Content by Mathew J. Schwartz

How Authentication Must Evolve in the Age of GDPR

Mathew J. Schwartz  •  May 7, 2018

Privacy regulations, user satisfaction concerns and the need to prevent data breaches are driving more organizations that must authenticate users to find "a better way of ensuring that people are who they are when they are accessing critical information," says Tony Smales, CEO of Forticode.

Tessian: Using Machine Learning to Prevent Data Loss

Mathew J. Schwartz  •  May 7, 2018

Abhirukt Sapru, head of business development at Tessian, describes the use of machine learning to help prevent highly sensitive information from being sent to the wrong person via email.

InstaSafe: A Software-Defined Perimeter

Mathew J. Schwartz  •  May 7, 2018

Sandip Kumar Panda, co-founder and CEO of InstaSafe, which offers a software-defined perimeter solution, talks about his company's approach toward secure connectivity.

StackRox: Security for Containerization and Microservices

Mathew J. Schwartz  •  May 4, 2018

StackRox CTO Ali Golshan says his firm helps organizations that use containers and microservices to secure their cloud applications via better detection, prevention and response. How does it work?

Acalvio Technologies: Battling Breaches With Deception

Mathew J. Schwartz  •  May 4, 2018

Acalvio Technologies helps organizations practice "cyber deception" to more effectively detect and respond to data breaches, says Rick Moy, the firm's head of marketing. So how does it work?

DeferPanic: More Secure Virtualization via IaaS Containers

Mathew J. Schwartz  •  May 4, 2018

Ian Eyberg is CEO of DeferPanic, a Unikernel-based infrastructure-as-a-service startup that provides containers that help organizations employ virtualization in a more secure manner. How does it work?

No Surprise: Cambridge Analytica Tries to Exit Data Scandal

Mathew J. Schwartz  •  May 4, 2018

Leading the latest edition of the ISMG Security Report: Cambridge Analytica shuts down, saying it's lost all of its customers, and Australia's Commonwealth Bank spots a big, bad potential data breach.

5 Top Cybersecurity Themes at RSA 2018

Mathew J. Schwartz  •  May 3, 2018

What matters most, right now, to the information security community? At RSA 2018, RSA's president said WannaCry was a wakeup call for vulnerability and risk management. Other experts see artificial intelligence, machine learning and secure coding as hot trends.

SamSam Ransomware Offers Volume Decryption Discount

Mathew J. Schwartz  •  May 2, 2018

The attackers behind SamSam ransomware have been focusing not on infecting individuals' computers, but rather the systems of large organizations that they hope will pay for a "volume discount" - in one case, $46,000 - to decrypt all of their systems at once.

How Micro-Segmentation Can Help Stop Breaches From Spreading

Mathew J. Schwartz  •  May 2, 2018

Hackers are going to breach a network, bypassing firewalls and other network defenses. So the focus must be on what happens next, says Mukesh Gupta of Illumio, who describes how micro-segmentation can help contain breaches.

Using Cloud-Based Cybersecurity Services

Mathew J. Schwartz  •  May 2, 2018

Organizations that procure cybersecurity services are increasingly looking not just for private cloud-based approaches, but products that operate from public cloud environments, says Larry Hurtado, CEO of Digital Defense.

NSA: The Silence of the Zero Days

Mathew J. Schwartz  •  May 1, 2018

The head of the NSA's Cybersecurity Threat Operations Center says attackers haven't bothered targeting unclassified U.S. Defense Department networks with a zero-day exploit in 24 months. Instead, they attempt to exploit flaws within 24 hours of information of the vulnerability or exploit going public.

How Triton Malware Targets Industrial Control Systems

Mathew J. Schwartz  •  May 1, 2018

Industrial control system environments are tough to hack, because each is unique, says Sergio Caltagirone of Dragos. But the recent emergency of Triton malware shows that attackers have been testing how to compromise some environments, which could have catastrophic results.

Financial Services: Cloudy With a Chance of Data Loss

Mathew J. Schwartz  •  May 1, 2018

Banks and other financial services sector organizations need to pay more attention to their security infrastructure and defenses and apply application security safeguards to monitor all of their data - as well as individual files, says Terry Ray, CTO of Imperva.

Hackers Target 3 Mexican Banks' Real-Time Transfers

Mathew J. Schwartz  •  April 30, 2018

Mexico's central bank says attackers attempted to hack its interbank electronic transfer system, but says no client money was lost. It's activated "contingency measures" at the targeted banks and says payment transfers could slow as a result.