Yahoo Suffers Major Data Breach Deja Vu

E-COMMERCE TIMES and TECHNEWS WORLD | December 16, 2016

Yahoo on Wednesday revealed that Net bandits stole data associated with 1 billion of its user accounts — one of the largest data breaches in Internet history.

The theft, which occurred in August 2013, is distinct from the theft disclosed earlier this fall, in which 500 million accounts were compromised, Yahoo CISO Bob Lord explained.

 

Security Central: Quest Diagnostics Suffers Breach, It’s Time to Disengage with “Security Deniers”

THE VAR GUY | December 15, 2016

Our second story takes a look at the roles that the end customer and the service provider play in inadequate cybersecurity. Think back over some of the biggest hacks and security breaches that have occurred over the year. Over and over again, companies big and small across almost every industry inevitably fall victim to a cyber-attack. This begs the obvious question, “How does this keep happening?” Or, in plainer, more blunt terms, who is falling down on the job?

“CEO Cyber-Naivety” Leaves Global Organisations Exposed to Major Cyber Attacks

IT SECURITY GURU and IT SECURITY NEWS | 13 December 2016

New research* released today has revealed that CEOs are over confident when it comes to their cybersecurity approach, and are potentially leaving themselves at risk of attack due to outdated and unrealistic strategies. RedSeal, the cybersecurity analytics company, today released the results of a global CEO study. The results – based on the insights of Chief Executive Officers (CEOs) of 200 global companies- have demonstrated what RedSeal is calling “CEO Cyber-Naivety”, where more than 80 percent of CEOs were very confident in their firm’s cybersecurity strategies, despite the fact that security incidents have surged 66 percent year-on-year since 2009**.

CEO’s Overconfidence in Cybersecurity Could be their Undoing

INFO SECURITY MAGAZINE | 13 December 2016 

CEOs’ overconfidence in their organization’s ability to deflect attacks could be exposing global firms to greater cyber risk, according to new research from RedSeal.

The cybersecurity analytics firm interviewed 200 CEOs of global firms, and found over 80% were very confident in their cybersecurity strategy.

This is despite data breach incidents soaring in 2016. In the US alone there have been nearly 1,000 reported incidents this year, leading to the exposure of 35 million records, according to the Identity Theft Resource Center.

In the UK, government figures from May claimed that two-thirds of large firms had been hit with a cyber attack or breach in the past 12 months.

 

Experts Debate the Key Points of the Final Obama Cybersecurity Report

TECH TARGET | SEARCH SECURITY | December 7, 2016

The final cybersecurity report for the Obama administration identified six key issues for improving cybersecurity and recommended actions to make positive changes, but experts disagree on the key points and whether the recommendations will be heeded by the incoming administration.

Cybersecurity Pros Tell Trump to Heed Commission’s Recommendations

SC Magazine | December 6, 2016

Cyber industry executives are weighing in on the presidential Commission on Enhancing National Cybersecurity’s  Report on Securing and Growing the Digital Economy identifying several areas they feel the commission nailed when it comes to improving our nation’s cybersecurity and what the upcoming Trump administration needs to focus upon.

Goodby SIEM, Hello SOAPA

NETWORK WORLD | November 29, 2016

Security Information and Event Management (SIEM) systems have been around for a dozen years or so. During that timeframe, SIEMs evolved from perimeter security event correlation tools to GRC platforms to security analytics systems. Early vendors such as eSecurity, GuardedNet, Intellitactics and NetForensics are distant memories. Today’s SIEM market is now dominated by a few leaders: LogRhythm, McAfee (aka: Nitro Security), HP (aka: ArcSight), IBM (aka: QRadar) and Splunk.

APQC: Managing Cyber Security Risk in Corporate Networks

APQC | November 28, 2016

Cyber security risk today is a deep concern for a broad spectrum of senior executives, not just the CIO’s top team members. The heads of finance, ERM, strategic planning, marketing, and field operations have to be up-to-speed. Board members as well are accountable for ensuring organizational resiliency. In this Q&A, APQC presents ideas for managing this risk from two experts: Ray Rothrock, RedSeal CEO, and Steve Timmerman, RedSeal VP of Business Development.

Smart Devices are Simple When it Comes to Cybersecurity

CBR ONLINE | 14 November 2016

RedSeal CTO, Dr Mike Lloyd, on the thing about things – with some pizza on the side

The Mirai strain of malware has focused a lot of attention on the Internet of Things, after a Mirai-infected botnet of IoT devices was used to cripple large parts of the Internet on Oct 21st.  Huge numbers of simple Internet-connected devices (cameras, home routers, baby monitors, etc) were used to flood the infrastructure of a service provider called Dyn, causing collateral damage to a wide array of other dependent websites.

Former Check Point CMO Parrish Lands At RedSeal

CRN | November 17, 2016

RedSeal has nabbed former Check Point Software Technologies Chief Marketing Officer Julie Parrish as its first CMO, the up-and-coming cybersecurity analytics company announced Wednesday.