Firstly I want to give a clear warning about this article, this is going to be a bit broody as I am very disappointed in our progress, actually, lack of progress is a better way to put it.
Craig Ford | 02 Jul | Read more
The need to see eye to eye with board members and business executives about information security has been background noise during the tenure of many a CISO.
David Braue | 09 Jul | Read more
A McAfee tool for managing antivirus in the enterprise can be hacked by anyone on the web.
Australia has developed a reputation for its lack of cyber security skills but Telstra says you can find the talent if you’re prepared to look in unexpected places.
Andrew Colley | 09 Sep | Read more
Getting a top job in information security has never been as simple as just having the required training and experience. Yes, those are mandatory, but the modern hiring process also includes personality evaluations to determine the so-called “XQ” – whether a candidate would be a good “fit” for a position – background checks and yes, the personal interview.
Taylor Armerding | 06 Oct | Read more
Your approach to vulnerability management may be putting your organisation at greater risk. Just dealing with vulnerabilities that a vendor said were “critical” isn’t enough and may still leave you susceptible to an attack. Attackers are embracing ransomware and other forms of distributed cybercrime made readily available as packaged exploit kits and services on the dark web. These attacker tools target low–hanging fruit by exploiting a surprisingly small number of vulnerabilities, many of which wouldn’t be tagged as a high priority in a purely vulnerability–centric approach.