Cybersecurity Spend Is Now More Than 20% of the Average IT Budget As 91% of Organizations Suffering an Attack had Operations Impacted

May 6, 2021 8:58:25 AM By Stu Sjouwerman

The latest data from the Hiscox Cyber Readiness Report highlights how organizations are experiencing cyber threats and how they are responding to increase their readiness for next time.

May the 4th Be With You and Your Users!

May 4, 2021 9:20:09 AM By James McQuiggan

May the force be with you, May the fourth be with you, may the phish not attack you. Okay, so it does not quite rhyme, but you get the idea. We reach the fourth day of the fifth month of ...

Mobile is a Problem: 97% of Organizations Experienced Mobile Attacks in 2020

Apr 29, 2021 8:41:17 AM By Stu Sjouwerman

Everything from applications, social apps, OS vulnerabilities and even mobile device management acted as initial attack vectors troubling nearly every single organization globally.

FBI Obtains Authorization to Access US Servers to Remove Webshells Due to Exchange Vulnerability

Apr 27, 2021 1:45:00 PM By Stu Sjouwerman

Your server could have been compromised and the FBI was trying to mitigate the issue without you even knowing it yet.

Australian Organizations Increase Cyber Security Spend to Nearly A$5B in 2021

Apr 9, 2021 8:34:08 AM By Stu Sjouwerman

The rise in cyberattacks in Australia is seeing its natural result – organisations realizing the need to put more budget focused on cybersecurity, with the largest portion going towards ...

The Digital Workplace is a Cybersecurity Disaster!

Apr 9, 2021 8:34:06 AM By Stu Sjouwerman

New data reviewing how the 2020 shift to a remote workforce impacted organizational security shows all too well that since the pandemic onset, cybersecurity has become critically worse.

Ubiquiti Cyber Attack Details Depict a Far More Disastrous Scenario Than Let On

Mar 30, 2021 3:49:36 PM By Stu Sjouwerman

New whistleblower details surrounding the December 2020 attack on the cloud-enabled IoT device manufacturer paints a far worse picture than what was disclosed.

[UPDATE] What is SOAR? What Are The Pros And Potential Pitfalls?

Mar 25, 2021 1:46:58 PM By Stu Sjouwerman

Jessica Groopman at TechTarget's SearchSecurity forum has a great short post about SOAR, what it stands for and what the potential benefits and pitfalls are. Here is an extract with a ...

KPMG: Cyber Security Risk Is Now No. 1 Threat To Growth

Mar 24, 2021 10:14:42 AM By Stu Sjouwerman

KPMG in the UK just released their CEO 2021 Outlook Pulse Survey where global leaders were asked about their 3-year outlook. CEOs of the world’s most influential companies are planning ...

Insurers are Warned of Cyber Risk Growth and are Provided a New Cyber Insurance Risk Framework from the New York Department of Financial Services

Mar 22, 2021 2:27:11 PM By Stu Sjouwerman

As cyberattacks continue to increase, cyber insurers are always looking for ways to manage the cyber risk they take on. The NY DFS offers some best practices from top insurance companies.

[Security Alert Webinar] The Microsoft Exchange Mass Hack Is a Huge Security Risk For All Organizations and What You Can Do About It

Mar 11, 2021 3:52:43 PM By Stu Sjouwerman

On March 2, Microsoft released emergency security updates to plug multiple zero-day security holes in Exchange Server versions 2010 through 2019 that hackers were actively using to siphon ...

The Dilemma: Best-of-Breed Stand-Alone or a Bundled Suite of tools?

Feb 26, 2021 7:05:55 AM By Stu Sjouwerman

Over the last few decades, survey after survey has shown that if IT Administrators had their way, the vast majority of them prefer a hand-picked set of best-of-breed point solutions over ...

How the United States Lost to Hackers, And Why The New President Wants To Fix It With 10 Billion Dollars

Feb 8, 2021 7:00:00 AM By Stu Sjouwerman

Nicole Perlroth, the New York Times cybersecurity reporter, just came out with a very interesting perspective on our troubles with foreign adversaries, in part created by our own ...

World Economic Forum: COVID Makes Cybersecurity Problem No. 1

Jan 21, 2021 9:51:29 AM By Stu Sjouwerman

The WEF just published their recent survey over worldwide corporate leaders. When asked about technology objectives that have become a greater priority due to COVID, they elevated ...

68% of Organizations Experiencing One Cyberattack Experience a Second Within 12 Months!

Jan 14, 2021 1:29:19 PM By Stu Sjouwerman

New data from cybersecurity vendor CrowdStrike shows just having security technologies in place won’t prevent one… let alone two… cyberattacks.

It’s Time for Organizations to Begin Propping Up the Human Firewall

Jan 8, 2021 8:29:18 AM By Stu Sjouwerman

Modern thinking about a comprehensive cybersecurity strategy includes a holistic approach that equally involves your users as a “human element” within your cyber defenses.

[Heads Up] Was SolarWinds Really A Daisy Supply Chain Attack?

Jan 7, 2021 8:50:50 AM By Stu Sjouwerman

The NYT just reported the next revelation regarding the SolarWinds hack. The Russian FSB may have piggybacked on a tool developed by JetBrains, which is based in the Czech Republic.

Securing Remote Employees is the Top 2021 Cybersecurity Challenge for Organizations

Dec 31, 2020 10:31:09 AM By Stu Sjouwerman

Security vendor CheckPoint provides insight into what are the organizational cybersecurity priorities for next two years, as well as where cybersecurity is going to be challenging.

Exploits Leveraging Excel 4.0 Macros Increase as Organizations Continue to Rely on this Legacy Technology

Dec 4, 2020 11:12:56 AM By Stu Sjouwerman

Despite being nearly 30 years old, Excel’s very functional macro technology appears to be a little too functional, as attackers have stepped up its use to advance cyberattacks.

"Berserk Bear", The Russian Hackers Playing ‘Chekhov’s Gun’ With US Infrastructure

Oct 27, 2020 10:29:34 AM By Stu Sjouwerman

In an advisory warning published last week by the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA), the government notified the public of a ...

Security Awareness Training Blog

Cybersecurity Blog

View Topics