Latest editorial and guest blogs on information risk management

The Virtual CISO with Steve King

Insights from a veteran cybersecurity pro

How Deception Technologies Enable Proactive Cyberdefense

Steve King • January 29, 2020

Deception technologies offer a way to shift away from a purely defensive "detect and response" posture toward a more proactive offensive approach that draws stealth cyberattackers into the open before a breach.

Why Penetration Tests Are So Essential

A CISO's Security Predictions for 2020

Euro Security Watch with Mathew J. Schwartz

Tracking security and privacy trends across UK, Europe and beyond

Ransomware Gangs Go (Lady) Gaga for Data Breaches

Mathew J. Schwartz • June 24, 2020

Many ransomware gangs hell-bent on seeing a criminal payday have now added data exfiltration to their shakedown arsenal. Gangs' extortion play: Pay us, or we'll dump stolen data. One massive takeaway is that increasingly, ransomware outbreaks also are data breaches, thus triggering breach notification rules.

Britain Makes U-Turn on Digital Contact-Tracing App

Maze Ransomware Gang Continues Data-Leaking Spree

Safe & Sound with Marianne Kolbasuk McGee

Insights on the security and privacy of healthcare information.

Virtual Summit Dives Into Healthcare Cybersecurity Issues

Marianne Kolbasuk McGee • June 5, 2020

How have the cybersecurity challenges facing healthcare organizations changed during the COVID-19 pandemic? And how are organizations responding? Information Security Media Group's Healthcare Cybersecurity Virtual Summit, to be held on June 9 and replayed June 10 and 11, will provide insights.

Health Data Breaches: 3 Lessons Learned

UK Beefs Up Hospital Cybersecurity Funding

The Expert's View with Jeremy Kirk

Insights from industry experts

Smart Devices: How Long Will Security Updates Be Issued?

Jeremy Kirk • June 22, 2020

If you've managed to equip your home with smart devices and appliances that work properly, you probably think you're all set. But there are no regulations around how long manufacturers must provide security updates, which could mean a smart device could become a risk.