Content by Mathew J. Schwartz

Network Security Policy Management: Seeking Visibility

Mathew J. Schwartz  •  June 19, 2019

Visibility, or a lack thereof, continues to challenge organizations as they attempt to protect their businesses by knowing which systems, applications and data they have, says AlgoSec's Jeffrey Starr. He discusses how centralized visibility, control and automation can help.

Cloud and Container Adoption: The Visibility Imperative

Mathew J. Schwartz  •  June 19, 2019

As organizations pursue digital transformation initiatives backed by new application deployment techniques, they must ensure that security, operations and development teams fully coordinate, says Marco Rottigni of Qualys.

How to Block Advanced Threats

Mathew J. Schwartz  •  June 19, 2019

After years of organizations being stuck in a reactive security posture, proactive prevention is finally possible thanks to machine learning backed by AI math models, says BlackBerry Cylance's John McClurg.

Are You APT-Ready? The Role of Breach and Attack Simulation

Mathew J. Schwartz  •  June 18, 2019

With the volume of data breaches and cyberattacks continuing to rise, organizations are increasingly relying on breach and attack simulation tools to provide more consistent and automated validation of controls, says Cymulate's Tim Ager.

Visual Journal: Infosecurity Europe 2019

Mathew J. Schwartz  •  June 18, 2019

The annual Infosecurity Europe conference this year returned to London. Here are visual highlights from the event, which featured over 240 sessions and more than 400 exhibitors, 19,500 attendees and keynotes covering data breaches, darknets, new regulations and more.

Two Weekend Outages, Neither a Cyberattack

Mathew J. Schwartz  •  June 17, 2019

Not all that crashes has been hacked. To wit, this past weekend there were multiple major outages, including much of Argentina and Uruguay going dark, as well as U.S. retailer Target's system problems leaving customers unable to pay for goods. But none of these outages were due to cyberattacks.

10 Highlights: Infosecurity Europe 2019 Keynotes

Mathew J. Schwartz  •  June 14, 2019

Data breaches, incident response and complying with the burgeoning number of regulations that have an information security impact were among the top themes at this year's Infosecurity Europe conference in London. Here are 10 of the top takeaways from the conference's keynote sessions.

Empower Employees While Preventing Insider Data Breaches

Mathew J. Schwartz  •  June 13, 2019

Carelessness, a lack of security awareness, unclear data ownership and poor toolsets are root causes of insider breaches, says Tony Pepper, CEO of Egress, which recently surveyed CISOs and employees to trace the cause of insider breaches resulting from both intentional and unintentional loss.

Top Drivers for Privileged Account Management

Mathew J. Schwartz  •  June 13, 2019

When it comes to drivers for implementing and maintaining privileged access management programs, Wallix's Grant Burst says that demonstrating compliance and safety remain top priorities. Another driver, he says, is the sheer interconnectedness of devices - driven by the rise of IoT.

Best Practices for Session-Based Fraud Detection/Prevention

Mathew J. Schwartz  •  June 13, 2019

Numerous industries, including financial services, rely on transaction-based controls to help spot and block fraud. But increasingly, organizations are also using session-based fraud detection and prevention as an "early warning" alert system, says Kaspersky's Tim Ayling.

Beyond Bug Bounties: Crowdsourced Security Testing Evolves

Mathew J. Schwartz  •  June 13, 2019

Crowdsourced bug bounty programs help organizations identify severe vulnerabilities in their apps and infrastructure. But that gamification model has been evolving to supply not only penetration testing but also deep dives by single researchers, says Bugcrowd CSO David Baker.

Proactive Mitigation: A Cybersecurity Imperative

Mathew J. Schwartz  •  June 13, 2019

A top cybersecurity imperative for organizations is to "take proactive mitigation before an event even occurs" by tracking attack trends and mitigating against emerging types of attacks, says Akamai's Jay Coley.

Beyond Opportunistic: How the Threat Landscape Is Evolving

Mathew J. Schwartz  •  June 12, 2019

The threat landscape continues to evolve, says Chester Wisniewski of Sophos. "The more professional, the more skilled criminals out there are moving, seemingly, away from this 'spray and pray' mass exploitation approach and getting more targeted. It's what I call a blended threat."

Cyberattack Risk: Scans Find Big Businesses Exposed

Mathew J. Schwartz  •  June 12, 2019

Britain's biggest businesses continue to inappropriately expose servers and services to the internet, putting the organizations and data at risk, according to a study by Rapid7. Tod Beardsley describes the findings, including a widespread lack of phishing defenses as well as cloud misconfigurations.

No Invitation Required: Hackers Can Phish Evite Users

Mathew J. Schwartz  •  June 11, 2019

Online invitation site Evite has been hacked and information on an unspecified number of users stolen. In a data minimization fail, the breach apparently dates from earlier this year, but it's been tied to "an inactive data storage file associated with Evite user accounts" from before 2014.