CSO Online | Security at the speed of business

3 reasons users can’t stop making security mistakes — unless you address them

Understanding what’s behind employee security mistakes can help CISOs make meaningful adjustments to their security awareness training strategies.

By Ariella Brown

May 31, 20245 mins

Data BreachRisk Management

More security news

OpenAI accuses Russia, China, Iran, and Israel of misusing its GenAI tools for covert Ops

OpenAI’s generative AI tools were used to create and post propaganda content on various geo-political and socio-economic issues across social media platforms, the company said.

By Gyana Swain

May 31, 2024 4 mins

Generative AI

Two-factor authentication (2FA) explained: How it works and how to enable it

Two-factor authentication (2FA) goes beyond passwords to add a second layer of security to the authentication process. Organizations and users alike can better secure their data by making the shift to 2FA.

By Josh Fruhlinger and CSO Staff

May 30, 2024 11 mins

PasswordsAuthenticationSecurity

Cybercrime group claims to have stolen data on 560 million Ticketmaster users

The group claims to have stolen 1.3 TBytes of data, including partial payment card numbers and customers’ personal identifiying information.

By Evan Schuman

May 30, 2024 4 mins

Data Breach

World’s largest botnet seized in Federal bust, Chinese national arrested

The botnet infected computers in nearly 200 countries, facilitating financial fraud, identity theft, and child exploitation.

By Shweta Sharma

May 30, 2024 4 mins

BotnetsCybercrime

Human vulnerability remains top threat: Report

According to a recent survey, companies are particularly at risk from business email compromise attacks and — often involuntary — insider threats.

By Manfred Bremmer

May 30, 2024 5 mins

Email SecurityPhishingRansomware

Digital trust gap leaves organizations vulnerable

Organizations know the importance of digital trust but lack of priority is leaving them open to reputational and business damage, finds ISACA report.

By Rosalyn Page

May 29, 2024 5 mins

Data and Information SecuritySecurity PracticesSecurity

Goodbye phishing? Descope's nOTP authentication offers WhatsApp alternative to SMS

Authentication is complex and not enough people use it, but no-code developer Descope thinks it has found the answer: WhatsApp.

By John Dunn

May 29, 2024 5 mins

Multi-factor AuthenticationAuthentication

Check Point VPNs exploited to breach enterprise networks

The company has released patch codes to fix the vulnerability that allows unauthorized remote access attempts.

By Shweta Sharma

May 29, 2024 3 mins

Vulnerabilities

Repeated cyberattacks on court systems raise security concerns for the US

Court systems form crucial national infrastructure and therefore a nation-state angle cannot be completely ruled out in the recent surge in attacks.

By Shweta Sharma

May 29, 2024 9 mins

RansomwareCyberattacks

US healthcare agency to invest $50M in threat detection tools that predict attackers’ next moves

The Advanced Research Projects Agency for Health is seeking proposals that go beyond detecting and analyzing healthcare attacks to trying to determine what attackers will try next.

By Evan Schuman

May 28, 2024 5 mins

Government ITHealthcare IndustryThreat and Vulnerability Management

Data leak exposes personal data of Indian military and police

Data included facial scans, fingerprints, identifying marks such as tattoos or scars, and documents such as birth certificates and employment records.

By Prasanth Aby Thomas

May 28, 2024 4 mins

Data Breach

CISSP certification: Requirements, training, exam, and cost

The Certified Information Systems Security Professional ‘gold standard’ certification demonstrates your skills, testifies to your experience, and opens career advancement opportunities, including higher salary.

By Josh Fruhlinger and CSO Staff

May 28, 2024 10 mins

CertificationsCareersSecurity