of quantum computing

THe US Capitol dome in Washington DC with a crack down the middl

Government Regulations

Critical Infrastructure Security

When it comes to solving the ongoing cybersecurity crisis in healthcare, don’t bet on Congress  

<body>This week, the cybersecurity industry's most basic assumptions under scrutiny. Following up our conversation with Wolfgang Goerlich, where he questions the value of phishing simulations, we discuss essays that call into question:</body>

<body>This week, the cybersecurity industry's most basic assumptions under scrutiny. Following up our conversation with Wolfgang Goerlich, where he questions the value of phishing simulations, we discuss essays that call into question:</body>

<ul class="wp-block-list">
<li>the maturity of the industry</li>


<li>the supposed "talent gap" with millions of open jobs despite complaints that this industry is difficult to break into</li>


<li>cybersecurity's 'delusion' problem</li>
</ul>

<body><ul><li>the maturity of the industry</li><li>the supposed "talent gap" with millions of open jobs despite complaints that this industry is difficult to break into</li><li>cybersecurity's 'delusion' problem</li></ul></body>

<body>Also some whoopsies: </body>

<ul class="wp-block-list">
<li>researchers accidentally take over a TLD</li>


<li>When nearly all your customers make the same insecure configuration mistakes, maybe it's not all their fault, ServiceNow finds out</li>
</ul>

<body><ul><li>researchers accidentally take over a TLD</li><li>When nearly all your customers make the same insecure configuration mistakes, maybe it's not all their fault, ServiceNow finds out</li></ul></body>

<body>Fortinet has a breach, but is it really accurate to call it that?</body>

<body>Fortinet has a breach, but is it really accurate to call it that?</body>

<body>Some Coalfire pentesters that were arrested in Iowa 5 years ago share some unheard details about the event, and how it is still impacting their lives on a daily basis five years later.</body>

<body>Some Coalfire pentesters that were arrested in Iowa 5 years ago share some unheard details about the event, and how it is still impacting their lives on a daily basis five years later.</body>

<body>The news this week isn't all negative though! We discuss an insightful essay on detection engineering for managers from Ryan McGeehan is a must read for secops managers.</body>

<body>The news this week isn't all negative though! We discuss an insightful essay on detection engineering for managers from Ryan McGeehan is a must read for secops managers.</body>

<body>Finally, we discuss a fun and excellent writeup on what happens when you ignore the integrity of your data at the beginning of a 20 year research project that resulted in several bestselling books and a Netflix series!</body>

<body>Finally, we discuss a fun and excellent writeup on what happens when you ignore the integrity of your data at the beginning of a 20 year research project that resulted in several bestselling books and a Netflix series!</body>

Security Strategy, Plan, Budget

Related Videos

More conversation: How the right questions can lead to less friction with vendors

How to align zero trust with a hybrid workforce

The art of persona tracking: How security firms are going undercover

The three qualities modern CISOs must have today to succeed

Cybersecurity best practices are the worst, AI indegestion, real time doxxing – ESW #378

Five ways to craft a strategic remediation plan

The US doesn’t need another task force on the Chinese cyber threat

G7 Cyber Expert Group warns financial sector of quantum computing

When it comes to solving the ongoing cybersecurity crisis in healthcare, don’t bet on Congress

Cybersecurity: is the talent gap a myth? Is the industry delusional? – ESW #376

Five ways to prepare for the post-quantum computing era

Fast Five

Selected by the SC Media Editorial team every Tuesday.