ISC2 Blog

Latest Cyberthreats and Advisories - July 29, 2022

Tech giants, major cybersecurity companies, cryptocurrency scams, and remote work fraud are in the news this week. Here are the latest cybersecurity threats and advisories for the week of July 28, 2022. Threat Advisories and Alerts Liquidity Miner Scam Robs Cryptocurrency Buyers of More Than $70 Million The FBI has warned cryptocurrency investors about a liquidity mining scam that has defrauded individuals of more than $70 million since January 2019. The scammers lure victims by first building a relationship with them over a few days to several weeks. During this time, they mention liquidity mining as an investment strategy and... Read more →

(ISC)² and Others Commit to Closing the Cybersecurity Workforce Gap While at the White House

On July 19, National Cyber Director Chris Inglis hosted the National Cyber Workforce and Education Summit at the White House. The event focused on “improving skills-based pathways to cyber jobs, educating Americans” and finding solutions for bridging the cyber workforce gap. (ISC)² CEO Clar Rosso attended the summit and introduced the new (ISC)² initiative to pledge one million Certified in Cybersecurity as our global commitment to close the workforce gap and expand diversity in cyber. Attendees of the summit included government officials such as Ambassador Susan E. Rice, White House Domestic Policy Advisor; Secretary of Commerce Gina M. Raimondo; Secretary... Read more →

Latest Cyberthreats and Advisories - July 21, 2022

Cryptocurrency risks, Russian cyberattacks, and North Korean ransomware make headlines this week. Here are the latest cybersecurity threats and advisories for the week of July 21, 2022. Threat Advisories and Alerts Cybercriminals Defraud US Investors with Fake Cryptocurrency Apps Mobile banking’s growing popularity has incited cybercriminals to create fraudulent cryptocurrency apps. Thus far, the FBI has identified 244 victims who’ve been defrauded of $42.7 million. The fraudsters dupe investors by masquerading as legitimate financial institutions, copying their names, logos and websites as part of the ruse. To prevent further harm, the FBI recommends that financial institutions warn their customers about... Read more →

APAC Security Leaders Come Together at SECURE Singapore

We held our first-ever (ISC)² SECURE Singapore event earlier this month. The in-person event saw leading cybersecurity experts from around the region engaging in discussions around cybersecurity amid profound changes and disruption around the world, and a global workforce gap. David Koh, Commissioner of Cybersecurity and Chief Executive of the Cyber Security Agency of Singapore (CSA), started off the event with a keynote address. He argued that cybersecurity is akin to a team sport, where all organizations and individuals have a vital part to play in combating cyber crimes. Clar Rosso, CEO of (ISC)², and Zachary Tudor, CISSP, chair of... Read more →

#ISC2Congress: Piloting Teams While Under Pressure – Carey Lohrenz Will Speak as an (ISC)² Keynote

Carey Lohrenz, one of the first U.S. female fighter pilots, will provide “Lessons in Leadership” as a keynote at (ISC)² Security Congress 2022. As a pioneer in military aviation, Carey broke barriers as the first female F-14 Tomcat Fighter Pilot in the United States Navy and has flown missions worldwide. She knows what it takes to win in high-pressure moments while overcoming obstacles. She is the author of two best-selling books, “Fearless Leadership” and “Span of Control,” and as a consultant helps lead high-performing business teams to Prepare, Perform and Prevail Carey will share her experiences with the audience to... Read more →

(ISC)² Pledges One Million Certified in Cybersecurity

At (ISC)² we are committed to positively impacting the cybersecurity industry in a big way. The board of directors and (ISC)² leadership is pleased to announce that we will provide free entry-level cybersecurity certification exams and self-paced educational program courses to one million new professionals starting a career in cybersecurity. The One Million Certified in Cybersecurity pledge is our global commitment that expands on the (ISC)² ‘100K in the UK’ initiative, which promised 100,000 free exams and course enrollments for U.K. residents earlier this year. (ISC)² CEO Clar Rosso attended the Cyber Workforce and Education Summit at the White House... Read more →

How Long Does it Take to Train Entry-Level Cybersecurity Team Members?

