Latest editorial and guest blogs on information risk management

The Virtual CISO with Steve King

Insights from a veteran cybersecurity pro

An Attacker's IoT Paradise: Billions of Insecure Devices

Steve King • July 30, 2020

The speed at which IoT is enabling innovation is far outpacing the ability of the security custodians to implement appropriate controls before these devices hit the market. That creates a classic target-rich environment for the bad guys - one that will require vigorous defense and oversight.

How Deception Technologies Enable Proactive Cyberdefense

Why Penetration Tests Are So Essential

Euro Security Watch with Mathew J. Schwartz

Tracking security and privacy trends across UK, Europe and beyond

Why Encrypted Chat Apps Aren't Replacing Darknet Markets

Mathew J. Schwartz • September 25, 2020

With so many cybercrime markets continuing to disappear, why haven't encrypted messaging apps stepped in to fill the gap? They might seem to be the perfect solution to admins stealing buyers' and sellers' cryptocurrency - via an exit scam - or police infiltration. But encrypted apps have their own downsides.

Drop Everything and Secure Remote Workforce, Gartner Warns

Ransomware Danger: Russian-Speaking Gang Targets Russians

Safe & Sound with Marianne Kolbasuk McGee

Insights on the security and privacy of healthcare information.

Virtual Summit Dives Into Healthcare Cybersecurity Issues

Marianne Kolbasuk McGee • June 5, 2020

How have the cybersecurity challenges facing healthcare organizations changed during the COVID-19 pandemic? And how are organizations responding? Information Security Media Group's Healthcare Cybersecurity Virtual Summit, to be held on June 9 and replayed June 10 and 11, will provide insights.

Tying Up Loose Ends for Health Data Privacy, Security

Health Data Breaches: 3 Lessons Learned

The Expert's View with Jeremy Kirk

Insights from industry experts

How a Phishing Awareness Test Went Very Wrong

Jeremy Kirk • September 25, 2020

Training employees to resist phishing emails is key to preventing compromises. But an exercise run by Tribune Publishing Co. created a searing backlash after its phishing exercise tempted employees with bogus bonuses in a year in which they had already endured financial hardships.