CISO
Leading CISO: "Oracle's absolute denialism doesn't inspire confidence"
“It’s time to do something a bit different.”
Southern Water, fined £91 million in 2021 for extensive criminal pollution, declines to comment on ransom
"Without a change in incentives, tooling, behaviors, ownership, and ultimately focus, there will be no material change in actual technical risk management."
Sophos's five-year battle with Chinese attackers saw it breached via a projector, numerous firewall zero days exploited, hit back to burn a rootkit. Thanks for hardening your s*** says CISA; now can others do it too please?
Microsoft rips out 5.75 million inactive tenants, an eye-watering 730,000 unused applications, and 440,000 "resources" managed by legacy systems across its own estate.
The National Cybersecurity Centre offer some useful ideas on how to speak in language executives will understand and persuade it to take security seriously.
"One of the most rapidly growing expense line items" -- with Zscaler and CyberArk among the vendors getting paid.
"Many CISO may think quantifying risk in business terms is too hard. They will in turn fall back on taken-for-granted 'best practices' like heat maps."