Content by Anna Delaney

ISMG Editors: What's Hot at RSA Conference This Year?

Anna Delaney  •  June 3, 2022

In the latest weekly update, four ISMG editors discuss important cybersecurity issues, including the trending topics at this year's RSA Conference, how security researchers are tracking a zero-day vulnerability in Microsoft Office and what Broadcom's acquisition of VMware means for security.

Making Metrics More Meaningful for the Board

Anna Delaney  •  June 2, 2022

According to Accenture Security's new report titled "Elevating the Cybersecurity Discussion," only 38% of CEOs and CFOs are confident that over 75% of their organization is actively protected by their cybersecurity program. Ryan LaSalle discusses how to help the C suite understand cybersecurity.

Elasticsearch Attack: The Problem of Unsecured Databases

Anna Delaney  •  June 2, 2022

The latest edition of the ISMG Security Report discusses how security researchers have warned of a new attack campaign targeting 1,200 cloud-based Elasticsearch databases. It also revisits the Kaseya supply chain attack and examines how we can mitigate mobile phone fraud.

What Defenders Can Learn From History - and Martial Arts

Anna Delaney  •  June 1, 2022

Obtaining threat insight is like practicing judo - you want to use your attacker's power against them, says Chris Borales, senior manager of product marketing at Gigamon. He and Tom Dager, CISO of Archer Daniels Midland Company, discuss how to keep pace with the evolving ransomware landscape.

ISMG Editors: London Summit Highlights

Anna Delaney  •  May 27, 2022

Four ISMG editors discuss highlights from the London Summit, including the most concerning emerging threats if collateral damage from the Russia-Ukraine war isn't all it was reputed to be, building a cyber risk playbook to help businesses identify exposure, and stress and burnout in the workplace.

Proof of Concept: How Can We Improve Industry Collaboration?

Anna Delaney  •  May 23, 2022

In this edition, Ari Redbord and Grant Schneider join ISMG editors to discuss the challenges ahead for the U.S. government as it plans to roll out EDR deployments at more than half of federal agencies this year, how stable the stablecoin economy really is and how to improve industry collaboration.

ISMG Editors: The Case of the 'Dr. Evil' of Ransomware

Anna Delaney  •  May 20, 2022

In the latest update, four ISMG editors discuss the alarming, bizarre case of a cardiologist in Venezuela charged with developing malware and recruiting affiliates, recent ransomware and data leak incidents in healthcare and how the economy is causing mature cybersecurity startups to slow hiring.

Ransomware Ecosystem: Big Changes Since Colonial Pipeline

Anna Delaney  •  May 19, 2022

The latest edition of the ISMG Security Report analyzes the changes in the ransomware landscape one year after the attack on Colonial Pipeline. It also revisits the Ryuk ransomware attack on a school district in Illinois and examines common culprits hindering effective Zero Trust adoption.

Proof of Concept: Apple/Microsoft/Google Back Passwordless

Anna Delaney  •  May 16, 2022

In the latest "Proof of Concept," Lisa Sotto, Jeremy Grant and ISMG editors discuss the significance of Apple, Google and Microsoft supporting the FIDO protocol's passwordless sign-in standard, progress made on Biden's cybersecurity executive order and updates on U.S. cybersecurity and privacy laws.

ISMG Editors: What Have We Learned From the Conti Leaks?

Anna Delaney  •  May 13, 2022

In the latest update, four editors at Information Security Media Group discuss the intriguing insights exposed by the leak of ransomware gang Conti's internal communications, the U.S. Treasury's first-ever sanctions on a cryptocurrency mixer and the latest cyber activity in Russia's hybrid war.

Lessons for Cybersecurity Leaders From Russia-Ukraine War

Anna Delaney  •  May 12, 2022

The latest edition of the ISMG Security Report analyzes what lessons cybersecurity leaders can learn from the Russia-Ukraine war. It also examines the Okta data breach and Lapsus$ attack and describes how tech companies are supporting new developments in the FIDO protocol.

Proof of Concept: Crypto - A New National Security Threat

Anna Delaney  •  May 12, 2022

In the latest "Proof of Concept," Ari Redbord, head of legal and government affairs at TRM Labs, and former CISO David Pollino of PNC Bank join editors at ISMG to discuss the U.S Treasury's decision to sanction cryptocurrency mixer Blender.io. They also assess software supply chain security.

Hybrid War: 'It's Going to Get a Lot Worse'

Anna Delaney  •  May 11, 2022

Russia's use of wiper malware, DDoS attacks and targeted disinformation show it no longer depends on traditional methods in its war with Ukraine. John Walker, a professor and counterintelligence expert, says organizations need to be "more realistic" about how they handle cyberattacks.

ISMG Editors: Zero Trust Special

Anna Delaney  •  May 6, 2022

John Kindervag, creator of Zero Trust, and two ISMG editors discuss whether we have advanced or regressed in security technology, implementing Zero Trust security in OT environments, and how federal agencies are progressing with Zero Trust adoption a year after the cybersecurity executive order.

Strategies to Build Long-Term Cyber Resilience

Anna Delaney  •  May 6, 2022

How can organizations improve their resilience in a world that seems increasingly unpredictable? Advisory CISO Wolf Goerlich of Duo Security at Cisco shares findings from Cisco's Security Outcomes Study and offers considerations for CISOs on how to build robust cyber resilience programs.