# Business Security Cybersecurity risk management for businesses. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## How Confluent Uses Third-Party Risk Assessments to Support Vendor Due Diligence DevFeed: [How Confluent Uses Third-Party Risk Assessments to Support Vendor Due Diligence]() Original publisher: [Read original article]() Author: Bethany Carter Published: 2026-09-15T16:40:06Z Content type: article Language: en Sources: [Confluent: Data in motion]() Topics: [Security](), [Business Security](), [vulnerability management](), [Cloud]() Tags: [apra](), [automated](), [cloud](), [compliance](), [confluent](), [confluent-cloud](), [data-protection](), [gdpr](), [identity](), [iso](), [nist](), [security](), [standards](), [third-party](), [trust-center](), [vulnerability-management]() ### AI overview Confluent explains how its Trust Center provides third-party risk assessment reports to support vendor security, resilience, compliance, procurement, and customer due diligence. The article describes assessments including ProcessUnity Global Risk Exchange and control mapping to customer frameworks. ### Source excerpt Confluent's Trust Center simplifies vendor risk reviews with CyberGRX, CyberVadis, SIG, CAIQ, and TruSight/KY3P assessments. ## AI floods security teams with flaws -- business context sets priorities DevFeed: [AI floods security teams with flaws -- business context sets priorities]() Original publisher: [Read original article]() Author: Megan Carnegie Published: 2026-09-10T12:00:00Z Content type: article Language: en Sources: [The New Stack]() Topics: [vulnerability](), [Cybersecurity](), [Business Security]() Tags: [ai](), [business](), [cloud-services](), [i-o-mergent](), [post](), [security](), [sponsor-i-o-mergent](), [sponsored](), [sponsored-post](), [vulnerability]() ### AI overview The article argues that security teams should prioritize vulnerabilities using business context rather than scanner severity alone, because automated findings can overwhelm limited engineering capacity. ### Source excerpt A security researcher testing a 300-person B2B company with a global footprint discovered an internet-exposed database with weak authentication during The post AI floods security teams with flaws -- business context sets priorities appeared first on The New Stack. ## How to build an exposure management program the business trusts: Lessons from Tenable's CSO DevFeed: [How to build an exposure management program the business trusts: Lessons from Tenable's CSO]() Original publisher: [Read original article]() Author: Robert Huber Published: 2026-08-27T14:30:00Z Content type: tutorial Language: en Sources: [Tenable Blog]() Topics: [Cybersecurity](), [Security & Privacy](), [Artificial Intelligence](), [data](), [Business Security]() Tags: [ai](), [blog](), [cybersecurity](), [data](), [enterprise](), [exposure-management](), [how-to](), [metrics](), [security](), [tools](), [visualization](), [workflows]() ### AI overview Tenable's article explains how an exposure management program can reduce security tool sprawl, unify fragmented security data, improve visibility across the attack surface, and connect cyber-risk metrics with business priorities. It also discusses the challenges of maintaining security and speed while organizations rapidly adopt AI. ### Source excerpt Discover how Tenable's shift to an AI-driven exposure management program helped Tenable's CSO, Robert Huber, overcome tool sprawl, unify data silos, mitigate the risk of rapid AI adoption, and shift from presenting granular, technical metrics to communicating business risk that the C-suite and the board can understand. Key takeaways Security tool sprawl and data silos make it difficult for CISOs to holistically and accurately assess their organizations' cyber risk. An exposure management program consolidates fragmented security data into a single unified view of cyber risk across the entire attack surface. Aided by exposure management, CISOs can align security metrics with business priorities and quantify risk for key revenue-generating business units, answering the board's main question: "Are we secure?" What is trust in cybersecurity? And more importantly, how do you earn it? Here's a hint: It's not easy, especially in this AI era. As the Chief Security Officer at Tenable, my mandate is to ensure our organization operates securely, but with the speed required to succeed in a very competitive business environment. In recent years, achieving this delicate balance -- an agile yet cyber secure business -- had become