Explore

TrendlineTrendline
Palo Alto Networks Seeks Principal Security Researcher for Advanced Threat Prevention

Palo Alto Networks Seeks Principal Security Researcher for Advanced Threat Prevention

Palo Alto Networks Seeks Principal Security Researcher for Advanced Threat Prevention
FactFableFactFable
The Real Reason Security Engineers Disagree About Vendor Risk for a K-12 School District

The Real Reason Security Engineers Disagree About Vendor Risk for a K-12 School District

Exploring the nuanced debates among security professionals over vendor risk in K-12 schools, from compliance philosophies to budget realities.
FactFableFactFable
How Employee Training for a State Government Quietly Shapes Modern Security Architecture

How Employee Training for a State Government Quietly Shapes Modern Security Architecture

Discover how mandatory cybersecurity training for state government employees is quietly driving a fundamental shift toward new security models like Zero Trust.
FactFableFactFable
Why a Threat Intel Analyst Matters More in Cloud Environments

Why a Threat Intel Analyst Matters More in Cloud Environments

As businesses move to the cloud, the security playbook changes. Here is why a threat intelligence analyst is essential for navigating the new landscape.
FactFableFactFable
What Defending Against Phishing Actually Looks Like in a Real Incident

What Defending Against Phishing Actually Looks Like in a Real Incident

A behind-the-scenes look at how cybersecurity teams respond to a phishing attack, from the initial click to the final post-mortem.
Rapid ReadRapid Read
CISA and NIST Issue New Guidance to Combat Cloud Identity Token Theft

CISA and NIST Issue New Guidance to Combat Cloud Identity Token Theft

The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) have jointly released final guidance aimed at protecting cloud identity tokens and assertions from theft, forgery, and misuse. This guidance, detailed in Interagency Report 8587 published on September 15, addresses critical tokens used for single sign-on, identity federation, and API access, which are increasingly targeted by adversaries for unauthorized access and data exfiltration. The recommendations, though voluntary, suggest that access and identity tokens should be valid for a maximum of one hour, and expired tokens must be rejected. Key management practices include rotating signing keys for high-impact systems at least every 90 days and annually for others. These keys are mandated to be stored in hardware-backed or isolated storage, never persistently on the servers utilizing them. Additionally, tokens must include an explicit audience field, and personal data within them should ...
Rapid ReadRapid Read
Oxfam America Seeks Cybersecurity and Infrastructure Manager to Bolster IT Security and Operations

Oxfam America Seeks Cybersecurity and Infrastructure Manager to Bolster IT Security and Operations

Oxfam America, a global organization dedicated to fighting inequality, is actively seeking a Manager for Cybersecurity and Infrastructure. This role is pivotal in leading and maintaining the stability, security, and scalability of the organization’s IT systems. The manager will oversee day-to-day IT infrastructure operations, coordinate with a Managed Security Services Provider (MSSP), respond to security incidents, and manage firewall and endpoint protections. Additionally, the position involves supervising helpdesk operations, managing office infrastructure, and ensuring adherence to security policies and procedures. The role requires expertise in cybersecurity and risk management, infrastructure management, and helpdesk staff leadership, with a focus on maintaining a secure and efficient digital environment for a hybrid workforce across multiple locations. The ideal candidate will have over five years of experience in IT infrastructure and cybersecurity, with in-depth knowledge of networking principles,...
TrendlineTrendline
Wiz Seeks Director, Strategic Partners to Expand Cloud Security Business with System Integrators

Wiz Seeks Director, Strategic Partners to Expand Cloud Security Business with System Integrators

Wiz Seeks Director, Strategic Partners to Expand Cloud Security Business with System Integrators
Rapid ReadRapid Read
Modern Classrooms Face Heightened Cybersecurity Risks Amid AI Integration

Modern Classrooms Face Heightened Cybersecurity Risks Amid AI Integration

Modern classrooms, particularly in higher education, are increasingly becoming significant cybersecurity attack surfaces due to the integration of advanced technology like interactive displays, AI tools, and networked audiovisual equipment. These environments, once primarily focused on teaching, now function as complex networks with numerous endpoints, including cameras, speakers, and interactive panels, all connected to institutional networks. The convenience of systems where faculty can use their ID cards to access buildings and log into AV systems also introduces access control challenges. The rise of AI tools further complicates security, as institutions must ensure their networks can handle increased traffic and that student data handled by these tools remains secure and compliant with regulations like the Family Educational Rights and Privacy Act (FERPA). A Sophos survey indicates that exploited vulnerabilities are the leading cause of ransomware attacks in higher education, accounting for 35% of inc...
TrendlineTrendline
Palo Alto Networks Seeks Prisma Cloud Sales Specialist for Department of Defense in Reston, Virginia

Palo Alto Networks Seeks Prisma Cloud Sales Specialist for Department of Defense in Reston, Virginia

Palo Alto Networks Seeks Prisma Cloud Sales Specialist for Department of Defense in Reston, Virginia
Rapid ReadRapid Read
CISA to Finalize Cyber Incident Reporting Rule for Critical Infrastructure in September

CISA to Finalize Cyber Incident Reporting Rule for Critical Infrastructure in September

The Cybersecurity and Infrastructure Security Agency (CISA) is set to release its final rule for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) this September. This forthcoming regulation will mandate that companies operating across 16 critical infrastructure sectors report covered cyber incidents within 72 hours and ransomware payments within 24 hours. The rule is expected to apply to a significant number of entities, potentially over 300,000, based on sector categories and Small Business Administration size thresholds. CISA held virtual town halls in June where industry stakeholders raised concerns regarding the broad definition of 'covered entity,' what constitutes a 'substantial cyber incident,' the amount of information CISA might request, and how these new rules will overlap with existing reporting obligations. The agency emphasizes the importance of prompt notice, evidence preservation, and cooperation with managed security providers, forensic vendors, and outside cybersecurit...
TrendlineTrendline
Twitch Seeks Security Incident Response Engineer for U.S. Locations with Salaries Up to $212,800

Twitch Seeks Security Incident Response Engineer for U.S. Locations with Salaries Up to $212,800

Twitch Seeks Security Incident Response Engineer for U.S. Locations with Salaries Up to $212,800