Content by Anna Delaney

Highlights of Verizon Data Breach Investigations Report 2023

Anna Delaney  •  June 6, 2023

Pretexting incidents, a social engineering technique that manipulates victims into divulging information, have nearly doubled, representing 50% of all social engineering attacks, according to Verizon's 2023 Data Breach Investigations Report, which analyzed more than 16,312 security incidents.

ISMG Editors: Why Communications Skills Matter for CISOs

Anna Delaney  •  June 2, 2023

In the latest weekly update, ISMG editors discuss why communication is vital to be an effective CISO in 2023, how the hack of Florida-based dental insurer MCNA affects nearly 9 million people, and how CyberArk is securing privileged users with a new browser.

Why Identity Is Key to Baselining API Security Programs

Anna Delaney  •  May 31, 2023

Change management is a critical part of a robust API management program, said Shaam Farooq, vice president of technology at Atlas Energy Solutions and a CyberEdBoard member. Team members must review and approve changes as they happen and communicates those changes across IT and OT security teams.

ISMG Editors: How Ukraine's Cyber Defenders Prepped for War

Anna Delaney  •  May 26, 2023

In the latest weekly update, ISMG editors discuss top takeaways from Ukraine's cyber defense success, how a European regulator suspended Facebook data transfers to the United States, and the state of the EU General Data Protection Regulation on its five-year anniversary.

5 Years of GDPR: Criticism Outweighs Positive Impact

Akshaya Asokan , Anna Delaney  •  May 25, 2023

Five years after the effective date of the General Data Protection Regulation, the European Union privacy law - hailed as a way to protect the privacy of citizens in an increasingly digital world - continues to be marred by criticism over its lack of effectiveness and uneven implementation.

ISMG Editors: The Plot Thickens for Capita in Breach Fallout

Anna Delaney  •  May 19, 2023

In the latest weekly update, four ISMG editors discuss the mounting fallout from the March hack of Capita and accompanying data breach, the comprehensive crypto regulation adopted by the EU, and Crosspoint Capital's agreement to purchase Absolute Software for $657 million.

What the Uber-Joe Sullivan Case Means for CISO Liability

Anna Delaney  •  May 15, 2023

Former chief security officer Joe Sullivan avoided jail time for his role in impeding a federal investigation into Uber's security practices, but attorney Lisa Sotto of Hunton Andrews Kurth LLP warned security leaders and executives "to take heed" and ensure they are covered for personal liability.

Why 'Shift Left' Leads to Unrealistic Security Expectations

Anna Delaney  •  May 15, 2023

The "shift left" movement puts "unrealistic" expectations on developers, said Gayatri Prakash, vice president and general manager of compliance at CloudBees. She said installing new tools to manage various parts of the SDLC is not necessarily "going to solve our problem for security."

Building True Cyber Resilience in 2023

Anna Delaney  •  May 12, 2023

Cyber resilience is "even more critical in the post pandemic world," said Amit Basu, CISO of International Seaways. The NIST framework is a useful tool for developing, testing and maintaining cyber resilience, but too often security teams neglect the "detect" and "respond" functions, he added.

Editors Panel: How Feds Hacked Russia's 'Snake' Operation

Anna Delaney  •  May 12, 2023

In the latest weekly update, ISMG editors discuss how the Feds have dismembered Russia's 'Snake' cyberespionage operation; the ongoing debate over privacy laws and regulations in the APAC region; and why more companies are banning the use of generative AI tool ChatGPT.

Hacking With a Conscience: Exploring the World of Ethical Hacking

Anna Delaney  •  May 11, 2023

Two experts from HackerOne - Marten Mickos, CEO, and Alex Rice, CTO and co-founder - provide insights on the similarities and differences between ethical hackers and in-house red teams, as well as the misconceptions around engaging with ethical hackers.

Treasury Department Targets Cloud Risks for Financial Firms

Anna Delaney  •  May 9, 2023

What are the challenges facing the U.S. financial sector as it continues its enthusiastic embrace of cloud-based technology? Department of the Treasury Deputy Assistant Secretary Todd Conklin said the agency has been "doing the best we can to secure cloud" as firms increasingly adopt it.

How ISACA Is Guiding Enterprises to Cybersecurity Maturity

Anna Delaney  •  May 8, 2023

The threat landscape continues to deteriorate, and criminals are using new techniques and pulling off devastating attacks. Meanwhile, security leaders are struggling to fill a critical shortage of skilled talent. Rob Clyde shares how ISACA is helping defenders keep up and gain cyber maturity.

Dispelling Misconceptions About Cyber Gamification

Anna Delaney  •  May 8, 2023

Gamification in cybersecurity can bring great potential business value to many organizations, but security teams need to dispel some misconceptions. In the first place, it’s not a game that takes employees away from their jobs, said Joe Carson, chief security scientist and advisory CISO at Delinea.

Security Controls Cyber Insurers Are Looking for These Days

Anna Delaney  •  May 8, 2023

Most people would assume ransomware tops the list of cyber insurance claims. Not so these days. Most claims are originating from third-party attacks, said Peter Hedberg of Corvus Insurance and Christopher J. Seusing of law firm Wood Smith Henning & Berman.