Stu Sjouwerman

article

Training employees to recognize and report impersonations, deploying multi-factor authentication, and hunting down impersonations can mitigate risk factors.

article

Security professionals must weigh the benefits and risks of AI as it becomes more sophisticated and widespread.

article

Enterprises continue to double-down investments on cybersecurity. But why aren’t cyberattacks slowing down?

article

To harness AI’s full potential, organizations should establish AI governance—a process that ensures AI risks are identified, assessed, measured, and managed effectively and consistently.                                                                                                   

article

Five real-world scenarios where deepfakes can be used to deceive businesses and launch highly sophisticated social engineering attacks.

article

A defense-in-depth strategy that includes a combination of technical controls, regular security training, and enforcement of policies and procedures is the only solution to counter the risk of BEC attacks.

article

Let’s explore the pros and cons of using password managers.

article

To help business leaders better understand how cybercriminals are evolving their attack methods, let’s explore the most intriguing attacks of 2022.

article

With deepfakes, phishing is evolving once again and being called the most dangerous form of cybercrime.

article

While there are plenty of good crypto projects with good intentions, investors and businesses must tread extremely cautiously while dealing with virtual currencies.

article

The myths mentioned provide a strong case for boards to make cybersecurity an integral part of their overall purview and accountability.

article

A multi-layered security approach with technical defenses combined with some cyber common sense can go a long way in protecting your organization from phishing scams and schemes.

article

No matter how much money organizations throw at information security every year, the threat of ransomware will persist. Why? Because there is one element in the entire security stack that can neither be programmed nor predicted—us humans.

article

Make fixing the issues that led to the ransomware incident your priority.

article

Remember that awareness and education is critical when it comes to QRC security.

article

Only a strong security culture holds the power to shape the behaviors, norms, attitudes, and mindsets of employees toward cybersecurity.

article

Why hackers hack, how they hack, and how to best defend your organization.

article

Cybersecurity is not only a data problem but a human problem.

article

If attackers say they have copied your data, they are not bluffing.

article

We must all do our part for our own safety and in the interest of national security.

article

Compliance and security are two sides of the risk management coin. Here are some best practices to turn compliance into tangible security.

article

Here is a quick look at some of the key concepts in Biden’s order and what organizations can do to fulfill them and improve cybersecurity.