article thumbnail

Cybersecurity Tips: Risk and Vulnerability Management

Security Industry Association

Managing cybersecurity risks and vulnerabilities is a critical activity for any robust security program. Risk management and vulnerability management are performed in tandem to help keep your network safer and more secure. What Is a Vulnerability? Managing Vulnerabilities in Your Environment.

article thumbnail

What We Can Learn from the Log4j Vulnerability

Pure Storage

In December, a critical zero-day vulnerability was reported in the widely used Log4j framework. Log4j is so ubiquitous, in fact, that Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly called this “the most serious vulnerability I have seen in my decades-long career.”. And that’s the key to the vulnerability.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

How to Implement Threat Modeling in Your DevSecOps Process

Pure Storage

Threat modeling is the process of identifying potential threats and vulnerabilities in a system and determining the likelihood and impact of each threat. This can be a serious threat to authentication systems and other security controls. Assets that are vulnerable to spoofing include usernames, passwords, and digital certificates.

article thumbnail

ISC East Session Preview: Securing IIoT Using Zero Trust — The Future of IIoT Cybersecurity

Security Industry Association

15-17 in New York City, and the Security Industry Association (SIA) and ISC East recently revealed full conference details for the SIA Education@ISC East program , including keynote presentations from top luminaries and over 30 sessions from top industry expert speakers on the most current business trends, technologies and industry developments.

article thumbnail

Kerberos vs. NTLM

Pure Storage

NTLM by Pure Storage Blog Kerberos and NTLM, two prominent encryption methods, differ fundamentally in their approach to authentication and security. While Kerberos employs a robust third-party authentication system with ticket-based access, NTLM relies on a challenge-response mechanism and hashing techniques.

article thumbnail

The most common ways human factors weaken business cybersecurity

Online Computers

Humans tend to be more unpredictable and inconsistent than tech processes, which makes them the most vulnerable link in the security chain. It’s therefore crucial to educate your employees about the cyberthreats that can befall your company and how to identify and mitigate them. Partner with Online Computers. Contact us today.

article thumbnail

Improving the human element in cybersecurity to mitigate phishing risks: A guide for SMBs

Online Computers

This is because instead of exploiting technology vulnerabilities, phishers often target employees, using manipulative tactics that exploit their emotions, such as urgency, fear, or curiosity. What’s more, domain authentication tools can help identify spoofed sender addresses, a common ploy used in phishing attacks.