FireEye will host a two-day conference in Washington to discuss best practices related to cybersecurity with corporate executives and chief information security officers. The company said Monday the 2015 FireEye Cyber Defense Summit on Oct. 13 and Oct. 14 will deal with threat intelligence, case studies of data breaches, incident response procedures, malware …
Read More »Report: Lack of Cybersecurity Training Among Staff Poses Risks for Metals Sector
A Metals Service Center Institute-commissioned study has found that the lack of cybersecurity guidelines and inadequate training of employees to identify phishing scams and other threats pose risks for most metals firms. “With data breaches happening frequently, our members — and all companies — must be concerned about the safety …
Read More »Unisys Survey: Consumers Cite Cyber Concerns in Gov’t, Telecom, Retail Sectors
A new Unisys survey has found cyber attacks in the government, telecommunications and retail sectors to be a high concern among many consumers. Unisys polled 11,244 consumers across 12 countries and 44 percent of the respondents said they believe a data breach is likely to occur in the retail sector within …
Read More »Raytheon’s Dave Wajsgras Urges Increased Cyber Investment Following OPM Breach
Dave Wajsgras, president of Raytheon‘s intelligence, information and services businesses, has urged the government and private sector to boost investments in cybersecurity following the recent Office of Personnel Management data breach, Reuters reported Thursday. Andrea Shalal writes that the Raytheon executive has joined other defense industry leaders in calling for …
Read More »IBM-Ponemon Study: Data Breach Costs Average $3.8M in 2015
IBM has released findings of a study that indicates the average cost of data breach in 2015 has totaled $3.8 million, up 23 percent from 2013 figures. Ponemon Institute conducted the study over 10 months through interviews of more than 1,500 information technology, compliance and information security professionals from 350 organizations in …
Read More »IRS Eyes Own ID Verification Service With Planned $129M Acquisition
The Internal Revenue Service plans to award three blanket purchase agreements worth $129 million combined in July for a new identity verification service separate from Connect.gov, Federal News Radio reported Monday. Jared Serbu writes that the agency issued a request for quotations at the end of April as it transitions away from …
Read More »ThreatTrack Security: C-Level Execs Indicate Limited View of CISO Duties, Skills
A new white paper by ThreatTrack Security reports that the role of chief information security officers at U.S. enterprises is underappreciated and misunderstood, particularly in the coverage of their duties and leadership capabilities. ThreatTrack Security said that C-level executives in the legal, retail, healthcare and professional services sectors believe CISOs are responsible for preventing …
Read More »FireEye’s Kevin Mandia: New Mandiant Report Details Cyber Threat Trends, Tactics
FireEye has unveiled the sixth annual M-Trends report from Mandiant that outlines the emerging tactics and trends in the cyber threat landscape based on data from advanced threat investigations over the past year. “[Threat] actors have continued to evolve, up their game, and utilize new tools and tactics to compromise …
Read More »SafeNet’s Prakash Panjwani: Key Management, Access Control Essential for Enterprise Data Security
Prakash Panjwani, president and CEO of SafeNet, believes organizations must go beyond encryption to protect their most sensitive data against breach, GovInfoSecurity reported Thursday. Mathew Schwartz writes Panjwani said it is imperative that companies have strategies to mitigate the potential risks of computer hacking and has advised enterprise clients to …
Read More »General Dynamics’ Nadia Short: High-Profile Threats Spur Demand for Cyber Defense Products
A rise in breach incidents has prompted U.S. government agencies to invest more on cybersecurity tools against insider threats or outsider attacks, according to General Dynamics executive Nadia Short, Reuters reported Thursday. Andrea Shalal writes Short, vice president and general manager for the cyber and intelligence solutions division at General Dynamics’ …
Read More »Verizon’s Rafeeq Rehman: Active Monitoring, Response Plans Key in Data Breach Mitigation
Companies should actively monitor their networks, establish a crisis management plan and instill employee awareness to mitigate the impact of cyber attacks on both operations and business, Verizon‘s Rafeeq Rehman says. Recent incidents of data breaches indicate how hackers can target even old data as companies store these information for use in analytics applications, Rehman …
Read More »Verizon Offers QR Code Login With Universal ID Services; Tracy Hulver Comments
Verizon has unveiled a new QR code login service the company designed to ease mobile access to participating websites without the need to enter a username and password as part of efforts to avoid potential data breaches. Janet Brumfield, a corporate communications director at Verizon Enterprise Solutions, writes in a Tuesday post that …
Read More »Mario Santana: Verizon Aims to Help Enterprises Protect Networks With Cyber Intell Tech
Mario Santana, managing principal at Verizon‘s Cyber Intelligence Center, said the center uses an analytics method to help enterprise clients identify threats that can bypass traditional cybersecurity platforms. “Hunting injects creative, engaged defenders into the equation with the use of force-multiplying tools and automation that allow us to analyze data …
Read More »NJVC’s Robert Michalsky: Verizon Data Breach Report to Guide Cyber Risk Management
As Verizon releases the 2014 Data Breach Investigations Report, NJVC Principal Robert Michalsky notes that 92 percent of the more than 100,000 breaches and security incidents covered in the past decade can be grouped within nine attack patterns. Summarizing all of Verizon’s collected data since 2008 is expected to aid cybersecurity professionals implement smart risk management measures, Michalsky …
Read More »Kevin Mandia: Mandiant Research Finds Improvements In Enterprise Threat Detection
Mandiant has published a new report that analyzes the motives and targets of advanced threat attacks that occurred in 2013 and describes how malicious actors compromise enterprise data. Data from the FireEye subsidiary’s “Beyond the Breach” report indicates that 33 percent of organizations detected information security breaches on their own in 2013, …
Read More »