Content by Tom Field

A Look Ahead: John Kindervag's Zero Trust Outlook for 2023

Tom Field  •  November 30, 2022

The foundation of a landmark presidential executive order and now a standard embraced by governments and enterprises globally, zero trust has come far in the past two years. Zero trust creator John Kindervag offers a progress report and insight into the key trends he sees shaping the new year.

Email as a Threat Vector in 2023

Tom Field  •  November 29, 2022

Email has been around for decades. It's inherently unsecured, and adversaries continue to find new ways to use it as an attack vector. Crane Hassold of Abnormal Security opens up on the threat landscape and how security professionals should prepare for new attacks via email in 2023.

Cybersecurity: How to Manage Business Risk

Tom Field  •  November 23, 2022

Mega-breaches and ransomware attacks are every day news. Yet, far too many enterprises operate as if just back-ups and cyber insurance will see them through. Mark Sangster of Adlumin weighs in on detection, response and how to demonstrate duty of defense.

TPRM, ESG, Risk Quantification: What CISOs Need to Know

Tom Field  •  November 17, 2022

Third-party risk management; environmental, social and governance risk; risk quantification: They are all critical topics as we approach 2023. Richard Marcus of AuditBoard explains the significance of these areas and how security leaders should approach them strategically.

Ransomware Attackers Don't Take Holidays

Tom Field  •  November 16, 2022

Cyberattackers love to strike on weekends and holidays - that's not news. What is news: These attacks cost more than weekday incidents, and they take a heavy toll on defenders. Cybereason's Sam Curry shares insight from the new study "Organizations at Risk: Ransomware Attackers Don’t Take Holidays."

A Look Ahead: Jeremy Grant on Identity Security in 2023

Tom Field  •  November 15, 2022

Apple, Google and Microsoft supported a new common passwordless sign-in standard, and a key Senate committee approved the Improving Digital Identity Act of 2022. How will these moves pay off in 2023? Identity security expert Jeremy Grant weighs in on trends and predictions for the new year.

Fortra: New Name, Renewed Cybersecurity Mission

Tom Field  •  November 7, 2022

Fortra is the new name of security vendor HelpSystems, but the mission remains: Find new ways to help customers solve cybersecurity challenges. Mike Devine and John Grancarich of Fortra talk about the rebrand, the company's journey, including recent acquisitions, as well as the future.

FortiGuard Labs: 2023 Threat Landscape Insights

Tom Field  •  November 7, 2022

Convergence of the threat landscape looms large for defenders, and Cybercrime as a Service potentially will enable more destructive attacks at scale. These are among the 2023 threat landscape predictions of Derek Manky of Fortinet's FortiGuard Labs. He shares these and other insights.

Protecting Unsecured SAP Deployments

Tom Field  •  November 7, 2022

How are threat actors taking advantage of unsecured SAP deployments, and what are some of the truly unique aspects of securing SAP? Fortinet's Dan Schrader and Aidan Walden discuss the need to secure SAP migrations and share recommendations for improved defenses.

Strategies to Mitigate Risk During Mergers and Acquisitions

Tom Field  •  November 2, 2022

In 2021, U.S. mergers and acquisitions shot up 55%. In 2022, that percentage is set to climb even higher. The wave of post-COVID M&A demands that cybersecurity leaders improve their efficacy. Ben Murphy of Truist shares insight on where, when and how cybersecurity needs to influence the M&A agenda.

The Roadway to Modern Managed Detection & Response

Tom Field  •  October 31, 2022

Managed detection and response: It's a young market, but it has already undergone significant evolution. Niloo Razi Howe and Ron Pelletier of Pondurance share insight on what modern MDR is and questions that prospective customers should be asking of their vendor partners.

Cloud Security: Dealing with SaaS - the New Shadow IT

Tom Field  •  October 31, 2022

Software as a service - it's the new shadow IT, says Phyllis Woodruff of Global Payments. And it highlights the new challenges arising for security leaders overseeing their organizations' cloud migrations. She discusses how to make cloud "bulletproof" for business teams.

Spotting and Stopping Synthetic ID Fraud

Tom Field  •  October 27, 2022

Synthetic identity fraud is the fastest-growing financial crime in the country. By combining real and fabricated personal information, a synthetic identity is specifically designed to look and act like a valid identity - until it doesn’t, leaving financial losses and criminal activity in its wake.

The Quest for Non-Intrusive Security

Tom Field  •  October 25, 2022

Insanity in cybersecurity is trying the same failed approaches and hoping for different results. As new CSO at Traceable, Richard Bird wants to stop the insanity and bring a new, non-intrusive approach to defending the digital crown jewels - especially API.

How to Achieve Cloud Security and Visibility Through Threat Detection

Tom Field  •  October 21, 2022

Russell Shupert of Veeva Systems explains the challenges faced in securing a complex environment. He discusses how his team overcame these challenges, the benefits they achieved and how Threat Stack's Cloud Workload Protection and Application Infrastructure Protection tool helped along the way.