Security news aggregator

Latest coverage for CISO

Stay updated on CISO news and insights. Expert coverage on Chief Information Security Officer roles, strategies, and cybersecurity leadership trends.

4 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

CISO is the senior executive responsible for an organization’s information security strategy and governance. This role involves overseeing risk assessments, security architecture, and policy enforcement to protect sensitive data and critical systems. The CISO coordinates between technical teams and business units to ensure security measures align with organizational priorities and regulatory requirements.

In practice, the CISO must manage risks from insider threats, supply chain vulnerabilities, and targeted cyberattacks by prioritizing security controls and monitoring emerging threats. Their decisions influence how effectively an organization detects and responds to incidents, maintains secure configurations, and integrates security into business processes. Effective CISOs balance technical expertise with strategic oversight to reduce exposure across diverse attack surfaces.

Showing 4 most recent headlines Filtered view
Bank Info Security 2 years, 5 months ago

Cyber Fail: When Ransomware Gangs Get Careless

Also: Rampant App Vulnerabilities, Cloud Misconfiguration and Why CISOs MatterWelcome to "Cyber Fail," where our experts uncover fails so we can all strengthen our defenses. Today, we examine what happens when ransomware groups get careless, application developers' laissez-faire attitude toward vulnerabilities, and the security woes of a beleaguered crypto exchange.

The SEC isn’t giving SaaS a free pass. Applicable public companies, known as “registrants,” are now subject to cyber incident disclosure and cybersecurity readiness requirements for data stored in SaaS systems, along with the 3rd and 4th party apps connected to them.  The new cybersecurity mandates make no distinction between data exposed in a breach that was stored on-premise, in the

Bank Info Security 2 years, 5 months ago

SolarWinds Requests Court Dismiss Regulator's Fraud Case

Calls Securities and Exchange Commission's Cybersecurity Allegations 'Unfounded'Network monitoring software vendor SolarWinds moved to dismiss a federal lawsuit accusing the company and its CISO of securities fraud after they allegedly misstated the efficacy of its cybersecurity controls. Russian intelligence hacked the company in an incident disclosed in 2020.