Security Weekly

<img width="700" height="525" src="https://securityweekly.com/wp-content/uploads/2022/01/rate-increases.jpeg" class="attachment-full size-full wp-post-image" alt="" srcset="https://securityweekly.com/wp-content/uploads/2022/01/rate-increases.jpeg 700w, https://securityweekly.com/wp-content/uploads/2022/01/rate-increases-223x167.jpeg 223w, https://securityweekly.com/wp-content/uploads/2022/01/rate-increases-317x238.jpeg 317w" sizes="(max-width: 700px) 100vw, 700px" />
The costs of cyber insurance policies are rising exponentially while underwriters are tightening the rules around who qualifies for cyber insurance, and at the same time, insurer capacity is constricting dramatically. The numbers are all over the place, but the latest statistics from the Council of Insurance Agents and Brokers reported a 25.5% increase in [&#8230;]
The post <a rel="nofollow" href="https://securityweekly.com/2022/01/12/ransomware-damage-claims-driving-insurance-hikes/">Ransomware Damage Claims Driving Insurance Hikes</a> appeared first on <a rel="nofollow" href="https://securityweekly.com">Security Weekly</a>.

The costs of cyber insurance policies are rising exponentially while underwriters are tightening the rules around who qualifies for cyber insurance, and at the same time, insurer capacity is constricting dramatically. The numbers are all over the place, but the latest statistics from the Council of Insurance Agents and Brokers reported a 25.5% increase in […]
The post Ransomware Damage Claims Driving Insurance Hikes appeared first on Security Weekly.

Ransomware Damage Claims Driving Insurance Hikes

<img width="654" height="434" src="https://securityweekly.com/wp-content/uploads/2021/11/Picture1.png" class="attachment-full size-full wp-post-image" alt="" srcset="https://securityweekly.com/wp-content/uploads/2021/11/Picture1.png 654w, https://securityweekly.com/wp-content/uploads/2021/11/Picture1-245x163.png 245w, https://securityweekly.com/wp-content/uploads/2021/11/Picture1-317x210.png 317w" sizes="(max-width: 654px) 100vw, 654px" />
Encryption has reached near-full adoption by internal teams hoping to implement stronger security and privacy practices. Simultaneously, attackers are using the same mechanisms to hide their malicious activity from the defender’s line of sight. According to the Ponemon Institute&#8217;s 2021 Global Encryption Trends Study, 50% of organizations have an encryption plan consistently applied across their [&#8230;]
The post <a rel="nofollow" href="https://securityweekly.com/2021/11/02/decrypt-as-if-your-security-depends-on-it/">Decrypt As If Your Security Depends on It</a> appeared first on <a rel="nofollow" href="https://securityweekly.com">Security Weekly</a>.

Encryption has reached near-full adoption by internal teams hoping to implement stronger security and privacy practices. Simultaneously, attackers are using the same mechanisms to hide their malicious activity from the defender’s line of sight. According to the Ponemon Institute’s 2021 Global Encryption Trends Study, 50% of organizations have an encryption plan consistently applied across their […]
The post Decrypt As If Your Security Depends on It appeared first on Security Weekly.

Decrypt As If Your Security Depends on It

<img width="624" height="390" src="https://securityweekly.com/wp-content/uploads/2021/10/Picture1-1.png" class="attachment-full size-full wp-post-image" alt="" srcset="https://securityweekly.com/wp-content/uploads/2021/10/Picture1-1.png 624w, https://securityweekly.com/wp-content/uploads/2021/10/Picture1-1-245x153.png 245w, https://securityweekly.com/wp-content/uploads/2021/10/Picture1-1-317x198.png 317w" sizes="(max-width: 624px) 100vw, 624px" />
There are many ways to do DevSecOps, and each organization &#8212; each security team, even &#8212; uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important in understanding how to integrate a security scanner into your DevSecOps machinery. The ultimate goal is speed [&#8230;]
The post <a rel="nofollow" href="https://securityweekly.com/2021/10/26/devsecops-scanning-challenges-tips/">DevSecOps Scanning Challenges &#038; Tips</a> appeared first on <a rel="nofollow" href="https://securityweekly.com">Security Weekly</a>.

There are many ways to do DevSecOps, and each organization — each security team, even — uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important in understanding how to integrate a security scanner into your DevSecOps machinery. The ultimate goal is speed […]
The post DevSecOps Scanning Challenges & Tips appeared first on Security Weekly.

