However things change one does not. #Cyber people must excel at ‘business speak’ to get the C-suite and board to fund and prioritize risk #mitigations.
CISA warns organizations to patch yet more applications. It never ends. Remember, high-risk applications ought to be guarded so they cannot be used to harm enterprises.
bleepingcomputer.com/news/se…
Some unrecognized #malware disables endpoint #protection before it’s detected so it can do what it wants. This shows how adding non-#detection based protection helps.
appguard.us/blog/appguard-de…
The US #FTC "intends to use its entire legal jurisdiction to punish [private] companies that fail to take reasonable efforts to secure consumer data from disclosure as a result of #Log4j, or similar known vulnerabilities in the future."
bankinfosecurity.com/ftc-thr…
This article left out another mitigation to malware stealing passwords stored by browsers: let AppGuard isolate them such that only the browser can access the browser's password file.
#cybersecurity #datasecurity #dataprivacy #cybersecurityexpert
lnkd.in/gXaR6KW4
After a week of egg nog, this article reminds folk to keep mitigating those Log4j vulnerability risks. But to AppGuard, they merely affirm AppGuard's name and purpose, which are to protect the enterprise from its own applications via containment controls.
bit.ly/3Hjtpy5
This article left out another mitigation to malware stealing passwords stored by browsers: let AppGuard isolate them such that only the browser can access the browser's password file.
#cybersecurity #datasecurity #dataprivacy #cybersecurityexpert
bleepingcomputer.com/news/se…
2021 cybersecurity harms were so bad that there is much bipartisan unity for Congress to do something. Would that be good or bad? Keep your eyes on them in 2022.
#cybersecurity #datasecurity #security #informationsecurity
thehill.com
Google's open-source team discovered that 35,863 Java packages use vulnerable versions of the Apache Log4j library after scanning Maven Central, the world's largest Java package repository. No better time than right now to get secured.
#cybersecurity
therecord.media/google-more-…
Does this Log4j vulnerability seem like a foreign language to you, and would you like to understand what Log4j is in terms not requiring IT expertise? Then read this, and learn what the fuss is about.
#cybersecurity
theconversation.com/what-is-…
Log4j risks are a reminder that reliance on detection-based server protection alone is not enough. Add another layer that takes a non-detection approach. AppGuard applies zero trust within servers to block attacks.
#CyberSecurity
bit.ly/3pb8Gqb
AppGuard's zero trust controls can defeat Log4j attacks when no pattern matching detection data exists.
#cybersecurity #datasecurity #datainformation #security
appguard.us/blog/apply-zero-…
Organizations with Log4j vulnerable servers can be confident that AppGuard will help protect them from the effects of ensuing attacks
.
#cybersecurity #datasecurity #security #informationsecurity
appguard.us/blog/apply-zero-…
Will Log4j vulnerable servers be protected with detection based defenses? Consider adding non-detection based endpoint protection based on applying zero trust WITHIN them.
#cybersecurity #datasecurity #datainformation #security
appguard.us/blog/apply-zero-…
Log4j risks are a reminder that reliance on detection-based server protection alone is not enough. What if zero trust principles were applied WITHIN vulnerable servers to frustrate attackers?
#cybersecurity #ransomware #datasecurity #protection
appguard.us/blog/apply-zero-…
Cyber criminals are always coming up with ways to hijack applications to harm users and enterprises. Don't just hope for timely detection, mitigate AppJacking risks with containment and isolation controls.
#cybersecurity #datasecurity #security
thehackernews.com/2021/12/ov…
NIST says 2021 found more #vulnerabilities but 16.8% fewer high severity ones. Read this article's opinions as to why this is not good news. Ultimately, enterprises must mitigate their application exploit risks.
#CyberSecurity #DataSecurity
zdnet.com/article/with-18376…
Veracode CTO talks about a classic dilemma for enterprises: to invest in preventative cybersecurity versus not doing so possibly costing them far more.
#cybersecurity #datasecurity #informationsecurity #onlineprotection
zdnet.com/article/too-many-b…
