The European Union Agency for Cybersecurity (ENISA) under the framework of its 9th National Cybersecurity Strategies (NCSS) workshop, issued a report on cybersecurity awareness, with the aim to assist EU Member States in fostering their cybersecurity capacities…

TL;DR: Threat researchers use Pastebin and similar sites to share sets of IoCs among themselves. We believe there is a more actionable and c...

H-ISAC released a guide to help CISOs navigate the 21st Century Cures Act by adopting an identity-centric data sharing approach.

Could the internet of things be made more secure? A draft law in Britain would impose stronger cybersecurity regulations for manufacturers, importers and

The United States Cybersecurity and Infrastructure Security Agency (CISA) last week published a Capacity Enhancement Guide (CEG) to help organizations secure mobile devices and their access to enterprise resources.

Describes how to install and use Microsoft Defender for Endpoint on Linux.

Defining the roles and responsibilities in securing cloud services has always been pertinent and necessary. The Cloud Security Services Management (CSSM) Working Group (WG) released a white paper on ‘Guideline on Effectively Managing Security Service in the…

Be in our front row: Join ENISA's Cybersecurity Certification Conference 2021

ESET research releases a comparison of the most important TTPs used by all known malicious frameworks that have been used to attack air-gapped networks.

For organizational networks, the “protect the network perimeter” model of the past no longer works, & network security leaders are embracing new approaches. Explore @Gartner_IT's guide to 17 network security concepts & acronyms you need to know. #GartnerSEC

au·to·di·dact: a self-taught person Teach yourself infosec! The guide below from my friend @wifi_ve intends to provide a basic (and generally, free) set of resources for getting started with learning computer security. teachyourselfinfosec.com

Organizations will increasingly use Internet of Things (IoT) devices for the mission benefits they can offer, but care must be taken in the acquisition and implementation of IoT devices. This publication contains background and recommendations to help organizations…

This publication provides a catalog of internet of things (IoT) device cybersecurity capabilities (i.e., features and functions needed from a device to support security controls) and non-technical supporting capabilities (i.e., actions and support needed…

NIST has been engaged for several years in developing guidance for Internet of Things (IoT) cybersecurity.

Взамен ГОСТ Р ИСО/МЭК 27001-2006 утвержден новый ГОСТ Р ИСО/МЭК 27001-2021 fstec.ru/tk-362/deyatel…

Microsoft won't fix this Windows LPE, but I'll show you how to detect and block it: elastic.co/blog/detect-bl…

There is a lot of confusion surrounding cloud native IT and cloud security tools. In this blog by JupiterOne, discover the definitions and uses of four different #cloudsecurity solutions: CSPM, CWPP, CNAP and CMDB → bit.ly/3EmszzP

Bad actors are compromising cloud applications and assets with malware and Trojans. After establishing a foothold, they use command and control servers to manipulate cloud applications and other resources to move laterally towards crown jewel data.

Join…

Last month, more than 900 participants from over 240 financial firms, central banks, regulators, law enforcement and information-sharing groups acted out their response and recovery plans based on a series of simulated ransomware attacks.