Content by Anna Delaney

How Will SEC Rules Affect Reporting, Tracking of Incidents?

Anna Delaney  •  September 25, 2023

Under new U.S. Securities and Exchange Commission rules, companies must disclose material cybersecurity incidents and annually report on cybersecurity risk management, strategy and governance. Alex Hamerstone, advisory solutions director at TrustedSec, discussed the challenges ahead.

ISMG Editors: London Summit - AI Tech and Incident Response

Anna Delaney  •  September 20, 2023

This week, ISMG editors covered the hot topics at ISMG's London Cybersecurity Summit 2023, including the technical landscape of AI, executive liability, incident response strategies in the face of a global ransomware attack and how to build personal resilience to avoid burnout.

ISMG Editors: Are Frequently Used Usernames a Security Risk?

Anna Delaney  •  September 15, 2023

In the latest weekly update, four editors at ISMG discuss important cybersecurity and privacy issues, including how to keep assets secure in the quantum era, when common usernames pose a cybersecurity threat, and how to strike the right balance between regulation and innovation in AI.

ISMG Editors: Reasons to Cheer About Cybersecurity Market

Anna Delaney  •  September 8, 2023

In the latest weekly update, ISMG editors discuss the state of cybersecurity market resilience in 2023, why U.S. federal regulators publicly named 130 healthcare firms using web trackers and how SentinelOne ended its partnership with startup Wiz amid takeover discussions.

ISMG Editors: Identity Security Special

Anna Delaney  •  September 1, 2023

In the latest weekly update, Jeremy Grant of Venable joins three ISMG editors to discuss why the U.S. government is taking a back seat on digital identity issues, the risks of artificial intelligence, and takeaways from the U.S. Cyber Safety Review Board's recent report on cybercrime group Lapsus$.

Proof of Concept: Securing Digital Government Services

Anna Delaney  •  August 31, 2023

In the latest "Proof of Concept," two CyberEd board members, Connecticut state CISO Jeff Brown and Maricopa County CISO Lester Godsey, join ISMG editors to discuss securing digital government services, improving user experiences and balancing user convenience with robust identity verification.

ISMG Editors: The Shifting Cyber Insurance Landscape

Anna Delaney  •  August 25, 2023

In the latest weekly update, ISMG editors discuss the shifting dynamics of cyber insurance, why APAC is approaching privacy regulations around emerging technologies, and how U.S. authorities charged the co-founders of cryptocurrency mixer Tornado Cash with money laundering.

Strategies to Fight New Fraud and Money Laundering Schemes

Anna Delaney  •  August 23, 2023

With the rampant surge of fraudulent schemes hitting the world at the moment - including the creation of fake cryptocurrencies, bank websites and investment scams - a more dynamic and holistic approach to detection and prevention is mission-critical for banks and regulators.

ISMG Editors: Lessons Learned From the Lapsus$ Crime Group

Anna Delaney  •  August 18, 2023

In the latest weekly update, ISMG editors discuss important cybersecurity and privacy issues including highlights of interviews at Black Hat 2023, lessons learned from the success of the Lapsus$ cybercrime group's attacks and why Check Point is buying startup Perimeter 81 for $490 million.

Privacy Lessons From the NHS Lanarkshire WhatsApp Incident

Anna Delaney  •  August 15, 2023

U.K. authorities recently reprimanded health service provider NHS Lanarkshire after staff members shared patient data on messaging service WhatsApp. That privacy lapse demonstrates the risks of shadow IT and the legacy of COVID-19 practices, said attorney Jonathan Armstrong of Cordery Compliance.

ISMG Editors: The White House Drive to Secure Code With AI

Anna Delaney  •  August 11, 2023

In the latest weekly update, ISMG editors discuss the White House's debut of a $20 million contest to exterminate bugs with AI, a New York man admitting to being behind the Bitfinex hack, and a new malware campaign that is targeting newbie cybercriminals in order to steal sensitive information.

Proof of Concept: Managing Software Supply Chain Woes

Anna Delaney  •  August 10, 2023

In the latest "Proof of Concept," Mike Baker, VP/IT CISO at DXC Technology and a CyberEdBoard member, and Chris Hughes, co-founder and CISO at Aquia, join ISMG editors to explore the state of the software supply chain, MOVEit breaches and the role of SBOMs and transparency in software development.

Why Do Cybersecurity Awareness Programs Often Fail?

Anna Delaney  •  August 9, 2023

Many security awareness training programs fail because organizations don't understand the risks they face, said Culture AI's John Scott. He said a successful training program "will help people by making sure that it's targeting the behaviors that address the key risks for the organization."

ISMG Editors: Financial Services Special

Anna Delaney  •  August 4, 2023

In the latest weekly update, Troy Leach, chief strategy officer at Cloud Security Alliance, joins ISMG editors to discuss preparing for new regulations, new requirements for third-party cloud penetration testing, and the opportunities and risks of AI in the financial sector.

Expel: Firms Still Threatened by Old Vulnerabilities

Anna Delaney  •  August 2, 2023

According to Expel's Q1 2023 Quarterly Threat Report, criminals are exploiting 1- to 2-year-old vulnerabilities. This suggests organizations don’t know which vulnerabilities pose the biggest threats to their environments, said Andrew Hoyt, Expel's director of solution architecture.