More threats. Growing attack surfaces. Fewer security analysts. It’s no wonder a sense of pessimism permeates the cybersecurity community.
Despite increased investments in 2020, nearly 80 percent of senior IT leaders polled recently by IDG expressed a lack of confidence in their organizations’ IT security posture.

How would your company respond to a cyberattack at this very moment? Alarmingly, few organizations have a good answer for that question.

Less than one-quarter of U.S. businesses have a formal cybersecurity incident response plan (CSIRP) in place, according to a study by the Ponemon Institute and IBM, making it nearly impossible to respond to serious threats in a timely manner.

Our last post discussed the growing risk of supply chain cyberattacks that allow malicious actors to compromise hundreds or even thousands of organizations through a single attack on one supplier. The indirect path of such attacks means that even organizations with very strong defenses can be vulnerable.

In our increasingly interconnected world, businesses are highly dependent on the dynamic mesh of digital links with customers, partners, suppliers and service providers. While these connections help drive efficiency and productivity, they can also create a conduit for unwanted intrusions.

As we enter National Cybersecurity Awareness Month, it is hard to escape the conclusion that cybersecurity has never been more important — or more difficult.

Threats are growing more frequent, sophisticated and costly. Data, devices and other assets keep moving beyond the reach of network perimeter defenses.

The accelerated adoption of digital technologies is a bit of a double-edged sword. While it clearly drives new levels of efficiency, productivity and innovation, it can also introduce new vulnerabilities. Increased reliance on cloud, mobile, edge and wireless technologies to support remote and hybrid workforces substantially expands the typical organization’s attack surface.

Fifty years after it was invented by an MIT engineer, email remains the world’s most popular business communication tool. Unfortunately, it is also the single greatest source of business data leakage.

A whopping 95 percent of IT leaders say that customer and company data is at risk on email, according to the 2021 Data Loss Prevention Report by the cybersecurity firm Egress.

It’s no secret that cybersecurity threats have become more sophisticated and dangerous. Hackers now use bots to carry out constant attacks and have become master manipulators, using convincing language and realistic graphics to fool people into clicking malicious links.

Remote and mobile working gives organizations the flexibility and agility they need to meet today’s operational requirements. Unfortunately, it also creates a multitude of new security challenges.

Cybercriminals are increasingly targeting endpoint devices such as laptops, tablets and mobile phones because they provide a direct route into corporate networks.

In our last post, we discussed how regular network assessments can help organizations identify any gaps in their security posture in order to make the necessary modifications to close those gaps. A penetration test, or pen test, is perhaps the most critical element of a comprehensive testing process.