Risk Mitigation for Cyber Security

---

October 30, 2023

Cyber Chiefs Worry About Personal Liability as SEC Sues SolarWinds, Executive

Corporate cyber chiefs want to insulate themselves from potential liability. 

October 18, 2023

Federal Cyber Chief Tells Agencies to Tap Brakes on AI

Federal agencies have pitched more than 1,000 use cases for generative artificial intelligence, but the U.S. government’s cybersecurity chief wants risks associated with the technology properly addressed before they can press ahead.

October 17, 2023

Ransomware Comes Back in Vogue for Cybercriminals

Insurers say ransom-related claims rose sharply in the first half of 2023.

October 5, 2023

Clorox Warns of Accruing Costs From Cyberattack

The attack came amid a $500 million digital overhaul at the consumer products maker.

September 20, 2023

Companies Remain Reluctant to Admit Paying Off Hackers

Wariness of litigation could prove a sticking point for transparency in new SEC disclosure rules

September 15, 2023

Security Chief Took Extreme Steps to Hide From Hacking Threats

Caleb Sima, chief security officer at Robinhood until he left the online brokerage in March, went through an onerous and time-consuming process to protect himself and his family from hacking threats and online stalkers.

September 14, 2023

Pro Take: MGM Casino Hack Shows Challenge in Defending Connected Tech

The attack shows how hacks can significantly disrupt operations.

September 5, 2023

Buggy, Vulnerable Open-Source Code Seeps Into Business Tech

Hackers could target companies that use old code with known problems, and software with poor programming from Russian and Chinese authors, open-source veterans say.

August 25, 2023

Healthcare Governance Body Warns Hospitals Face Debilitating Cyberattacks

Hospitals should prepare for downtime of a month or more, according to new cybersecurity guidelines from the Joint Commission.

August 23, 2023

Who’s Your Next Cyber Chief? Good Question.

The role has evolved from primarily tech-focused to risk management as hacking proliferates. But CISO succession-planning is lacking, recruiters say

August 17, 2023

Brighthouse Financial Says Some Policyholders’ Data Were Stolen

The data included Social Security numbers, birthdays and zip codes, the company said

IBM 222 Data Security Report

Is it takes an average of 287 days to identify and contain a breach?

It takes 277 days on average to identify and contain a breach: 207 days to identify and 70 days to contain. That's a 3.5% decrease from the previous year, which averaged 287 days. Meanwhile, cyberattacks are much faster. Ransomware had a 94% reduction in time to deploy in just 2 years.