Content by Anna Delaney

World Economic Forum's Cybersecurity Outlook 2023 Highlights

Anna Delaney  •  February 3, 2023

According to the World Economic Forum, geopolitical instability has helped to close the perception gap between business and cyber leaders' views on the importance of cyber risk management, and "91% of all respondents" believe that "a far-reaching, catastrophic cyber event" is on the horizon.

ISMG Editors: Does US Takedown Mark Hive Group's Demise?

Anna Delaney  •  February 3, 2023

In the latest weekly update, ISMG editors discuss the lasting effects of the takedown of the Hive ransomware group, why the U.S. government is warning of a surge in Russian DDoS attacks on hospitals, and why the lack of transparency in U.S. breach notices is creating more risk for consumers.

ITRC Breach Report: Lack of Transparency, Details Worsen

Anna Delaney  •  January 31, 2023

The Identity Theft Resource Center's 2022 Annual Data Breach Report reveals a near-record number of compromises - the second-highest number in 17 years. ITRC COO James Lee worries that a sudden lack of transparency in breach notices is creating more risk for consumers.

Advance Your Security Awareness Training Program: Research Results Analysis

Anna Delaney  •  January 27, 2023

Sara Pan, senior product marketing manager at Proofpoint shares insights from Proofpoint's 2022 Security Awareness Study on how to improve security awareness training programs.

ISMG Editors: Why Are Ransomware Profits Dipping?

Anna Delaney  •  January 27, 2023

In the latest weekly update, four ISMG editors discuss why it pays off to have well-practiced incident response plans, whether ChatGPT is a blessing or a curse for penetration testers and bug bounty hunters, and how Microsoft has reason to be cheerful as security sales hit $20 billion.

Facebook, Instagram Blasted for 'Lame' Security Practices

Anna Delaney , Cal Harrison  •  January 26, 2023

Meta's popular social media platforms are increasingly being targeted by cybercriminals, and account takeover complaints rose over 1,000% last year. This social threat is spilling over into banks and government agencies, and experts criticize Meta for moving too slowly to address security issues.

ISACA Survey: Privacy in Practice 2023 Highlights

Anna Delaney  •  January 26, 2023

ISACA's recently published Privacy in Practice 2023 survey report shares new research related to the privacy workforce, privacy skills, privacy by design and the future of privacy. Expert Safia Kazi shares ways organizations can align privacy goals with business objectives.

Profiles in Leadership: Matanda Doss

Anna Delaney  •  January 23, 2023

Nation-state attackers are not just looking for major vulnerabilities to gain control of the enterprise. They are exploiting minor flaws to gain access and increase the severity of their attacks, says Matanda Doss, executive director of cybersecurity and technology controls at JPMorgan Chase.

ISMG Editors: Why Is LockBit Ransomware Group So Prolific?

Anna Delaney  •  January 20, 2023

In the latest weekly update, ISMG editors discuss why being a CISO is like being the first family doctor in a small village, why you can't trust ransomware gangs such as LockBit, and why cloud security vendor Netskope took on $401 million in debt from Morgan Stanley to fuel its SASE offering.

Preparing for the 'Fifth Generation of Ransomware'

Anna Delaney  •  January 13, 2023

In 2023, we'll see ransomware groups exploring new methods to get money from the same victims and entering the "the fifth generation of ransomware." Cybereason field CISO Greg Day shares his predictions for cybersecurity trends this year, from cloud security to deepfake scams.

ISMG Editors: Impact of Fragmented Russian Darknet Market

Anna Delaney  •  January 13, 2023

In the latest weekly update, ISMG editors discuss how online markets selling illegal substances are moving to Android apps to evade authorities, how check fraud, first-party and AI-related fraud will increase in 2023, and how Chinese state-sponsored actors may benefit from Russia's war in Ukraine.

Steps to Strengthen Cloud Security

Anna Delaney  •  January 9, 2023

"If we look at all of the types of issues with cloud breaches, it always comes down to misconfiguration," says Troy Leach of Cloud Security Alliance. "The challenge is: People try to treat cloud environments the same as they've always done on-premises, and that is unfair for both environments."

ISMG Editors: The Complexity of Rackspace Zero-Day Attack

Anna Delaney  •  January 6, 2023

In the latest weekly update, ISMG editors discuss how collaboration platform Zoom has strengthened its security features, the implications of a new law on medical device security for patient safety, and details on how a zero-day exploit enabled the ransomware hit on cloud computing firm Rackspace.

Why Is Meta Choosing to Settle Over Cambridge Analytica?

Anna Delaney  •  January 5, 2023

The latest edition of the ISMG Security Report analyzes why Meta has agreed to pay $725 million to settle a class-action lawsuit over users' personal data, how the median stock price dropped 40% among publicly traded security firms in 2022, and why an infrastructure change is needed in SOCs.

Optimal Strategies for Building Better Collective Defenses

Anna Delaney  •  January 4, 2023

Arizona has long been a leader in leveraging IT and providing digital services, but across the state and country alike, new challenges are emerging in the wake of the pandemic, and with them come new threats and risk factors, including remote work security, says Ryan Murray, deputy state CISO.