Content by Tom Field

Closing the Gap: Why ADR Is Crucial for Application Security

Tom Field  •  August 16, 2024

Jeff Williams, founder and CTO of Contrast Security, introduces ADR, a solution designed to address the visibility gap in security operations by monitoring applications and APIs. He explains how ADR blocks and detects attacks, preventing the exploitation of vulnerabilities.

Why Discovering Shadow AI Is Key to Protecting Data

Tom Field  •  August 16, 2024

As enterprises embrace generative AI, security concerns grow. Ravi Ithal, co-founder and CTO of Normalyze, outlines how large language models, or LLMs, increase risks such as data leakage and shadow AI, and he urges businesses to prioritize discovery and data protection.

Critical Infrastructure Under Siege: Cisco Talos' Power Play

Tom Field  •  August 16, 2024

When the war in Ukraine disrupted its GPS capabilities - crucial for power grid synchronization - Cisco Talos assembled a team of experts to address the issue. Joe Marshall, senior security strategist at Cisco Talos, led the collaborative response, known as Project PowerUp.

What Does an Ideal SIEM Look Like? Inexpensive

Tom Field  •  August 16, 2024

Huntress CTO Chris Bisnett outlines the firm's innovative approach to simplifying SIEM by reducing data storage costs and focusing on relevant logs. These services support small and midsized businesses looking to enhance their security posture without the high expenses of a traditional SIEM.

CyberEdBoard Profiles in Leadership: Karen Habercoss

Tom Field  •  August 15, 2024

As the chief privacy officer at UChicago Medicine, Karen Habercoss likes to tell her peers, "I know more about security than the average bear." And her knowledge has been put to the test in recent years, with the adjustment to remote work, telehealth and digital transformation.

Faster Recovery, Less Downtime With AI

Tom Field  •  August 14, 2024

Cyberattacks have become increasingly disruptive and often involve encryption or deletion of data that makes systems inaccessible. This creates substantial downtime and complicates the recovery process for organizations, said Jason Cook, AVP of worldwide partner sales engineering at Rubrik.

Securing AI in App Development: Balancing Speed With Safety

Tom Field  •  August 14, 2024

AI has revolutionized app development, while also introducing security challenges. Liqian Lim of Snyk discusses the importance of implementing security measures early in the development process to manage AI tool-related risks and safeguard the software development life cycle from vulnerabilities.

The State of SASE 2024: Rise of the Platform Approach

Tom Field  •  August 7, 2024

Maintaining user experience, unmanaged devices, securing the hybrid workspace - these are three edge security challenges for enterprises in 2024. How has the SASE approach evolved to help them? Angshuman Chattopadhyay of Wipro and Anupam Upadhyaya of Palo Alto Networks weigh in on SASE's evolution.

Third-Party Risk Management: A New Model for Healthcare

Tom Field  •  August 6, 2024

Healthcare organizations are shifting from outdated methods, endless spreadsheets and repetitive requests, in favor of modern, efficient approaches, said Shane Hasert, director of threat research and cyber security standards at ProcessUnity. Hasert described the current state of third-party risk management as...

Experts Warn of Post-Trump Shooting Misinformation, Scams

Tom Field , Cal Harrison , Prajeet Nair  •  July 14, 2024

As the investigation of the attempted assassination of former President Trump unfolds, authorities and cybersecurity experts advise individuals and organizations to beware of online threats in the forms of physical violence, nation-state disinformation and cybercrime campaigns.

Skills Gap: A Major Cyber Risk Not to Be Ignored

Tom Field  •  July 12, 2024

According to Fortinet's latest Global Skills Gap Report, 90% of organizations experiencing a breach in the past year can partially attribute the incident to a lack of cyber skills. Fortinet's Rob Rashotte offers insight on the report and tips for tackling the skills shortage and minimizing enterprise risk.

Modernizing Your PAM Program – An Identity-focused Security Strategy

Tom Field  •  July 3, 2024

Despite the acknowledgement that protecting identities is the key to securing data, identity-related breaches continue to make headlines. Crystal Trawny of Optiv and Barak Feldman of CyberArk discuss a new way to approach privileged access management.

Cybersecurity Deserves the Proverbial Seat at the Table

Tom Field  •  June 14, 2024

Theresa Lanowitz, head of evangelism and research at AT&T Cybersecurity, discusses key insights from the latest cybersecurity report. Security leaders need balanced investing, more internal collaboration and better preparation for potential cyberthreats to improve enterprise security, she said.

From Reactive to Proactive Threat Hunting

Tom Field  •  June 14, 2024

Proactive threat hunting has transformed the cybersecurity focus from reacting to alerts to anticipating and preventing threats. Traditional threat hunting methods often overwhelm analysts with numerous alerts and telemetry data, said Robert O'Leary, senior solutions architect, Binalyze.

Building Cyber Resilience With Real-Time Attack Simulations

Tom Field  •  June 13, 2024

Cyber resilience has become more crucial than ever. Erwin Eimers, general manager, IT and cybersecurity and CIO/CISO of Sumitomo Chemical America, emphasized the importance of preparing for compromises and breaches, rather than just preventing them.