"We came up with a structured, documented approach to respond to mitigating the Log4j vulnerability using the EDR scanning tools along with a code validation, containerization, and sandboxing of our applications and networks," says Ian Keller, security director at Ericsson.
Amid the current ransomware surge, it's time for the principle of least privilege to meet endpoint security and be a new foundational security control, says David Higgins of CyberArk. He outlines the cybersecurity use cases and potential business benefits.
Applying cloud access security broker’s three functionalities - API-level integration with managed device transfer for visibility, in-line CASB for proxy and other devices, and its control over cloud and other access points - helps provide better control and the ability to protect and secure user access, says Thomas...
Jeremy Grant, coordinator of the Better Identity Coalition, joins three ISMG editors to discuss important cybersecurity issues, including how the Biden administration’s executive order will advance the identity cause, and whether we are any closer to finally abandoning the password.
cloud migration, and the work from anywhere
model are opening up a world of possibilities
for organizations, pushing them to reinvent
core business models and unlock new revenue
On the other hand, from SolarWinds
to the recent Colonial Pipeline attack, it has
With the support of the recent executive order on improving the nation's cybersecurity, Zero Trust strategy is gaining greater recognition. But there is still a degree of resistance to Zero Trust adoption. Dr, Chase Cunningham, CSO of Ericom, discusses this and other issues around Zero Trust.
Securing operational technology (OT) systems for critical
infrastructure requires identifying and tracking a complete inventory
of all OT and IT endpoints. Only with a comprehensive inventory
that includes configuration data can companies protect against
unauthorized change, achieve compliance, mitigate risk...
There is no successful digital business without utilizing digital identities. Digital identities of consumers, customers, business partners, employees, but also devices, things, or services are at the core of the digital business.
Unfortunately, most digital identities reside in siloes. Building a modern Identity...
The problem with decentralized access management, says Manuel Garat, head of IAM at digital travel company Booking.com, is that while you might know who or what needs access to your network, applications and data, you "don't always know who shouldn't have access."
Financial health is now inextricably tied to identity safety, which makes delivering modern digital safety and security critical for financial institutions – especially those looking to attract younger consumers. Winning hard-to-please millennials and Gen Z requires an FI to differentiate itself with compelling...
The latest edition of the ISMG Security Report features an analysis of how cybercriminals are turning to cryptomixing services to conceal the proceeds of ransomware activities from law enforcement officials. Also featured: Criminals exploit a misconfigured FBI server and the future of zero trust.
Healthcare organizations cannot adequately protect the safety and privacy of their patients and staff unless they have efficient, accurate systems to manage third-party identity risk.
By managing third-party risk at the identity level, healthcare organizations can make better-informed access decisions. Adopting a...
A well-defined Identity Security strategy offers modern enterprises the peace of mind that their most critical assets are secure while accelerating business agility. But putting a plan in place that effectively secures the expanding number and types of identities can feel daunting. Where do you start? How do you...
In the past two years, the world experienced a significant shift in how many people work and transact business online. Digital identities used to connect remote workers suddenly became an even greater security target for attackers. Almost overnight, workplace trends from the last several years collided to create a new...
With perimeter-focused architectures quickly becoming irrelevant, enterprises are looking toward identity-focused security measures to protect new “perimeterless” networks and new forms of working.
Identity Security for Dummies is a primer on securing digital identities across the enterprise.