DevSecOps Scanning Challenges & Tips

<img width="977" height="575" src="https://securityweekly.com/wp-content/uploads/2021/10/Picture1.png" class="attachment-full size-full wp-post-image" alt="" srcset="https://securityweekly.com/wp-content/uploads/2021/10/Picture1.png 977w, https://securityweekly.com/wp-content/uploads/2021/10/Picture1-245x144.png 245w, https://securityweekly.com/wp-content/uploads/2021/10/Picture1-317x187.png 317w, https://securityweekly.com/wp-content/uploads/2021/10/Picture1-768x452.png 768w" sizes="(max-width: 977px) 100vw, 977px" />
It’s Cybersecurity Awareness Month, but security awareness is about much more than just dedicating a month to a few activities. Security awareness is a journey, requiring motivation along the way. And culture. Especially culture.That’s the point Proofpoint Cybersecurity Evangelist Brian Reed drove home in a recent appearance on Business Security Weekly.“If your security awareness program [&#8230;]
The post <a rel="nofollow" href="https://securityweekly.com/2021/10/19/it-should-be-cybersecurity-culture-month/">It Should Be ‘Cybersecurity Culture Month’</a> appeared first on <a rel="nofollow" href="https://securityweekly.com">Security Weekly</a>.

It’s Cybersecurity Awareness Month, but security awareness is about much more than just dedicating a month to a few activities. Security awareness is a journey, requiring motivation along the way. And culture. Especially culture.That’s the point Proofpoint Cybersecurity Evangelist Brian Reed drove home in a recent appearance on Business Security Weekly.“If your security awareness program […]
The post It Should Be ‘Cybersecurity Culture Month’ appeared first on Security Weekly.

It Should Be ‘Cybersecurity Culture Month’

<img width="654" height="434" src="https://securityweekly.com/wp-content/uploads/2021/10/Picture1.jpg" class="attachment-full size-full wp-post-image" alt="" srcset="https://securityweekly.com/wp-content/uploads/2021/10/Picture1.jpg 654w, https://securityweekly.com/wp-content/uploads/2021/10/Picture1-245x163.jpg 245w, https://securityweekly.com/wp-content/uploads/2021/10/Picture1-317x210.jpg 317w" sizes="(max-width: 654px) 100vw, 654px" />
Developers want to write good code. Secure code. Tools that optimize developer workflows for handling security issues can take a large burden off security practitioners and make triaging, understanding, prioritizing, and resolving vulnerabilities much easier and faster for the developer. That’s what DevSecOps is all about. One company that has developed such tools is GitLab. [&#8230;]
The post <a rel="nofollow" href="https://securityweekly.com/2021/10/11/the-power-of-developer-first-security/">The Power of Developer-First Security</a> appeared first on <a rel="nofollow" href="https://securityweekly.com">Security Weekly</a>.

Developers want to write good code. Secure code. Tools that optimize developer workflows for handling security issues can take a large burden off security practitioners and make triaging, understanding, prioritizing, and resolving vulnerabilities much easier and faster for the developer. That’s what DevSecOps is all about. One company that has developed such tools is GitLab. […]
The post The Power of Developer-First Security appeared first on Security Weekly.

The Power of Developer-First Security

<img width="696" height="423" src="https://securityweekly.com/wp-content/uploads/2021/09/web-application-firewall-comparison-696x423-1.jpeg" class="attachment-full size-full wp-post-image" alt="" srcset="https://securityweekly.com/wp-content/uploads/2021/09/web-application-firewall-comparison-696x423-1.jpeg 696w, https://securityweekly.com/wp-content/uploads/2021/09/web-application-firewall-comparison-696x423-1-245x149.jpeg 245w, https://securityweekly.com/wp-content/uploads/2021/09/web-application-firewall-comparison-696x423-1-317x193.jpeg 317w" sizes="(max-width: 696px) 100vw, 696px" />
Enterprises that integrate security testing into their CI/CD pipeline fix 91.4 percent of new issues, according to a progress report from ShiftLeft. Recent software supply chain attacks illustrate the growing risks businesses, their partners, and customers face. But a recent report suggests better outcomes for those who put security at the heart of app development. Data from [&#8230;]
The post <a rel="nofollow" href="https://securityweekly.com/2021/09/20/building-a-more-secure-appdev-process/">Building a More Secure AppDev Process</a> appeared first on <a rel="nofollow" href="https://securityweekly.com">Security Weekly</a>.

