Europe faces unprecedented security challenges as organizations embrace digital change. That's why ENISA is focusing on critical areas to bolster Europe's digital defenses - supporting member states by enhancing their cybersecurity programs through legislation, exercises and comprehensive reports.
The SolarWinds case has redefined cybersecurity disclosure obligations, especially for chief information security officers. The SEC's novel theories in this case have set a precedent for how organizations must present their cybersecurity practices, said Jennifer Lee, partner at Jenner & Block.
Hardware security remains a critical concern for IoT and embedded devices. NCC Group's Alex Plaskett, security researcher, and Robert Herrera, senior security consultant, discuss critical vulnerabilities in Sonos devices and best practices for safeguarding hardware and software.
Brandon Pugh of R Street Institute discusses Congress' struggle to balance AI innovation and regulation, the U.S. approach compared to the EU, and the urgent need for privacy laws to protect AI-driven data. He emphasizes education on AI technologies and the ongoing challenge of defining key terms.
The security of a large enterprise starts at the top, but members of the C-suite often have conflicting priorities and a lack of understanding about the role their part of the organization plays in keeping the business running, said Theresa Lanowitz, chief evangelist at LevelBlue.
Many cybersecurity organizations hope generative artificial intelligence and large language models will help them secure the enterprise and comply with the latest regulations. But to date, commercial LLMs have big problems - hallucinations and a lack of timely data, said NYU professor Brennan Lodge.
John Wrobel, CRO of Menlo Security, highlights how virtual cloud browser technology stops malware, ransomware and credential harvesting. Menlo turns users' existing browsers into secure enterprise browsers, eliminating the need for new software while ensuring protection against web-based threats.
Mike Fey, Co-Founder & CEO of Island, highlights how the enterprise browser's adoption has surged across sectors. He delves into new use cases, including resilience, healthcare and inter-company collaboration, emphasizing the importance of security and productivity in dynamic environments.
Cato Networks Chief Security Strategist Etay Maor discusses the importance of virtual patching for defending against vulnerabilities such as Log4j, why certain enterprises struggle to patch these flaws and how visibility challenges lead to overlooked risks in critical systems.
As cloud adoption accelerates, the unchecked growth of nonhuman identities is exposing companies to increased risks. Adam Cheriki, CTO and co-founder of Entro Security, explains why securing these identities is crucial and how the company's platform delivers a comprehensive solution.
Jeff Williams, founder and CTO of Contrast Security, introduces ADR, a solution designed to address the visibility gap in security operations by monitoring applications and APIs. He explains how ADR blocks and detects attacks, preventing the exploitation of vulnerabilities.
Microsoft's Sherrod DeGrippo delves into the rise of SIM swapping, the role of social engineering in cyberattacks, and the emerging use of AI by threat actors. She emphasizes the need for real multifactor authentication and advanced strategies to counter these evolving threats.
When the war in Ukraine disrupted its GPS capabilities - crucial for power grid synchronization - Cisco Talos assembled a team of experts to address the issue. Joe Marshall, senior security strategist at Cisco Talos, led the collaborative response, known as Project PowerUp.
Huntress CTO Chris Bisnett outlines the firm's innovative approach to simplifying SIEM by reducing data storage costs and focusing on relevant logs. These services support small and midsized businesses looking to enhance their security posture without the high expenses of a traditional SIEM.
Return-oriented programming continues to pose significant security challenges. Assistant Professor Bramwell Brizendine discusses how ROP exploits binary vulnerabilities for process injection and the advancements in tools designed to automate ROP chain generation.
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing govinfosecurity.com, you agree to our use of cookies.
