(ISC)² Blog

Cybersecurity Industry News Review - June 6, 2023

$400 million fund for AI and robotics start-ups, OpenAI to fund cybersecurity efforts while research shows that cybercriminals are targeting the friends and families of high-value organization executives. IQ Capital Gears Up For ‘Deep Tech’ Investment London-based venture investor IQ Capital has successfully raised $400 million (£320 million) across two funds, which it plans to invest in an array of so-called ‘deep tech’ start-ups focused on tech areas including artificial intelligence (AI), robotics, quantum computing and others. The venture capital firm primarily invests in seed to Series A stage startups in the UK and Europe. Its previous investments including protein... Read more →

Preparing for the (ISC)² CGRC exam

By Dwayne Natwick, CISSP, CCSP, CGRC, CC, (ISC)² Authorized Trainer, author, and product manager with 30+ years of experience in the IT industry You want to take the CGRC exam with the hopes of getting (ISC)² Certified in Governance, Risk, and Compliance. So, what are the best ways to prepare for this exam? People prepare and learn differently. You may prefer a study guidebook, you may test your skills through on-demand courses and quizzes, or maybe you prefer preparation through a full instructor-led training course. Whatever your preference, this article will provide you with some of the tools and materials... Read more →

From Silo to Synergy between Cybersecurity and Privacy in Europe

The International Association of Privacy Professionals (IAPP) and (ISC)² recently collaborated on a pair of webinars, bringing a panel together to shine a light on the intersection of cybersecurity and privacy. After looking at the landscape in the U.S., we now turn our attention to Europe. The conversation brought together conversation Isabelle Roccia, IAPP managing director Europe, Christian Toon, CISO at Pinsent Masons Law Company, Anna Zeiter, CPO at eBay and Ilias Chantzos, global & privacy officer at Broadcom. By John E. Dunn  The reality of data breaches is causing the structure of corporate management to rapidly evolve. The traditional model... Read more →

Latest Cyberthreats and Advisories - June 2, 2023

Cybercriminals hire humans to break CAPTCHAs, the meteoric rise of LockBit and a potential ransomware attack on the U.S. city of Augusta, Georgia. Here are the latest threats and advisories for the week of June 2, 2023. By John Weiler Threat Advisories and Alerts China State-Sponsored Actor Infiltrates U.S. Critical Infrastructure In a collaborative effort, cybersecurity authorities from the U.S., Canada, Australia, New Zealand and the U.K. have issued a joint advisory to highlight a series of events linked to a China state-sponsored threat actor known as Volt Typhoon. The cybercriminal’s activity impacts the networks of critical infrastructure sectors across... Read more →

Artificial Intelligence: The next evolution in cyber threat detection?

By Paul Whitlock, CISSP, CCSP In the face of unprecedented change and advancement, how do we keep pace with new advances and maintain a safe and secure digital environment? IT systems have evolved over the years from being single standalone mainframe computers, to being highly complex, connected and scalable platforms that operate multiple different services and use a variety of protocols to make it all work. Security approaches are continually having to change to keep up with this evolving landscape and the ever-changing threats. Early computer systems had minimal, if any, security measures beyond basic authentication and simple logging. In... Read more →

From Silo to Synergy between Cybersecurity and Privacy in the U.S.

The International Association of Privacy Professionals (IAPP) and (ISC)² recently collaborated on a webinar, bringing a panel together to shine a light on the intersection of cybersecurity and privacy. Bringing together a conversation between Cobun Zweifel-Keegan from IAPP (Moderator), Ron Woerner, an independent CISO/Forrester consultant, and Robin Andruss from Skyflow. By John E. Dunn “The nice thing about standards is that there are so many to choose from.” - Grace Hopper After the early optimism of the internet era, data has turned into a problem, with privacy crystallizing many of the most pressing issues. One way to understand this is... Read more →

Cybersecurity Industry News Review - May 30, 2023

By Chris Green It’s all one big simulation – for training at least, Netflix steps up password sharing clampdown, new training to improve supply chain security and Ireland invests in its cybersecurity development capability. NCSC Releases Training to Address Supply Chain Risk Prompted by the growing concern of attacks and disruption to the supply chains serving the U.K. and its allies, the country’s National Cyber Security Centre (NCSC) has launched two e-learning packages for procurement specialists and cybersecurity professionals to help both sides of the supply chain challenge better address the perceived risk. The training packages focus on two areas.... Read more →

Analysis: Ransomware In 2023 – Same Old Vulnerabilities, Bigger Ransoms, And Plenty of Pain

By John E. Dunn The 2023 Sophos State of Ransomware report found that while the number of ransomware attacks stabilized, larger victims are paying more than ever. Are they simply getting used to paying up? Ask CISOs which cyberthreat they worry about on a day-to-day-basis and the first name on most lists will be ransomware. It’s been like this for a while and judging from the recently published 2023 Sophos State of Ransomware report, there is no sign that the phenomenon is going to relent any time soon. A virtue of the Sophos study is that it is vendor agnostic... Read more →

Latest Cyberthreats and Advisories - May 26, 2023

By John Weiler Job ad scam snares victims in Southeast Asia, a fake Pentagon explosion highlights the dangers of AI and cybercriminals pounce on voice cloning technology in the latest move to develop an advantage. Here are the latest threats and advisories for the week of May 26, 2023. Threat Advisories and Alerts Updated #StopRansomware Guide Published by CISA and Partners As ransomware techniques and tactics continue to evolve, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and partner agencies have updated the #StopRansomware Guide, which was initially released in 2020. The guide serves as a comprehensive resource for organizations... Read more →

Infosecurity Europe 2023 Preview – Our Pick of the Keynote Sessions

In the first of two previews of Infosecurity Europe 2023, we look at our top picks for unmissable keynote sessions across the three days of the conference, held at ExCel in London from June 20-22. By John E. Dunn As the pivotal cybersecurity conference in the region, every Infosecurity Europe conference is oriented to topical themes. This year is no exception, with the speaker lineup covering everything from the on-going anxiety of cyberwar, how zero trust can be made to work once it leaves the drawing board, and the never-ending puzzle of assessing supply chain risk. The following is our... Read more →