Chris "Tito" Sestito, co-founder and CEO, HiddenLayer, and John Kindervag, creator of zero trust, senior vice president, cybersecurity strategy, ON2IT Group

Protecting the Hidden Layer in Neural Networks

Steve King • January 26, 2023

In this episode of "Cybersecurity Unplugged," Chris "Tito" Sestito discusses technology to protect neural networks and artificial intelligence and machine-learning models, and John Kindervag explains how such technology fits into the zero trust framework.

►

Leadership & Executive Communication

Lessons to Learn From CircleCI's Breach Investigation

Latest

Fraud Management & Cybercrime

ISMG Editors: Why Are Ransomware Profits Dipping?

Anna Delaney • January 27, 2023

In the latest weekly update, four ISMG editors discuss why it pays off to have well-practiced incident response plans, whether Chat GPT is a blessing or a curse for penetration testers and bug bounty hunters, and how Microsoft has reason to be cheerful as security sales hit $20 billion.

Next-Generation Technologies & Secure Development

Venture Capitalist: Now Is an Ideal Time to Invest in Cyber

Tom Field • January 26, 2023

Valuations are down, some companies have left the market altogether, and some even have announced deep rounds of layoffs. Yet, Alberto Yépez of Forgepoint Capital retains optimism for the cybersecurity marketplace in 2023 and says now is the ideal time to be ramping up investments in innovation.

Privileged Access Management

Delinea Snags David Castignola as CRO to Push Beyond Banking

Michael Novinson • January 25, 2023

Privileged access management vendor Delinea has hired longtime RSA sales leader David Castignola to expand beyond North America as well as in nonregulated industries. Delinea hopes to increase sales beyond verticals such as financial services, banking, healthcare, insurance and the public sector.

Cloud Security

Microsoft 365 Cloud Service Outage Disrupts Users Worldwide

Mathew J. Schwartz • January 25, 2023

Microsoft blamed an internal network configuration change for outages that disrupted access to Microsoft 365 services, including Microsoft Teams and Outlook, for users around the world. The change has been rolled back and additional infrastructure added to speed restoration, it says.

Fraud Management & Cybercrime

ISMG Editors: Why Is LockBit Ransomware Group So Prolific?

Anna Delaney • January 20, 2023

In the latest weekly update, ISMG editors discuss why being a CISO is like being the first family doctor in a small village, why you can't trust ransomware gangs such as LockBit, and why cloud security vendor Netskope took on $401 million in debt from Morgan Stanley to fuel its SASE offering.

Open XDR

eSentire CEO Kerry Bailey on Using XDR to Cut Business Risk

Michael Novinson • January 20, 2023

eSentire has used the $325 million it received in February to leverage data from its Atlas XDR platform and strengthen customers' positions around cyber resiliency. The Kitchener, Canada-based company has shifted its focus from alerts and data to business worries and business risk.

3rd Party Risk Management

BlueVoyant CEO on How to Remediate Supply Chain Defense Bugs

Michael Novinson • January 19, 2023

BlueVoyant has strengthened its ability to monitor the remediation of supply chain issues and integrate that with questionnaire activity, CEO Jim Rosenthal says. Existing supply chain tools tend to generate lots of risk information but then put the burden on the client to interact with suppliers.

Governance & Risk Management

BitSight CEO on Going From Security Ratings to Managing Risk

Michael Novinson • January 19, 2023

Security ratings provide a strong indication of potential risk, but boards increasingly want to drill into the underlying risk factors, says CEO Steve Harvey. BitSight has invested in both workflows around third-party risk and research and identification of CVEs on behalf of government agencies.

Governance & Risk Management

Complying With Privacy Rules and Penalties of Many Countries

Suparna Goswami • January 18, 2023

The main problem for CISOs in complying with regulations in different countries is that a single approach often does not work, says Farly Halim, regional CISO for Asia, Middle East and Africa at Sodexo BRS. Use a single solution tuned to each country's requirements, he advises.

Security Operations

Sophos to Lay Off 10% of Workers Amid Shift to MDR Services

Michael Novinson • January 18, 2023

Sophos will execute the second-largest round of layoffs of any security company in the current economic downturn, axing 450 workers amid a shift to MDR services. Sophos plans to reduce its staff by 10% in a move to balance growth and profitability in a challenging and uncertain economic environment.

Government

'Hack the Pentagon' Hackers Will Literally Hack the Pentagon

Prajeet Nair • January 17, 2023

The U.S. Department of Defense is looking for a few good hackers to penetrate a facilities network underpinning the Pentagon's basement, mezzanine, and the command and communications center used by the president and the secretary of defense. Defense has hosted white hat hacking sessions since 2016.

Training & Security Leadership

Profiles in Leadership: Grant Lockwood

Suparna Goswami • January 17, 2023

Complying with data regulations in different countries is getting trickier for most CISOs and hence it is important to consult with the legal team and create structure separation between data sets in different countries, says Grant Lockwood, CISO at Virtus Health in Australia.