Latest editorial and guest blogs on information security careers

The Virtual CISO with Steve King

Insights from a veteran cybersecurity pro

How Deception Technologies Enable Proactive Cyberdefense

Steve King • January 29, 2020

Deception technologies offer a way to shift away from a purely defensive "detect and response" posture toward a more proactive offensive approach that draws stealth cyberattackers into the open before a breach.

Why Penetration Tests Are So Essential

A CISO's Security Predictions for 2020

Euro Security Watch with Mathew J. Schwartz

Tracking security and privacy trends across UK, Europe and beyond

Ransomware + Exfiltration + Leaks = Data Breach

Mathew J. Schwartz • July 7, 2020

Ransomware-wielding attackers continue to pummel organizations. But labeling these as being just ransomware attacks often misses how much these incidents involve serious network intrusions, exfiltration of extensive amounts of data, data leaks and, as a result, reportable data breaches.

Studying an 'Invisible God' Hacker: Could You Stop 'Fxmsp'?

Ransomware Gangs Go (Lady) Gaga for Data Breaches

Safe & Sound with Marianne Kolbasuk McGee

Insights on the security and privacy of healthcare information.

Virtual Summit Dives Into Healthcare Cybersecurity Issues

Marianne Kolbasuk McGee • June 5, 2020

How have the cybersecurity challenges facing healthcare organizations changed during the COVID-19 pandemic? And how are organizations responding? Information Security Media Group's Healthcare Cybersecurity Virtual Summit, to be held on June 9 and replayed June 10 and 11, will provide insights.

Email Breaches: A Growing Healthcare Challenge

A Summer of Data Breach Discontent

The Expert's View with Jeremy Kirk

Insights from industry experts

Smart Devices: How Long Will Security Updates Be Issued?

Jeremy Kirk • June 22, 2020

If you've managed to equip your home with smart devices and appliances that work properly, you probably think you're all set. But there are no regulations around how long manufacturers must provide security updates, which could mean a smart device could become a risk.