CISO is a high-stakes position, and possibly the most important business relationship/direct report a CEO can have. Whether your relationship is new, or you’ve been partners for a long time, it’s important to keep your CEO happy. At Axio, our platform enables companies to perform cyber risk quantification (CRQ), which analyzes the unique risks to your business and how specific risk scenarios would financially affect your organization. Here we have compiled a list of CRQ-related tips for keeping that flame alive with your CEO. 

New York, NY and Washington, DC — February 2, 2022 — Axio, a leading SaaS provider of cyber risk management and quantification solutions, today announced a new joint initiative with the Cyber Risk Institute (CRI), a non-profit coalition of financial institutions and trade associations. Together, Axio and CRI’s combined talents will deliver the CRI Cyber Profile tool to CRI members and other interested financial institutions with the Axio360 platform.

With aggressive changes in the digital and technical risk landscape, making decisions around cybersecurity spending has become one of the biggest challenges to business leaders. Most executives know that their organization should be taking proper cybersecurity measures but have trouble determining what specific cybersecurity measures are critical to their organization.

Spider-Man: No Way Home, which debuted in December 2021, is now in its fifth weekend in theaters with over $1.5B in box office sales. Despite being only available in theaters, it is the first pandemic-era film to exceed $1B. The excitement leading up to the film’s release was unprecedented even compared to other Marvel blockbusters and began to take shape back in April 2021, after Disney and Sony finally came to a licensing content agreement for Spider-Man IP. 

With a near incessant flow of high-profile cyber-attacks, 2021 was a significantly active year for cybercriminals. Merging into 2022, we looked back at the most significant cybersecurity themes that we at Axio have covered throughout the year. In our review, five major themes emerged, and we decided it would be fitting to enter 2022 with a compilation of the “greatest hits” in cybersecurity throughout the past year. 

Let’s take a Cyber Drink to 2021  

Cybersecurity professionals have been put in the spotlight this year. We applaud your hard work and service to protect society as the threats only get more sophisticated and the consequences become more frightening. Gone are the days when cybersecurity could operate in a silo. It’s now a business problem that requires collaboration between both public and private industry. It takes a village to improve security.  As we all embark on more conversations about cybersecurity improvement, we have compiled our first-ever annual cocktail book as we look back and reflect on the year and encourage collaboration for a safer 2022. We encourage everyone to get together (remotely or in-person) over a drink to reflect on the year and prepare for what’s ahead.  

You don’t need to be embedded in the tech world to have seen these apocalyptic headlines flooding your screens within the last few weeks. A major vulnerability to cybersecurity across the internet was revealed in the widely used, open-source Java-based data logging tool, log4j. The reveal of this latest fire alarm is being treated as a “Zero Day” attack, which is an attack that exploits a vulnerability that is either unknown to the affected parties or does not yet have a solution (patch) in place. The public first became aware of the threat after Minecraft, owned by Microsoft, released a statement that their Java edition of the game was at risk.  

Recently, a nationwide cream cheese shortage has emerged as many Americans make plans for their holiday cheesecakes. Early on, CBS reported that the cream cheese shortage was likely due to a scarcity of the large plastic tubs used to deliver it to stores. Kraft foods, which produces the popular Philadelphia brand cream cheese, initially issued a statement saying, “As more people continue to eat breakfast at home and use cream cheese as an ingredient in easy desserts, we expect to see this trend continue.”  

On Dec 9th, 2021, security researchers published a report of a high risk “zero day” vulnerability (CVE-2021-44228) affecting a common software package (Apache Log4J) that can allow remote code execution.

The old bait-and-switch digital prank “Rickrolling” has wavered in and out of popularity for the last decade and a half, but an 18-year-old student of Security Research and Computer Science put up a blog post earlier this year detailing a creative spin on the classic prank – he “Rickrolled” his entire school district via an IoT hack.