The SolarWinds and Exchange supply-chain attacks have highlighted how vulnerable 3rd party and vendor security is for every organization. The industry must fundamentally change to manage the growing risks

Where should a CISO report into within an organization? No common standard exists as we can find them operating under many different organizations, including IT, Legal, the CTO, and CEO just to name a

Cybersecurity for Mergers and Acquisitions is a mess. There are a surprising number of significant unforeseen risks that can wreak havoc on M&A deals. In this week’s fireside chat, I am joined by Justin

Google’s infamous Project Zero vulnerability research team recently announced it is changing its disclosure policy to be more friendly to product vendors. But is that good for cybersecurity? In this week’s

A new vulnerability has been discovered in the popular Zoom online conferencing tool that allows an attacker complete remote control over the targeted system, without any involvement by the user. As

How do governments effectively blunt the growth of ransomware? There is a path, but it does not involve outlawing cryptocurrency! I see many government politicians positioning a ban of cryptocurrency as

How do governments effectively blunt the growth of ransomware? There is a path, but it does not involve outlawing cryptocurrency. This week I discuss how governments can maneuver to stop the ransomware

Cyberattacks are leaping ahead in sophistication and the industry is not prepared. As an example, Google Project Zero team recently detected attackers that exploited a combination of seven previously unknown

Digital communication is connecting people around the globe with tremendous benefits, but is also being misused in terrible ways that take advantage of the community. No easy solution exists, but I have

DeepFake technology is available to everyone and rapidly increasing in its capabilities. It will be used for both entertainment and malicious activities. We are already seeing misuse. The potential damage

Nations may be defining what are acceptable targets for digital attacks against adversaries. We are likely to see nation sponsored or directed attacks against critical infrastructures that could escalate

Cyber threats are adapting their malware to work on new Apple chips that will power Macintosh computers. The shift to a multiarchitecture design will allow attackers to target the next generation of Apple

Small and medium businesses aren’t paying attention when it comes to cybersecurity. They are being targeted. Even with limited resources SMB’s can greatly improve their cyber defense. Many free resources

Cybersecurity is a team sport, but for any organization the responsibility falls to the leadership. When I hear of situations where executives point the finger of blame at employees, I am concerned. Case

Ransomware is on the rise because cybercriminals are being rewarded. Those who are impacted have been paying the ransoms, thereby funding and encouraging attackers to expand and target others. The right

Ransomware is on the rise because cybercriminals are being rewarded. Those who are impacted have been paying the ransoms, thereby funding and encouraging attackers to expand and target others. The right

I am looking forward to speaking at the upcoming HMGLive CISO executive leadership event! I encourage all cybersecurity leaders to attend and interact. This is how we build teamwork, communicate challenges,

Times are changing and whistleblowing is on the rise. People are more empowered to challenge unethical situations in the workplace. Getting ahead can help manage the risks and be used to improve, identify,

I get frustrated by the shortsighted perceptions which are misleading and dangerous. It is far easier to vilify something people don't fully understand. Here is another article, titled Bitcoin is Aiding

Intel and Cybereason just announced that they are working to integrate Cybereason to collect data from hardware to software levels, with the goal of protecting users from ransomware. This is an opportunity