Latest editorial and guest blogs on information security careers

Expert Insights with CyberEdBoard

Unique perspectives from ISMG's CyberEdBoard global community members

The Troublemaker CISO: How Much Profit Equals One Life?

CyberEdBoard • September 29, 2022

"It's stupid and adds zero value," writes Ian Keller, director of security at a telecom company, about connecting hospital networks - and especially life-sustaining information - to the internet. He encourages CISOs to be socially responsible about their moral obligation to patients.

Why Companies Are Failing at Cybersecurity

The Troublemaker CISO: Get the Organizational Basics Right

The Virtual CISO with Steve King

Insights from a veteran cybersecurity pro

Cybersecurity: A Bleak 'Progress' Report

Steve King • December 14, 2020

In light of the widespread apparent impact of the hack of SolarWinds' network management tools, it's time for a frank assessment of the lack of cybersecurity progress in recent years. Consider a "60 Minutes" report from 2015 - and where we're at today.

Fire in the Hole

An Attacker's IoT Paradise: Billions of Insecure Devices

Euro Security Watch with Mathew J. Schwartz

Tracking security and privacy trends across UK, Europe and beyond

Uber Ex-CSO's Trial: Who's Responsible for Breach Reporting?

Mathew J. Schwartz • September 23, 2022

Should the now-former CSO of Uber have reported a security incident to authorities after discovering signs of unusual behavior? That's one of the big questions now being asked in the closely watched trial of Joe Sullivan, who's been charged with covering up a data breach and paying off hackers.

Morgan Stanley's Hard Drive Destruction Investment Failure

After RaidForums' Demise, Breached Forum Seizes Leaks Mantle

Safe & Sound with Marianne Kolbasuk McGee

Insights on the security and privacy of healthcare information.

Virtual Summit Dives Into Healthcare Cybersecurity Issues

Marianne Kolbasuk McGee • June 5, 2020

How have the cybersecurity challenges facing healthcare organizations changed during the COVID-19 pandemic? And how are organizations responding? Information Security Media Group's Healthcare Cybersecurity Virtual Summit, to be held on June 9 and replayed June 10 and 11, will provide insights.

Database Hijackings: Who's Next?

Epic Systems vs. Tata: Key Security Questions

The Expert's View with Michael Novinson

Insights from industry experts

Why Would Palo Alto Networks Want Startup Apiiro for $600M?

Michael Novinson • September 19, 2022

Palo Alto Networks has been in a 19-month dry spell when it comes to major acquisitions, but it looks like that's about to change. Israeli business publication Calcalist reported Monday the firm is closing in on a deal to buy New York-based code risk platform provider Apiiro for around $600 million.

Unique perspectives from ISMG's CyberEdBoard global community members

Security Director Ian Keller Rants About Hospital Networks Being Internet-Connected

Insights from a veteran cybersecurity pro

SolarWinds' Hack Prompts an Assessment of the Work That Still Needs to Be Done

Tracking security and privacy trends across UK, Europe and beyond

While Joe Sullivan Is Accused of Perpetrating Cover-Up, Where Should the Buck Stop?

Insights on the security and privacy of healthcare information.

CISOs, Other Experts to Tackle Hot Topics, Including Challenges During COVID-19 Crisis

Insights from industry experts

Palo Alto Networks' 19-Month Acquisition Dry Spell Soon to Be Over, Calcalist Says

Insights and opinions from thought leaders representing the industry's services and solutions providers

Why the Lack of Prioritization, Oversight, and Control of Third-Party Access Impacts Everyone

Around the Network

Protecting Industrial Security When Uptime Is Essential

Examining What Went Wrong for Optus

The Ransomware Files, Episode 11: The Adult Boutique

Behind Agency Doors: Where Is Security Progress Being Made?

Cyberwar: Assessing the Geopolitical Playing Field

EvilProxy Bypasses MFA by Capturing Session Cookies

It's 2022. Do You Know Where Your Old Hard Drives Are?

Vulnerabilities Identified in Baxter Infusion Pump Devices

Analyzing Twitter's Security Nightmare

Cybersecurity & Threat Modeling: Automated vs. Manual