CISO
Sophos's five-year battle with Chinese attackers saw it breached via a projector, numerous firewall zero days exploited, hit back to burn a rootkit. Thanks for hardening your s*** says CISA; now can others do it too please?
Microsoft rips out 5.75 million inactive tenants, an eye-watering 730,000 unused applications, and 440,000 "resources" managed by legacy systems across its own estate.
The National Cybersecurity Centre offer some useful ideas on how to speak in language executives will understand and persuade it to take security seriously.
"One of the most rapidly growing expense line items" -- with Zscaler and CyberArk among the vendors getting paid.
"Many CISO may think quantifying risk in business terms is too hard. They will in turn fall back on taken-for-granted 'best practices' like heat maps."
On the anniversary of the new rules, we speak to industry experts to find out how (and if) things have changed.
"Flat falsehoods" says district judge of public security statement -- but dismisses multiple other SEC claims.
No plan survives contact.
Fix up, look sharp: Uncle Sam is running out of patience with tech firms shipping insecure software. Vendors? Get familiar with the phrase "query parameterization"...