controlgap.com

Posts about:

breaches

Offensive Security Foundations for Financial Industry Professionals

Security Standards (PCI DSS) are vital in establishing baseline security measures for financial industry professionals who face challenges safeguarding sensitive information. However, organizations must understand that compliance with these standards does not equate to comprehensive security. Continue reading to better understand the foundations of offensive security and the importance of proactive measures beyond mere compliance to achieve a mature security posture in the financial industry.

Read More

Penetration Testing for Cybersecurity Insurance: What You Need to Know

As cybersecurity threats continue to evolve and become more sophisticated, the importance of robust security measures, coupled with comprehensive cybersecurity insurance, cannot be overstated. Cybersecurity insurance serves as a critical safety net for organizations, protecting them against the financial repercussions of cyber incidents such as data breaches, ransomware attacks, and business interruptions. Among the essential practices to strengthen security and meet insurance requirements, penetration testing, or pentesting, has emerged as a crucial method to identify and address vulnerabilities before malicious actors can exploit them. This article delves into the significance of pentesting for cybersecurity insurance, elucidating why it is indispensable for organizations aiming to safeguard their digital assets and secure favorable insurance terms.

Read More

Cyber Attack Seasons: Key Times When Businesses Are at Risk

While cyber attacks remain a persistent, year-round threat to organizations, cybersecurity professionals have discovered patterns in the frequency and intensity of attacks throughout the year. These attacks are influenced by various factors, including economic cycles, sporting events, and even the seasons. Understanding these patterns can help organizations prepare and reinforce defenses during high-risk periods. Here's a detailed look at when organizations are most vulnerable to cyber attacks.

Read More

This Week's [in]Security - Issue 263 | insecurity | Control Gap

Read More

This Week's [in]Security - Issue 260 | insecurity | Control Gap

Read More

This Week's [in]Security - Issue 214 | insecurity | Control Gap

Welcome to This Week’s [in]Security. DSS v4.0 Summary, and Secure Payment Terminal Software. New breaches: Cookies, FermiLab, Glovo, Telestra, Twillo, Peleton, … New Ransomware: Pipeline Hack, Scripps, SmileDirect, Pirate, DDoS. Follow-ups & Fall-out: Apple, Ostriches, Lawyers, Therapy, and Disputes. Privacy: Facebook, Google, and EU Cloud. Laws & Regs - Canada: C-10. US: Scraping, CryptoEx, CFAA and the Cloud, Deplatforming, Astroturfing the FTC, Fines. Standards: Healthcare, Space-cyber. Defense: Kids, Buffs, Bounty, Containers, Tools, Doxing. Vulnerabilities: DNS, Spectre. Drone v. Telsla. Cybercrime - Trends: Nation States. Crime: Defogging BitCoin. Other Risks: Password Day, Missiles, TLDs. Exploit Ban, Tabs. Health, Safety & Environment. Covid-19: Spread, Curves, Waves, and Variants. Response. Immunity. Impact. Covid Compliance. And more.

Read More