When hiring managers onboard new cybersecurity staff, there is typically an expectation that some learning on the job will be necessary. This is certainly the case when new hires are entry- and junior-level practitioners. But when can you expect those less-experienced new hires to perform their tasks independently? Depending on experience levels, they can be ready to contribute on their own in as little as six months, according to new research by (ISC)². The findings, published in the (ISC)² Cybersecurity Hiring Managers Guide, reveal that more than a third of hiring managers (37%) believe entry- and junior-level hires are ready... Read more →

Latest Cyberthreats and Advisories - July 15, 2022

Callback scams, ransomware, Windows attacks and phishing … here are the latest cybersecurity threats and advisories for the week of July 15, 2022. Threat Advisories and Alerts North Korea State-Sponsored Cybercriminals Target U.S. Healthcare Organizations North Korea state-sponsored cyber actors are infecting the systems of U.S. healthcare organizations with Maui ransomware. The malware encrypts the servers of healthcare services—which can freeze up their electronic health care records, diagnostic services, imaging services and other critical functions—disrupting their operations for prolonged periods. Why are healthcare organizations targets? They are more likely to pay ransoms. According to Sophos' State of Ransomware in Healthcare... Read more →

How I Prepared for the CISSP Exam

By Joseph Montes, CISSP In 2021, I decided to pursue the CISSP. I was looking for a certification that would help me to stand out and prove to myself and my peers that I know my field. I had experience in Unix, Irix, Linux, Windows, Networks, Servers, storage, project management, virtualization, telecommunications, terrestrial and submarine networks. I had some certifications and a master’s degree in Cyber Security. CISSP seemed like the most sensible progression in my career. STARTING MY JOURNEY TO CISSP Things started simple enough. I researched what I needed to know. I started looking at Reddit, Discord and... Read more →

CISSP Recognized as Top Cybersecurity Certification

The CISSP (Certified Information Systems Security Professional) certification got a few thumbs-up in a recent Dice article about whether cybersecurity jobseekers need certifications to land a position. Several cybersecurity professionals quoted in the article named the CISSP as a valuable certification. “I always recommend the Certified Information Systems Security Professional Cert (CISSP). For years, this has been the dominating certification in the cybersecurity industry. It is still a top-tier certification, and I would recommend it to anyone serious about a career in cybersecurity,” said Steve Tcherchian, Chief Product Officer at XYPRO. Magda Chelly, a cybersecurity author and researcher, cited the... Read more →

Hiring Managers Lead on Entry-Level Cybersecurity Job Descriptions

Cybersecurity recruitment has long been a challenge, and companies often exacerbate the situation by setting unrealistic expectations, especially for entry- and junior-level roles. A common misstep is to require qualifications and years of experience that few junior jobseekers have. In an industry with a workforce gap of 2.7 million worldwide, cybersecurity teams remain understaffed, potentially putting their organizations at risk. So, it pays to have a more realistic view of what to expect when devising a strategy to attract candidates for all cybersecurity roles. Changing Expectations Hiring managers are starting to grasp the wisdom of moderating their expectations when seeking... Read more →

#ISC2Congress: Politics, Cybersecurity & Global Issues - Ian Bremmer to Speak as (ISC)² Keynote

Ian Bremmer will keynote (ISC)² Security Congress 2022 with the presentation “Why Political Risk and Cybersecurity Collide in Times of Crisis.” The accomplished author, speaker, commentator and political scientist will lead attendees on a journey through the intertwined world of politics, cybersecurity and global issues. Ian Bremmer is a political scientist who helps business leaders, policy makers and the general public make sense of the world around them. He is president and founder of Eurasia Group, the world's leading political risk research and consulting firm, and GZERO Media, a company dedicated to providing intelligent and engaging coverage of international affairs.... Read more →