progressively more difficult, as we grappled with increasingly fragmented data, siloed teams, and security tool sprawl. In this blog, I'll explain how exposure management helped my team: Tackle security tool sprawl Bridge operational and data silos Take a more proactive approach to security Attain visibility and control over Tenable's attack surface Continuously and precisely assess our cyber risk posture The operational impact of security data silos and tool sprawl For years, the cybersecurity industry's answer to every new threat or policy mandate was simple: Buy another tool, which in many -- maybe most -- organizations resulted in a bad case of tool sprawl. A typical large enterprise might juggle 70 or more security technology vendors, each promising to so ## A letter to the Discord community in Brazil DevFeed: [A letter to the Discord community in Brazil]() Original publisher: [Read original article]() Author: Stanislav Vishnevskiy Published: 2026-08-17T00:00:00Z Content type: article Language: en Sources: [Discord Blog]() Topics: [Discord](), [Business Security]() Tags: [brazil](), [developers](), [discord](), [features](), [video]() ### AI overview Discord explains that it is complying with an order from Brazil's National Data Protection Authority to suspend screensharing and video calls for Brazilian users. The letter discusses efforts to restore access, cooperation with authorities, and the impact on Brazil's communities, gamers, developers, and small businesses. ### Source excerpt On the order from Brazil's ANPD to suspend screensharing and video features in the country, how we're complying, and our commitment to our community in Brazil. ## Canon 3X: Explore/Expand/Extract DevFeed: [Canon 3X: Explore/Expand/Extract]() Original publisher: [Read original article]() Author: Kent Beck Published: 2026-07-30T13:04:07Z Content type: opinion Language: en Sources: [Software Design: Tidy First?]() Topics: [implementation](), [risk-management](), [Finance](), [Business Security]() Tags: [implementation](), [management](), [project-management](), [risk-management]() ### AI overview Kent Beck explains the 3X framework of Explore, Expand, and Extract, arguing that each phase of a product or company's growth requires different approaches to finance, teams, project management, technology, risk management, implementation, marketing, and sales. ### Source excerpt I've started a series of Canon articles where I explain my ideas as plainly & unambiguously as possible--no analogies, no persuasion, just the facts. ## The foundation of security compliance for financial services businesses DevFeed: [The foundation of security compliance for financial services businesses]() Original publisher: [Read original article]() Author: info@1password.com (Rachel Sudbeck) Published: 2026-06-16T00:00:00Z Content type: article Language: en Sources: [Blog on 1Password Blog]() Topics: [Security](), [Business Security](), [Software as a service](), [Cybercrime](), [Artificial Intelligence]() Tags: [2026](), [ai](), [attacks](), [business](), [compliance](), [financial-services](), [ransomware](), [saas](), [security]() ### AI overview This article explains why small and medium-sized financial services businesses need a strong security and compliance foundation. It highlights rising cyberattack and ransomware risks, limited security resources, credential management challenges, and the way AI adoption can increase SaaS sprawl, shadow IT, policy violations, and attack sophistication. ### Source excerpt One of the less surprising findings of the 2026 Verizon Data Breach Incident Report (DBIR) is the fact that incidents targeting the Financial and Insurance sector are on the rise. As they put it, "This sector continues to be a favorite among attackers, which isn't surprising given that its core business is handling money." For small-to-medium businesses (SMBs) in the financial services sector, the DBIR paints an even more dire picture. The report notes that SMBs face the same threats and breach patterns of larger organizations, but are also disproportionately impacted by attacks; 96% of ransomware victims were SMBs. In short: businesses in the financial services industry who are still building their foundation, or who possess limited security resources, are caught between a rock and a hard place. They operate within one of the most heavily targeted sectors for cyberattack, and are held to enterprise-level security standards by regulators and clients alike, but they're operating with startup-level security resources. For lean security and