Do cybersecurity certifications still deliver? Experts share 6 key insights
Cybersecurity certifications continue to open doors and shape careers in security operations (SecOps). However, the mileage that individuals and organizations get out of certs can vary by industry, the specific demands of the job, and the practical experience needed to tackle real-world challenges. As a result, there's growing recognition among ... Read More
5 SecOps automation challenges — and how to overcome them
A confluence of factors is driving the need for greater automation of security operations centers (SOCs). Primary among them are the growing sophistication of threats, the sheer volume of security-related data, the speed of threat propagation, a proliferation of security tools, and a critical shortage of staff with the necessary ... Read More
AppSec alert fatigue: 4 ways to reduce burnout — and boost security
Fatigue in the cybersecurity field is by no means a new phenomenon. But for application security (AppSec) teams at many organizations, it continues to be a confoundingly hard challenge to address ... Read More
Security operations by the numbers: 30 cybersecurity stats that matter
Enterprise IT and security operations (SecOps) leaders are under growing pressure from threat actors pounding away at their infrastructure defenses using a variety of new and proven tactics, techniques and procedures ... Read More
CISA’s ‘vulnrichment’ aims to fix the NVD
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has launched a new vulnerability enrichment program that aims to fill the gap that opened earlier this year when the National Institute of Standards and Technology (NIST) suddenly scaled down its involvement with the National Vulnerability Database (NVD) ... Read More
Why GenAI fails at full SOC automation
A rapidly growing number of organizations are exploring the use of generative AI tools to transform business processes, improve customer interactions, and enable a variety of new and innovative use cases. But technology leaders who hope to harness GenAI tools to build a completely autonomous security operations center (SOC) might ... Read More
NVD delays highlight vulnerability management woes: Put malware first
A decision by the National Institute of Standards and Technology (NIST) to change how it maintains the widely used National Vulnerability Database (NVD) has focused attention on the brittle nature of current enterprise vulnerability management processes ... Read More
Software supply chain security by the numbers: 30 stats that matter
Compromises including Log4J, SolarWinds' Orion network management technology, and Progress Software's MoveIT file transfer software have heightened focus on software supply chain security in recent years ... Read More
5 reasons you should consider a career in application security
A career in application security (AppSec) can be rewarding, diverse, and challenging. However, as a relatively new domain within cybersecurity, it has not garnered widespread attention among professionals exploring careers in the field ... Read More
Are AI development tools exposing your organization? 4 key considerations
Microsoft's soon-to-be-released GitHub Copilot Enterprise option will give organizations an enterprise-grade subscription plan for its AI-powered code-completion tool, which helps developers write code faster ... Read More