Enterprises that integrate security testing into their CI/CD pipeline fix 91.4 percent of new issues, according to a progress report from ShiftLeft. Recent software supply chain attacks illustrate the growing risks businesses, their partners, and customers face. But a recent report suggests better outcomes for those who put security at the heart of app development. Data from […]
The post Building a More Secure AppDev Process appeared first on Security Weekly.

Building a More Secure AppDev Process

<img width="430" height="324" src="https://securityweekly.com/wp-content/uploads/2021/08/Picture1.png" class="attachment-full size-full wp-post-image" alt="" srcset="https://securityweekly.com/wp-content/uploads/2021/08/Picture1.png 430w, https://securityweekly.com/wp-content/uploads/2021/08/Picture1-222x167.png 222w, https://securityweekly.com/wp-content/uploads/2021/08/Picture1-317x239.png 317w" sizes="(max-width: 430px) 100vw, 430px" />
Applications are critical for doing business. They are also the weakest links in many an organization’s security chain. Many APIs continue to expose the personally identifiable information of customers, employees and contractors. As OWASP (Open Web Application Security Project) notes on its API Security Project homepage: “By nature, APIs expose application logic and sensitive data [&#8230;]
The post <a rel="nofollow" href="https://securityweekly.com/2021/08/31/web-app-and-api-security-needs-to-be-modernized-heres-how/">Web App and API Security Needs to Be Modernized: Here’s How</a> appeared first on <a rel="nofollow" href="https://securityweekly.com">Security Weekly</a>.

Applications are critical for doing business. They are also the weakest links in many an organization’s security chain. Many APIs continue to expose the personally identifiable information of customers, employees and contractors. As OWASP (Open Web Application Security Project) notes on its API Security Project homepage: “By nature, APIs expose application logic and sensitive data […]
The post Web App and API Security Needs to Be Modernized: Here’s How appeared first on Security Weekly.

Web App and API Security Needs to Be Modernized: Here’s How

<img width="612" height="302" src="https://securityweekly.com/wp-content/uploads/2021/08/istockphoto-901681690-612x612-1.jpg" class="attachment-full size-full wp-post-image" alt="" srcset="https://securityweekly.com/wp-content/uploads/2021/08/istockphoto-901681690-612x612-1.jpg 612w, https://securityweekly.com/wp-content/uploads/2021/08/istockphoto-901681690-612x612-1-245x121.jpg 245w, https://securityweekly.com/wp-content/uploads/2021/08/istockphoto-901681690-612x612-1-317x156.jpg 317w" sizes="(max-width: 612px) 100vw, 612px" />
For many enterprises, incident response is an exercise in chaos. Security teams scramble to figure out how a data breach happened and crash into brick walls as they try to collect information from different departments that are often siloed from everyone else. It doesn’t have to be that way. Advanced security teams have learned that [&#8230;]
The post <a rel="nofollow" href="https://securityweekly.com/2021/08/05/how-the-best-defense-gets-better-part-2/">How The Best Defense Gets Better: Part 2</a> appeared first on <a rel="nofollow" href="https://securityweekly.com">Security Weekly</a>.

For many enterprises, incident response is an exercise in chaos. Security teams scramble to figure out how a data breach happened and crash into brick walls as they try to collect information from different departments that are often siloed from everyone else. It doesn’t have to be that way. Advanced security teams have learned that […]
The post How The Best Defense Gets Better: Part 2 appeared first on Security Weekly.

How The Best Defense Gets Better: Part 2

<img width="700" height="458" src="https://securityweekly.com/wp-content/uploads/2021/07/apptitude-test.jpeg" class="attachment-full size-full wp-post-image" alt="" srcset="https://securityweekly.com/wp-content/uploads/2021/07/apptitude-test.jpeg 700w, https://securityweekly.com/wp-content/uploads/2021/07/apptitude-test-245x160.jpeg 245w, https://securityweekly.com/wp-content/uploads/2021/07/apptitude-test-317x207.jpeg 317w" sizes="(max-width: 700px) 100vw, 700px" />
With a shortage of four million cybersecurity workers, we need to get more creative in identifying non-technical skills among potential candidates that can be applied to the cybersecurity realm. One way is to test them for aptitude and personality traits, like the career planning tests I took in college.That’s what the University of Maryland did [&#8230;]
The post <a rel="nofollow" href="https://securityweekly.com/2021/07/20/diversifying-cybersecurity-talent-through-aptitude-testing/">Diversifying Cybersecurity Talent Through Aptitude Testing</a> appeared first on <a rel="nofollow" href="https://securityweekly.com">Security Weekly</a>.