IT teams to make the most of those limited resources, they need to focus on what they can afford. That means getting the fundamentals right for a strong and impactful security foundation. The highest-leverage fundamental is, of course, credential management. Top security challenges for financial services organizations Small IT and security teams in the financial services industry are faced with high expectations when it comes to security. Unfortunately, they also experience significant challenges when it comes to securing credentials. AI is accelerating SaaS and credential sprawl JP Morgan Chase's recent research report, Understanding the use of AI among small businesses, finds that not only are a growing number of small businesses adopting AI, when they do, they also tend to implement a greater number and variety of AI tools. It's not hard to understand why this is the case; AI's ability to automate processes and improve productivi ## Unpacking SMB cyber-readiness - and what makes or breaks it DevFeed: [Unpacking SMB cyber-readiness - and what makes or breaks it]() Original publisher: [Read original article]() Author: Tomáš Foltýn Published: 2026-06-10T09:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Cybersecurity](), [Business Security](), [Resilience](), [incident](), [Security & Privacy]() Tags: [awareness](), [breach](), [business](), [business-security](), [canada](), [compliance](), [cybersecurity](), [europe](), [incident](), [japan](), [resilience](), [survey](), [training](), [us]() ### AI overview The article examines SMB cyber-readiness through findings from the ESET SMB Cyber Readiness Index 2026. It reports that 45% of surveyed SMBs experienced a cyber-incident in the previous twelve months, while many respondents expressed confidence in their resilience. The article highlights a persistent gap between perceived preparedness and basic precautions, with insurance requirements, compliance pressure, and cybersecurity awareness training helping organizations prepare. ### Source excerpt A company that's expecting a cyberattack but hasn't actively prepared for it risks making the hardest decisions at the worst possible moment ## Cybercriminals: the 'auditors' you never hired DevFeed: [Cybercriminals: the 'auditors' you never hired]() Original publisher: [Read original article]() Author: Steven Connolly Published: 2026-06-09T08:50:00Z Content type: opinion Language: en Sources: [WeLiveSecurity]() Topics: [Business Security](), [Security & Privacy](), [Cybersecurity]() Tags: [blog-post](), [breach](), [business](), [business-security](), [cybersecurity]() ### AI overview The article examines normalcy bias in cybersecurity and argues that organizations may mistake the absence of obvious alerts for safety. It connects delayed responses and normalized breach risk with the continued rise in significant cyber incidents, citing figures from the NCSC Annual Review 2025. ### Source excerpt Every organisation gets audited. The question is who does the auditing. ## Why security makes or breaks M&As, with Matt O'Leary DevFeed: [Why security makes or breaks M&As, with Matt O'Leary]() Original publisher: [Read original article]() Author: info@1password.com (Dave Lewis) Published: 2026-05-06T00:00:00Z Content type: article Language: en Sources: [Blog on 1Password Blog]() Topics: [Security](), [Cybersecurity](), [Business Security](), [Security & Privacy]() Tags: [acquisition](), [business](), [corporate](), [cybersecurity](), [deals](), [engineering](), [leadership](), [podcasts](), [product-engineering](), [security]() ### AI overview This Chasing Entropy episode examines how security diligence affects acquisitions and strategic partnerships. Matt O'Leary explains that companies inherit a target's technology, processes, legal exposure, and security weaknesses, making serious technology or cybersecurity risks potential deal breakers. The discussion also covers partnership risk, shared trust, and the need to align corporate development with product, engineering, and security leadership. ### Source excerpt Listen to this episode on Apple Podcasts null Listen now Listen to this episode on Spotify null Listen now Security is tied to business operations in many (often unappreciated) ways, but the connection is rarely more visible or consequential than during an acquisition or partnership. In those deals, a company stakes its reputation and finances on another company, and a lapse in security can throw the whole thing into chaos. That's the subject of this episode of Chasing Entropy, in which Dave Lewis