Category: Cyber Defense Magazine

Key Cybersecurity Considerations for 2025

As we usher in a new year, it’s crucial to focus on key areas in cybersecurity that demand our attention. While there’s undoubtedly a long list of issues that all… The post Key Cybersecurity Considerations for 2025 appeared first on…

Make the Most of Your Holiday Cybersecurity Awareness Efforts

The holiday season is a time for joy, celebration, and, unfortunately, an uptick in cyber threats. From phishing scams that mimic festive deals to exploitation of end-of-year operational freezes, cybercriminals… The post Make the Most of Your Holiday Cybersecurity Awareness…

Now Is Not the Time to Cut Back on Security Teams

Generative artificial intelligence (AI) is revolutionising the way businesses operate. The widespread adoption and integration of models, such as OpenAI’s ChatGPT and Google’s Gemini, into everyday organisational processes has resulted… The post Now Is Not the Time to Cut Back…

Innovator Spotlight: LatticaAI

Lattica’s Mission: Making Private AI a Reality with the Power of Fully Homomorphic Encryption In the buzz-heavy world of AI and cybersecurity, it’s not every day a company steps out… The post Innovator Spotlight: LatticaAI appeared first on Cyber Defense…

The Story of Jericho Security

Redefining Cybersecurity for the AI Era With the launch of ChatGPT, everything changed – overnight, AI became democratized. But while everyday users turned to AI for grocery lists and grammar… The post The Story of Jericho Security appeared first on…

The Internet of Things Design Challenges

Developing an engineering project is a challenge by itself. In the practice, dealing with some product or service is very requiring and it can take a couple of phases from… The post The Internet of Things Design Challenges appeared first…

AI-powered Vishing

First, there was phishing. The goal: To trick targets into revealing information or completing unauthorized actions. Around since the 1990s, this attack vector remains the top internet crime reported to the… The post AI-powered Vishing appeared first on Cyber Defense Magazine.…

The Significance of Cybersecurity within AI Governance

In everyday life, AI integration rapidly changes traditional consumers’ shopping experiences, changes work scenarios at work spots, and health provision. With the impacts that AI strikes to the world, many… The post The Significance of Cybersecurity within AI Governance appeared…

The Evolution of SOC: Harnessing Data, AI and Automation

The modern Security Operations Center (SOC) faces an ever-growing tide of data, fueled by the explosion of connected devices, cloud migration, and increasingly sophisticated cyberattacks while the growing impact of… The post The Evolution of SOC: Harnessing Data, AI and…

Multi-channel Secure Communication

1.1 Emerging Cybersecurity Technologies As we move into 2025, AI and machine learning are expected to play an even larger role in cybersecurity. These technologies will be used to enhance… The post Multi-channel Secure Communication appeared first on Cyber Defense…

Cyber Risks Associated with Adoption of Generative AI Tools

As artificial intelligence (AI) continues to revolutionize the business landscape, midsized organizations find themselves at a crossroads, balancing the transformative potential of AI against the heightened risks it introduces. While… The post Cyber Risks Associated with Adoption of Generative AI…

Publisher’s Spotlight: Veriti

By Gary S. Miliefsky, Publisher, Cyber Defense Magazine Transforming Exposure Management with Safe, Automated Remediation Organizations today invest heavily in security tools, often spending $100k or more annually. But the… The post Publisher’s Spotlight: Veriti appeared first on Cyber Defense…

BREAKING: CISA Steps In to Keep CVE Services Alive

By Gary Miliefsky, Publisher, Cyber Defense Magazine Good news comes to us like a Windows patch Tuesday: Common Vulnerabilities and Exposures Program will continue operating with an eleven month continuation… The post BREAKING: CISA Steps In to Keep CVE Services…

MITRE CVE Program in Jeopardy

As a former advisory board member to the CVE/OVAL initiatives, I’m sounding the alarm: MITRE has confirmed that funding for the CVE and CWE programs will expire on April 16,… The post MITRE CVE Program in Jeopardy appeared first on…

Publisher’s Spotlight: Industrial Defender

By Gary S. Miliefsky, Publisher, Cyber Defense Magazine In today’s hyperconnected world, protecting critical infrastructure has become a national imperative. From energy grids and transportation systems to water treatment facilities… The post Publisher’s Spotlight: Industrial Defender appeared first on Cyber…

Unified Endpoint Management: One Tool to Rule All

As the number of endpoint devices increases, managing and securing them becomes complex. The traditional way of using separate security tools for desktops, mobile devices, tablets, and other endpoints is… The post Unified Endpoint Management: One Tool to Rule All…

