Social Engineering and Data Breach
There is no question regarding how technically highly-advanced and sophisticated cyber-criminals are. They possess adequate skills and know-how to intrude inside the IT network and steal sensitive information and bring the IT ecosystem to a standstill. Nevertheless, one often overlooked fact is that most of the IT incidents stem from social engineering: an act of […]
Misinformation, Disinformation, and Misinterpretation
Much is being discussed about the security vulnerabilities in the healthcare industry. As the global digital healthcare system finds itself on the cusp of digital transformation, the healthcare records, Intellectual Properties among other forms of sensitive piece of information have become prime targets of cyber criminals. Indeed, the healthcare industry at the peak of the […]
When Bad AI takes on Good AI
In the vast compass of the digitalized world, the good actors often meet roadblocks created by bad actors. The later, as always, want to create a panic, and bring disruptions of all sorts. They look to corrupt or steal the data typically for financial gains. The area of AI is a typical example where bad […]
It’s not just about changing passwords
Alright, passwords are changed regularly and all the updates are being installed unfailingly. Our devices are safe and secure, and the data is going nowhere. That’s the general presumption of ours, isn’t it? And that is a huge mistake. In this large interconnected cyber space, unknown online threats are plenty. Tricksters are always at the […]
Time to Nurture Cybersecurity Pros
Earlier this year, a bizarre cybercrime shook the world. A story broke of a criminal gang known as Fin7 faking a company to recruit potential employees. This gang is believed to have built ransomware earlier that disrupted a large US oil pipeline system company. This whole incident points to one thing: There is a serious […]
Risks, Compliance and Emerging perils
The fallout of financial frauds in the cryptocurrency industry could be devastating and finally regulators are taking note of it. Indeed, regulators are scurrying to bring in a fresh set of guidelines to ensure that the collapse of cryptocurrency network does not end up posing a systemic risk. Some questions remain to be answered though. […]
Identity Governance: How to keep the House in Order?
Probably the most convoluted IT practices of all, the Identity Management and Governance is always vulnerable to a security gap. After all, controlling a vast expanse that extends beyond the traditional realm of a datacenter demands careful planning. While spiraling cost issues and inadequate resources often undermine the identity governance approach, the inherent shortcomings are […]
PAM, People and Processes
That the effectiveness of a PAM tool is only as good as the organization’s outline around its PAM practice was never so true as today. Indeed, while integrations and automation of PAM tasks remain at the core, managing people, and processes are important too. All the automation initiatives can be undermined without proper controls around […]
How to Ensure Robust Compliance and IT Audits?
Enterprise IT vulnerability assessment in a timely manner is one of the basic requirements to ensure a robust IT security framework. And IT audits and compliance help the IT Risk Management and Compliance team to identify and assess underlying IT vulnerabilities. Yet, far too often organizations commit a mistake of manually conducting compliance and audit […]
Why Just-In-Time Privilege Elevation?
One disconcerting aspect in privileged access management (PAM) is that organizations are often not completely accustomed to widespread risks. Even if the PAM tools are in place, the fundamental principles sometimes could take a backseat. For instance, noncompliance to the ‘Least Privilege’ principle due to the absence of Just-in-time (JIT) privilege elevation approach. Scenario 1: […]