talks with Matt O'Leary, 1Password's Vice President of Corporate Development and Strategic Partnerships. They discuss what changes about M&As and partnerships when security is tied directly to the product, the brand, and the deal itself. Caveat emptor in M&As O'Leary's core idea is simple: when a company makes an acquisition, it inherits the whole business, not just the part that looked attractive in the pitch. That includes the technology, the team, the process gaps, the legal exposure, and any security weaknesses that were not obvious at first glance. O'Leary makes the case that strong dealmaking starts with risk discipline, because a transaction only creates value if the company can integrate what it buys without importing problems that slow everything down. He also explains that good corporate development starts with the roadmap, not the deal. An acquisition makes sense when it helps the company move faster than building on its own. That is why corp dev has to stay tightly aligned with product, engineering, and security leadership. In a cybersecurity company, technical diligence carries extra weight. If a target has a serious security or technology issue, that is not a detail to clean up later. It is a reason to walk away. Go as deep as you possibly can, before you cut the proverbial check...If there is any major issue with the technology, if there is any significant exposure to cybersecurity risks in a company we are targeting, those are deal killers." - Matt O'Leary Th ## Supply chain dependencies: Have you checked your blind spot? DevFeed: [Supply chain dependencies: Have you checked your blind spot?]() Original publisher: [Read original article]() Author: Tony Anscombe Published: 2026-04-16T12:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Resilience](), [Business Security](), [Cybersecurity](), [Vulnerabilities](), [data]() Tags: [business](), [business-security](), [compliance](), [customer](), [cybersecurity](), [data](), [exploits](), [operations](), [outage](), [resilience](), [software](), [supply-chain](), [vulnerabilities]() ### AI overview The article examines supply chain dependencies as hidden sources of cyber and business risk for small and medium-sized businesses. It explains how third-party vulnerabilities, malicious attacks, and operational outages can disrupt operations and cause financial, reputational, legal, compliance, and data-related harm. It recommends mapping dependencies and strengthening resilience and business continuity. ### Source excerpt Your biggest risk may be a vendor you trust. How can SMBs map their third-party blind spots and build operational resilience? ## A cunning predator: How Silver Fox preys on Japanese firms this tax season DevFeed: [A cunning predator: How Silver Fox preys on Japanese firms this tax season]() Original publisher: [Read original article]() Author: Dominik Breitenbacher Takahiro Sajima Published: 2026-03-27T07:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Cybersecurity](), [Threat Research](), [Social engineering](), [spoofing](), [Business Security]() Tags: [awareness](), [business](), [business-security](), [cybersecurity](), [finance](), [government](), [japan](), [phishing](), [spoofing]() ### AI overview Silver Fox is conducting a targeted spearphishing campaign against Japanese manufacturers and other businesses during tax-filing and organizational-change season. The attackers use convincing tax- and HR-themed emails, links, and attachments to exploit expected business communications and increase the likelihood of compromise. ### Source excerpt Silver Fox is back in Japan, spoofing tax and HR emails timed to the one season when no one thinks twice about opening them ## What cybersecurity actually does for your business DevFeed: [What cybersecurity actually does for your business]() Original publisher: [Read original article]() Author: Tomáš Foltýn Published: 2026-03-06T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Cybersecurity](), [Business Security](), [Security & Privacy](), [Security](), [Processes]() Tags: [business](), [business-security](), [cost](), [cybersecurity](), [processes](), [security]() ### AI overview The article explains that cybersecurity quietly protects business continuity through processes and controls that prevent technical incidents from becoming business crises. It examines the difficulty of proving security's value when nothing goes wrong, especially as security budgets face competing priorities and declining growth. The article argues that focusing only on avoided disasters understates