Training Skillset Transfer

Understanding Skills and Their Importance A skill is an individual’s ability to perform an action efficiently and effectively, providing a significant advantage in problem-solving. Skills go beyond mere knowledge, requiring:… The post Training Skillset Transfer appeared first on Cyber Defense…

The Invisible Fingerprint in Code

Digital Traces in Code Every program contains characteristic patterns of its developers, starting with the choice of variable names and preferred programming paradigms. Some developers rely on iterative solutions using… The post The Invisible Fingerprint in Code appeared first on…

Smart Meter Security: Best Practices and Emerging Regulations

Smart meters are essential to smart grids, empowering utilities and smart grid managers to provide consumers and energy providers with real-time energy consumption data, transparent billing, and demand side management…. The post Smart Meter Security: Best Practices and Emerging Regulations…

Digital Payment Security: Trends and Realities of 2025

As we navigate 2025, the digital transformation continues to reshape industries, with the financial sector  at its forefront. Digital payments are no longer an emerging trend, but a fundamental part… The post Digital Payment Security: Trends and Realities of 2025…

How Will the Splinternet Impact Cybersecurity

Most people think of the internet as a globally connected resource. However, user experiences are not necessarily as consistent as they believe. Factors such as politics, regulations and censorship have… The post How Will the Splinternet Impact Cybersecurity appeared first…

Effective Cyber Drills Must Mirror the Realities of The Battlefield

Over the past 15 years, cyberattacks have escalated dramatically. What began as isolated data breaches has evolved into sophisticated operations targeting critical infrastructure and serving intelligence-gathering objectives. The turning point… The post Effective Cyber Drills Must Mirror the Realities of…

Cybersecurity Trends for 2025

Artificial Intelligence (AI) has been the buzzword in cybersecurity and business for a few years now, and it will continue to impact security and all phases of business in 2025…. The post Cybersecurity Trends for 2025 appeared first on Cyber…

The CMMC Compliance Journey

The Cybersecurity Maturity Model Certification (CMMC) is a cybersecurity framework designed to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) within the defense supply chain. Still, it is… The post The CMMC Compliance Journey appeared first on Cyber…

What VirusTotal Missed — Discover with Unknown Cyber

“VirusTotal gives you opinions. Hybrid Analysis gives you behavior. Unknown Cyber gives you the truth in the code—before the malware even runs. That’s how we blow them both away.” —… The post What VirusTotal Missed — Discover with Unknown Cyber…

Rethinking SAP Security Without Maintenance Contracts

Do you rely on SAP maintenance contracts to keep vulnerabilities in check? Here’s a question: have you felt the sting of renewal season? Those spiraling costs are hard to ignore—just… The post Rethinking SAP Security Without Maintenance Contracts appeared first…

Unpacking Disinformation in the 2024 US Presidential Election

The 2016 U.S. presidential election is often cited as a watershed moment for digital disinformation campaigns – revealing the vulnerability of democratic processes to foreign interference and the spread of… The post Unpacking Disinformation in the 2024 US Presidential Election…

Key Cybersecurity Themes for 2025

Cyber threats are evolving faster than ever, and security leaders can’t afford to fall behind. That’s why we created the 2025 Fortra State of Cybersecurity Survey—to provide valuable insights that help SOCs,… The post Key Cybersecurity Themes for 2025 appeared first on…

Can Standards Deal a Deathly Blow Against Deepfakes?

Recent advances in generative artificial intelligence (AI) are making it increasingly difficult to know the difference between what is real and what is not. Computer-generated clips that are designed to… The post Can Standards Deal a Deathly Blow Against Deepfakes?…

AI-Powered Testing: Innovation, Risks, and What Comes Next

Artificial intelligence (AI) is transforming software testing, driving unparalleled speed, accuracy, and coverage in comparison to traditional, manual methods. However, all good things come at a cost. As organizations integrate… The post AI-Powered Testing: Innovation, Risks, and What Comes Next…

AI-Powered Cyber Attacks and Data Privacy in The Age of Big Data

The fast transformation and evolution of artificial intelligence (AI) significantly changed the general norm and operational process of industries. This drastically transformed different sectors of industries related to finance, healthcare… The post AI-Powered Cyber Attacks and Data Privacy in The…

