One thing we know about consumer-focused cyber criminals is they’re more likely to strike during busy shopping periods. Black Friday – the day after Thanksgiving – and Cyber Monday, the first Monday after the holiday, are well-known to be hotbeds of cyber-criminal activity.

With this in mind, in the days leading up to Mother’s Day and Memorial Day 2019, Segasec monitored several large US-based retailers...

The password is increasingly becoming an endangered species – and it is an area which vendors focused on Zero Trust Security (ZTS) are becoming increasingly focused. According to a new study from MobileIron, the future of authentication for enterprise services will soon be through mobile devices.

The study, which polled 200 IT security leaders across three continents and at organisations with more than 500 employees,...

Bottom line: Machine learning is enabling threat analytics to deliver greater precision regarding the risk context of privileged users’ behavior, creating notifications of risky activity in real time, while also being able to actively respond to incidents by cutting off sessions, adding additional monitoring, or flagging for forensic follow-up.

Separating security hacks fact from fiction

It’s time to demystify the scale and severity of breaches happening globally today. A commonly-held misconception...

The vast majority of enterprises are struggling when it comes to protecting critical network assets from cyber threats, according to a new study from Endace.

The report, Challenges of Managing and Securing the Network 2019, which polled senior executives at more than 250 large enterprises globally, found an overwhelming sense of concern among respondents. More than four in five (81%) said they did not have enough monitoring...

• Energy, technology and finance are the most mature industries when it comes to privileged access management (PAM) adoption and uses, outscoring peer industries by a wide margin
• 58% of organisations do not use multi-factor authentication (MFA) for privileged administrative access to servers, leaving their IT systems and infrastructure exposed to hacking attempts, including unchallenged privileged access abuse
• 52% of organisations are using shared accounts for controlling privileged access, increasing the probability of privileged credential...

California-based endpoint security software provider SentinelOne has raised $120 million (£94m) in a recently conducted Series D round led by Insight Partners.

Samsung Venture Investment Corporation, Third Point Ventures, Redpoint Ventures, NextEquity, Data Collective, and other firms also participated in the funding round.

SentinelOne offers security services to companies...

We’re deluged by emails on a daily basis; many of which are not in good faith. Many others, like the old-fashioned telephone game, are passed down from scammer to scammer, changed a little here, and then sent to users’ inboxes.

According to new research from phishing prevention provider Ironscales, more than two in five (42%) email phishing attacks are polymorphic, with some attacks undergoing more than 500...

Conventional ITSM solutions are finding it difficult to cope up with today’s business needs. Complex public, private and hybrid cloud infrastructures add hundreds of thousands of endpoints to the network, and they all must be managed. More is being demanded of IT professionals at the same time that IT talent is hard to find. Organisations are in search of new ways to provide excellent customer service and meet their service level agreements (SLAs).

AI is being touted as the answer for many of...

• 86% of enterprises are seeing mobile threats growing the fastest this year, outpacing other threat types
• 48% say they’ve sacrificed security to “get the job done” up from 32% last year
• 41% of those affected say the compromise is having major with lasting repercussions and 43% said that their efforts to remediate the attacks were “difficult and expensive"

Bottom line: The majority of enterprises, 67%, are the least confident in the security of their mobile assets than any other device or platform today according to 

If you’ve glanced at the opinion columns of security industry publications, you’ve probably seen the term “risk-based” floating around, as in “the time is now for a comprehensive, risk-based approach” or “