security's everyday role and can encourage risky conclusions from limited past success. ### Source excerpt The ability to continue operating safely in an unsafe environment where competitors cannot is a competitive advantage that is rarely measured or discussed ## How SMBs use threat research and MDR to build a defensive edge DevFeed: [How SMBs use threat research and MDR to build a defensive edge]() Original publisher: [Read original article]() Author: Ben Tudor Published: 2026-03-05T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Threat Research](), [Cybersecurity](), [SOC](), [Monitoring](), [Business Security]() Tags: [business](), [business-security](), [conferences](), [cybersecurity](), [monitoring](), [operations](), [publications](), [research](), [security](), [small-business](), [soc](), [threat-research]() ### AI overview The article explains how small and midsize businesses can use managed detection and response (MDR) to access proactive threat monitoring, hunting, and expert cybersecurity capabilities without building an elite in-house SOC. It also describes how threat research and intelligence inform MDR workflows, combining advanced technology with human expertise. ### Source excerpt We speak to Director of ESET Threat Research Jean-Ian Boutin about where solutions that blend advanced technology with human expertise provide the most practical value for businesses ## Locks, SOCs and a cat in a box: What Schrödinger can teach us about cybersecurity DevFeed: [Locks, SOCs and a cat in a box: What Schrödinger can teach us about cybersecurity]() Original publisher: [Read original article]() Author: Steven Connolly Published: 2025-12-11T10:00:00Z Content type: opinion Language: en Sources: [WeLiveSecurity]() Topics: [Cybersecurity](), [Monitoring](), [Threat Hunting & Intel](), [Business Security]() Tags: [business-security](), [cybersecurity](), [marketing](), [monitoring](), [security](), [strategy]() ### AI overview The article uses Schrödinger's cat as an analogy for the uncertainty facing organisations that lack visibility into their security environment. It argues that organisations should assume threats may already be present and strengthen their cybersecurity strategy through internal threat hunting, monitoring, and appropriate security tools. ### Source excerpt If you don't look inside your environment, you can't know its true state - and attackers count on that ## Oversharing is not caring: What's at stake if your employees post too much online DevFeed: [Oversharing is not caring: What's at stake if your employees post too much online]() Original publisher: [Read original article]() Author: Phil Muncaster Published: 2025-12-01T10:00:00Z Content type: article Language: en Sources: [WeLiveSecurity]() Topics: [Business Security](), [Social engineering](), [Cybersecurity](), [GitHub](), [Malware]() Tags: [business](), [cybersecurity](), [developers](), [github](), [phishing](), [social-engineering](), [social-media](), [work]() ### AI overview The article explains how employees' work-related posts on LinkedIn, GitHub, Instagram, X, and company websites can expose corporate information. Threat actors may use details about roles, relationships, technologies, repositories, events, vendors, and business activity to build convincing spearphishing or business email compromise attacks that steal credentials or deliver malware. ### Source excerpt From LinkedIn to X, GitHub to Instagram, there are plenty of opportunities to share work-related information. But posting could also get your company into trouble. ## Zero Trust VPN and networking guide for business security teams DevFeed: [Zero Trust VPN and networking guide for business security teams]() Original publisher: [Read original article]() Published: 2025-09-23T18:03:01Z Content type: tutorial Language: en Sources: [Learn on Tailscale]() Topics: [zero trust networking](), [Virtual Private Network](), [Security](), [Business Security](), [tailscale](), [Authorization](), [Single sign-on (SSO)](), [okta](), [Google](), [Microsoft]() Tags: [authorization](), [entra-id](), [google](), [implementation](), [networking](), [okta](), [security](), [teams](), [vpn](), [zero-trust]() ### AI overview This guide explains Zero Trust networking as an approach that verifies users and devices for each access request, applies least privilege and segmentation, and limits lateral movement. It compares this model with traditional VPN access and describes how Tailscale uses identity, device posture, authorization, SSO, and SSH features to support Zero