How can Organizations Secure Low-Code No-Code Development

Applications developed by citizen developers are on the rise. Low-code and no-code (LCNC) platforms are reshaping the development ecosystem. These tools are broadening horizons and enabling citizen developers to create… The post How can Organizations Secure Low-Code No-Code Development appeared…

AI Addressing New Need to Secure Data from The Inside Out

Today’s traditional perimeter-based cybersecurity measures are increasingly inadequate due to threats that arise from within an organization. Whether born of malice or mistake, it’s clear that insider threats are only… The post AI Addressing New Need to Secure Data from…

Preparing For The AI-Generated Cyber Threats Of 2025

There has been a gradual but alarming shift in the digital threat landscape over the last few years, as Advanced Persistent Threats (APTs) become more prominent and more potent. The… The post Preparing For The AI-Generated Cyber Threats Of 2025…

How Cybersecurity is Evolving in 2025 to Tackle New Threats

The cybersecurity landscape continues to evolve at breakneck speed. In the U.S., regulatory policy at the federal level – for instance, the National Cybersecurity Strategy launch and the SEC’s Cybersecurity… The post How Cybersecurity is Evolving in 2025 to Tackle…

How Ghostgpt Is Empowering Cybercrime in The Age Of AI

Artificial Intelligence (AI) has significantly transformed various sectors, offering tools that enhance efficiency and innovation. However, the emergence of uncensored AI chatbots like GhostGPT has introduced new challenges in cybersecurity…. The post How Ghostgpt Is Empowering Cybercrime in The Age…

The Cyber Insurance Conundrum

While cybercriminals innovate at lightning speed, cybersecurity teams—led by Chief Information Security Officers (CISOs)—often find themselves relying on outdated playbooks. Cyber insurance, once viewed as the ultimate safety net, is… The post The Cyber Insurance Conundrum appeared first on Cyber…

Best Practices and Risks Considerations in Automation like LCNC and RPA

Technologies such as Low-Code/No-Code (LCNC) and Robotic Process Automation (RPA) have become fundamental in the digital transformation of companies. They continue to evolve and redefine software development, providing new possibilities for different… The post Best Practices and Risks Considerations in Automation like…

Navigating Cyber Security Implementation Challenges in SMBs

Cyber Security is often low priority for SMBs. Many SMBs lack dedicated security specialist; instead, security responsibilities are typically handled by IT department which is already overwhelmed with general IT… The post Navigating Cyber Security Implementation Challenges in SMBs appeared…

White Paper: Advancing Cybersecurity Through Kernel Immunization

PT SYDECO, an innovative Indonesian company specializing in IT security committed to pushing the boundaries of cybersecurity through cutting-edge solutions adapted to modern threats, presents a revolutionary approach to cybersecurity:… The post White Paper: Advancing Cybersecurity Through Kernel Immunization appeared…

The CISO’s Myopia

Fifteen years ago, I wrote an article entitled “The CSO’s Myopia.” At the time, I aimed to highlight a critical limitation in information security management. I demonstrated how many information… The post The CISO’s Myopia appeared first on Cyber Defense…

Complexity: The Silent Killer of Cybersecurity

The cybersecurity landscape is a complex and ever-evolving ecosystem. At its core lies a fundamental paradox: the more tools we deploy to protect our digital assets, the more complex and… The post Complexity: The Silent Killer of Cybersecurity appeared first…

Why EPSS is a Game-Changer for Cybersecurity Risk Management

Having served on the MITRE.org CVE (OVAL) advisory board, I have spent years analyzing vulnerabilities and how they impact global cybersecurity. The challenge has always been prioritization—how do we determine… The post Why EPSS is a Game-Changer for Cybersecurity Risk…

Maximizing Security Through Hardware

Organizations are continually balancing seamless user experiences and implementing robust defenses against evolving threats. Passwords, as the first line of defense, remain a primary vulnerability, often exploited due to poor… The post Maximizing Security Through Hardware appeared first on Cyber…

Publishers Spotlight: Flashpoint

In 2024, a new hybrid cold war is redefining the threat landscape. Cyber, physical, and geopolitical risks are converging, with nation-states, ransomware groups, and insider threats exploiting vulnerabilities to disrupt… The post Publishers Spotlight: Flashpoint appeared first on Cyber Defense…

Experience from GAP Assessment Audits for NIS2 Compliance

The NIS2 (Directive (EU) 2022/2555 of the European Parliament and of the Council) imposes cybersecurity and information security compliance obligations on many organizations that previously had no such requirements. Most… The post Experience from GAP Assessment Audits for NIS2 Compliance…