Content by Michael Novinson

Cloudflare One Brings Email Security, DLP, CASB Together

Michael Novinson  •  June 20, 2022

Cloudflare sees opportunity in the growth of zero trust and is integrating recent email and cloud security acquisitions with native data security and network discovery capabilities. "I like the fact that we can grow in both directions," says company CEO Matthew Prince.

Proposed SEC Rules Will Force Boards to Double Down on Cyber

Michael Novinson  •  June 20, 2022

Publicly traded companies will need to beef up their cybersecurity knowledge since the the U.S. Securities and Exchange Commission is proposing rules and guidelines that would mandate more stringent oversight of cyber risk, says Roger Sels, former vice president of cyber solutions for BlackBerry.

Profiles in Leadership: Chris Holden

Michael Novinson  •  June 20, 2022

Crum & Forster CISO Chris Holden says it's critical to see cybersecurity as a business enabler rather than a business inhibitor. He is taking on the perception that security is the "Department of No" and works hard to change the culture at his company.

Does Zero Trust Feel Too Overwhelming? Here's How to Start

Michael Novinson  •  June 18, 2022

Evolving to a zero trust architecture can be overwhelming for organizations, leaving many unsure of where they should even start. Cloudflare Chief Security Officer Joe Sullivan urges CISOs to break the journey into bite-sized chunks that can be easily digested.

The Push on Capitol Hill for Passwordless Authentication

Michael Novinson  •  June 17, 2022

Interest in passwordless authentication architecture continues to grow among U.S. government agencies and departments as they embrace more modern approaches to identity and access management, says Sean Frazier, federal chief security officer at Okta.

The Evolution of Phishing From Email to SMS and Voice Hacks

Michael Novinson  •  June 17, 2022

Phishing is no longer restricted to just emails. As attackers broaden their arsenal, businesses today also need to be on the lookout for impersonation attempts via SMS text messages or voice calls, says Roger Grimes, a data-driven defense evangelist at KnowBe4.

How XDR Is Fulfilling the Promise That SIEM Never Did

Michael Novinson  •  June 17, 2022

SentinelOne has expanded its detection and response capabilities beyond the endpoint in recent years with the acquisition of data analytics tech developer Scalyr and identity and deception technology vendor Attivo Networks, says Nicholas Warner, president of security.

How Modern Tech Is Changing Vulnerabilities and Responses

Michael Novinson  •  June 17, 2022

The proliferation of IoT devices and cloud has created a more vulnerable attack landscape, while technologies such as AI and deep learning can potentially thwart zero-day threats, says Itai Greenberg, chief strategy officer at Check Point Software Technologies.

Why Zero-Day Attacks on Open-Source Libraries Are Surging

Michael Novinson  •  June 17, 2022

The discovery and subsequent exploitation of a critical zero-day vulnerability in Apache's Log4j open-source library has highlighted the importance of code security in today's threat landscape, says Steve Wilson, security chief product officer at Contrast.

Why the Physical Russia-Ukraine War Might Become a Cyberwar

Michael Novinson  •  June 17, 2022

The war between Russia and Ukraine isn't an abstract concern for SecurityScorecard CEO Aleksandr Yampolskiy. It's a deeply personal one since Yampolskiy, who is now a U.S. citizen, grew up in Russia and rode the train to Ukraine every summer to visit his grandmother.

Safeguarding the Enterprise Across Multiple Public Clouds

Michael Novinson  •  June 16, 2022

Organizations have created significant security challenges by rapidly migrating applications, data and workloads to multiple public clouds over the course of the COVID-19 pandemic, according to Abbas Kudrati of Microsoft and Upendra Singh of HCL.

What's Needed for Firms to Bring SASE and Zero Trust to Life

Michael Novinson  •  June 16, 2022

Implementing modern architectures such as zero trust and secure access service edge remains an issue for many organizations. This challenge is further amplified by the shortage of skilled cybersecurity personnel, says Kate Adam, senior director of enterprise product marketing at Juniper Networks.

Why Implementing Security Technology Is Such a Challenge

Michael Novinson  •  June 16, 2022

Organizations are struggling to implement all the security technology they've purchased and ensure they are protected across the most important areas of risk and posture, according to Amol Kulkarni, chief product and engineering officer at CrowdStrike.

The Importance of Business-Critical Application Security

Michael Novinson  •  June 16, 2022

Business-critical applications, the crown jewels of the modern enterprise, are increasingly targeted due to their significant value, and many organizations are struggling to secure them. These systems must be properly deployed, monitored and maintained, says Onapsis CEO Mariano Nunez.

Responding to Federal Directives on Critical Infrastructure

Michael Novinson  •  June 15, 2022

Critical infrastructure providers face a unique set of challenges when it comes to securing their environment from the cruciality of uptime to complying with new federal directives, according to Mark Cristiano, commercial director for Rockwell Automation's global services business.