With a shortage of four million cybersecurity workers, we need to get more creative in identifying non-technical skills among potential candidates that can be applied to the cybersecurity realm. One way is to test them for aptitude and personality traits, like the career planning tests I took in college.That’s what the University of Maryland did […]
The post Diversifying Cybersecurity Talent Through Aptitude Testing appeared first on Security Weekly.

Diversifying Cybersecurity Talent Through Aptitude Testing

<img width="275" height="183" src="https://securityweekly.com/wp-content/uploads/2021/06/SWG.jpeg" class="attachment-full size-full wp-post-image" alt="" srcset="https://securityweekly.com/wp-content/uploads/2021/06/SWG.jpeg 275w, https://securityweekly.com/wp-content/uploads/2021/06/SWG-245x163.jpeg 245w" sizes="(max-width: 275px) 100vw, 275px" />
In 2020, cyber criminals used cloud applications, the cover of a pandemic, and a newly embraced work-from-home culture to serve up ransomware, steal data, and disrupt how companies do business. The year is over, but the challenges and risks remain.  How do we prevent these criminals from injecting chaos into our hybrid work environments? As [&#8230;]
The post <a rel="nofollow" href="https://securityweekly.com/2021/06/30/preventing-criminals-from-using-cloud-applications-to-inject-chaos-into-work-environments/">Preventing Criminals from Using Cloud Applications to Inject Chaos Into Work Environments</a> appeared first on <a rel="nofollow" href="https://securityweekly.com">Security Weekly</a>.

In 2020, cyber criminals used cloud applications, the cover of a pandemic, and a newly embraced work-from-home culture to serve up ransomware, steal data, and disrupt how companies do business. The year is over, but the challenges and risks remain.  How do we prevent these criminals from injecting chaos into our hybrid work environments? As […]
The post Preventing Criminals from Using Cloud Applications to Inject Chaos Into Work Environments appeared first on Security Weekly.

Preventing Criminals from Using Cloud Applications to Inject Chaos Into Work Environments

<img width="1920" height="690" src="https://securityweekly.com/wp-content/uploads/2021/06/Best-Cyber-Defense.jpeg" class="attachment-full size-full wp-post-image" alt="" srcset="https://securityweekly.com/wp-content/uploads/2021/06/Best-Cyber-Defense.jpeg 1920w, https://securityweekly.com/wp-content/uploads/2021/06/Best-Cyber-Defense-245x88.jpeg 245w, https://securityweekly.com/wp-content/uploads/2021/06/Best-Cyber-Defense-317x114.jpeg 317w, https://securityweekly.com/wp-content/uploads/2021/06/Best-Cyber-Defense-768x276.jpeg 768w, https://securityweekly.com/wp-content/uploads/2021/06/Best-Cyber-Defense-1536x552.jpeg 1536w" sizes="(max-width: 1920px) 100vw, 1920px" />
Security starts before detection and response, but many organizations focus there first. Mature security teams understand the importance of identification and protection.  Establishing good cyber hygiene and taking proactive measures to secure themselves against the ever-increasing threat landscape is a critical first step in a holistic security program.  How should organizations build a holistic security [&#8230;]
The post <a rel="nofollow" href="https://securityweekly.com/2021/06/28/how-the-best-defense-gets-better/">How the Best Defense Gets Better</a> appeared first on <a rel="nofollow" href="https://securityweekly.com">Security Weekly</a>.

Security starts before detection and response, but many organizations focus there first. Mature security teams understand the importance of identification and protection.  Establishing good cyber hygiene and taking proactive measures to secure themselves against the ever-increasing threat landscape is a critical first step in a holistic security program.  How should organizations build a holistic security […]
The post How the Best Defense Gets Better appeared first on Security Weekly.