Trust principles. ### Source excerpt Learn how Zero Trust works and why it beats traditional VPNs for business security. Get implementation tips, compare solutions, and discover how to limit access without killing productivity. ## The Human Side of Cybersecurity: Lessons From Yahoo's Director of Security GRC DevFeed: [The Human Side of Cybersecurity: Lessons From Yahoo's Director of Security GRC]() Original publisher: [Read original article]() Author: ZOHRA IBRAHIMI, INFORMATION SECURITY PRACTICE LEAD @ TOPTAL Published: 2025-01-12T23:00:00Z Content type: article Language: en Sources: [Toptal Blog]() Topics: [Cybersecurity](), [Security & Privacy](), [Business Security](), [Artificial Intelligence]() Tags: [ai](), [business](), [communication](), [compliance](), [culture](), [cybersecurity](), [enterprise](), [executive](), [governance](), [leadership](), [podcast](), [regulatory](), [security](), [speakers](), [strategy]() ### AI overview This Executive Guidance podcast episode examines the human side of cybersecurity leadership. Steven Asifo of Yahoo and Zohra Ibrahimi of Toptal discuss how clarity, communication, culture, governance, risk management, and compliance can help security leaders support business goals while reducing cyber risk, including in regulated and AI-enabled environments. ### Source excerpt As organizations face growing cyber risk and regulatory pressure, security leaders are being asked to do more than protect systems: They must enable the business. In this episode of the Executive Guidance podcast, Steven Asifo, Director of Security GRC at Yahoo, joins Zohra Ibrahimi, Toptal's Information Security Practice Lead, to discuss how clarity, communication, and culture are redefining modern security leadership. ## Empowering women in security: The impact of mentorship DevFeed: [Empowering women in security: The impact of mentorship]() Original publisher: [Read original article]() Author: Erin Cullen Published: 2024-11-27T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Cybersecurity](), [Security](), [Business Security]() Tags: [awareness](), [blog](), [career-development](), [career-growth](), [ciso](), [collaboration](), [community](), [cybersecurity](), [developer](), [industry](), [megawatt](), [security](), [series](), [snyk]() ### AI overview This article explores how mentorship and allyship can help women enter and advance in cybersecurity. It highlights supportive leaders, non-traditional career paths, advocacy for promotions and raises, and the importance of confidence, collaboration, and professional networks in building a more inclusive security community. ### Source excerpt In the Women Leading Security series, Snyk CMO Jonaki Egenolf spoke with influential leaders about challenges and opportunities in the journey toward a more inclusive cybersecurity industry. ## Latacora Partners with Vanta as a Managed Service Provider DevFeed: [Latacora Partners with Vanta as a Managed Service Provider]() Original publisher: [Read original article]() Published: 2024-09-09T16:30:00Z Content type: release Language: en Sources: [Latacora]() Topics: [Security](), [soc 2 compliance](), [trust](), [Business Security](), [Incident response]() Tags: [automation](), [compliance](), [incident-response](), [partner](), [security](), [soc-2-compliance](), [trust](), [vanta]() ### AI overview Latacora announces a partnership with Vanta as a managed service provider. The arrangement combines Latacora's security expertise with Vanta's compliance platform and offers monthly billing, extended compliance support, and planned integrations. ### Source excerpt Exciting news! Latacora is teaming up with Vanta to supercharge your compliance game. We now combine Latacora's security expertise with Vanta's compliance platform to help you reach your compliance goals faster than ever. As a Vanta managed service provider (MSP), Latacora can help you tackle your compliance goals quickly and efficiently, freeing you to focus on growing your business and building trust with your customers. Here's the scoop on why using Vanta through Latacora is a game-changer: ## Snyk AppRisk Pro: A holistic approach to application risk management DevFeed: [Snyk AppRisk Pro: A holistic approach to application risk management]() Original publisher: [Read original article]() Author: Daniel Berman Published: 2024-05-01T12:55:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [snyk-apprisk](), [Application Security](), [Security](), [Business Security](), [data analytics](), [Architecture & Design](), [developer-productivity](), [Development](), [dynatrace](), [Backstage](), [API]() Tags: [acquisition](), [analytics](), [api](), [application-security](), [aspm](), [backstage](), [blog](), [convert-paid](), [developer-productivity](), [development](), [devops](), [dynatrace](), [enablement](), [executive](), [gitguardian](), [measurement](), [observability](), [pmm](), [reporting](), [security](), [snyk](), [snyk-apprisk]() ### AI overview Snyk announces Snyk AppRisk Pro, an application security posture management offering for managing and scaling application security programs. It combines application visibility and discovery, security coverage management, and risk-based prioritization with runtime intelligence, developer-context integrations, extended security coverage, and application analytics for tracking program performance and risk. ### Source excerpt Find out how Snyk AppRisk Pro, our application security posture management (ASPM) solution, is designed to empower your application risk management programs. ## How Executives Can Use Threat Modeling DevFeed: [How Executives Can Use Threat Modeling]() Original publisher: [Read original article]() Author: Adam Published: 2022-03-18T00:00:00Z Content type: tutorial Language: en Sources: [Shostack & Friends Blog]() Topics: [Cybersecurity](), [Security & Privacy](), [Business Security]() Tags: [ceo](), [cybersecurity](), [leadership]() ### AI overview This article explains how executives can use threat modeling to make more informed business and cybersecurity decisions. It defines threat modeling as a structured process for identifying what could go wrong, deciding how to respond, and reviewing whether the response was effective. It introduces a four-question framework and illustrates it with a smartphone software update example. ### Source excerpt You don't have to be technical, but you can't make informed decisions about your business without threat modeling. ## Infrastructure Access Considerations for Financial Services DevFeed: [Infrastructure Access Considerations for Financial Services]() Original publisher: [Read original article]() Author: info@goteleport.com (Carlos Mena) Published: 2021-12-22T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Cybersecurity](), [Cybercrime](), [Security Attacks](), [Business Security](), [Security](), [soc2]() Tags: [attacks](), [banking](), [breach](), [cybersecurity](), [financial-services](), [infrastructure](), [security-incidents](), [soc2]() ### AI overview This blog discusses cybersecurity threats facing Financial Services companies, including increasing attacks, data breaches, financial losses, and the time required to detect and contain incidents. It focuses on infrastructure access considerations and measures companies can take to address these risks. ### Source excerpt This blog presents data highlighting the threat that Financial Services companies face due to insecure infrastructure and what they can do about it. ## Recommended Reads on IT Security, Cybersecurity, and Organizational Resilience DevFeed: [Recommended Reads on IT Security, Cybersecurity, and Organizational Resilience]() Original publisher: [Read original article]() Author: Adam Published: 2017-08-14T00:00:00Z Content type: article Language: en Sources: [Shostack & Friends Blog]() Topics: [IT\_Security](), [Cybersecurity](), [Business Security](), [risk-management]() Tags: [culture](), [it-security](), [management](), [risk](), [risk-management](), [security](), [weather]() ### AI overview A curated selection of long, thought-provoking reads covering IT security, cybersecurity risk management for the U.S. government, and company culture for handling failure. ### Source excerpt Each of these is long and thought-provoking and worth savoring. ## Introducing Cyber Portfolio Management DevFeed: [Introducing Cyber Portfolio Management]() Original publisher: [Read original article]() Author: Adam Published: 2017-02-21T00:00:00Z Content type: opinion Language: en Sources: [Shostack & Friends Blog]() Topics: [risk-management](), [Security](), [Business Security]() Tags: [challenges](), [communication](), [management](), [portfolio](), [risk-management](), [security](), [strategy](), [talk]() ### AI overview The article introduces Cyber Portfolio Management, a proposed approach to driving effective security programs by managing distributed security portfolios and improving communication between security and business teams. It also discusses a related RSA talk, audio and slides, and an upcoming ebook draft. ### Source excerpt [no description provided] [Next page]()