Microsoft President and Chief Legal Officer Brad Smith speaks at the 2018 RSA Conference. (Photo: Mathew Schwartz)

'Tech Accord' Emphasizes Teamwork to Prevent Hacking Damage

Jeremy Kirk • April 19, 2018

Thirty-four companies have signed on to the Microsoft-led Cybersecurity Tech Accord, which is aimed at protecting civilians from cybercriminal and state-sponsored attacks. The agreement crucially includes a pledge not to help governments with cyberattacks

Cyberwarfare / Nation-state attacks

RSA Conference Preview: More Video Interviews in 2018

Latest

Artificial Intelligence & Machine Learning

Machine Learning and the Skills Gap

Tom Field • April 19, 2018

We have been talking about the cybersecurity skills gap for a decade, but the pain is truly being felt now as businesses churn out new apps with insufficient security, says WhiteHat Security's Craig Hinkley. What is machine learning's role?

Breach Preparedness

4 Telcos Form Cybersecurity Alliance: What Will Impact Be?

Suparna Goswami • April 18, 2018

Security experts are weighing in on whether a new alliance of four competing telecom companies formed to offer a portfolio of cybersecurity services will prove successful.

Cyberwarfare / Nation-state attacks

Preparing for Mid-Term Elections

Tom Field • April 18, 2018

Stung by signs of Russian influencing of the 2016 presidential election, the FBI is working with social media companies to bolster cybersecurity in advance of the 2018 mid-term election. Elvis Chan of the FBI describes these efforts.

Fraud

The Total Cost of Fraud

Tom Field • April 18, 2018

Rob Rendell spent more than a decade in financial services. Now he has joined IBM Trusteer to help financial institutions fight fraud. How will his experience help his customers get their arms around the total cost of fraud?

Risk Management

Managing Third-Party Risks

Nick Holland • April 18, 2018

Managing third-party risks is more critical than ever, says Tom Turner of BitSight Technologies, who discusses the urgency of communicating that to the board.

Artificial Intelligence & Machine Learning

The 'New Science' of Cybersecurity

Nick Holland • April 18, 2018

What is the "new science" of cybersecurity? Khiro Mishra and Don Gray of NTT Security describe the approach.

Artificial Intelligence & Machine Learning

The Power of AI and ML to Fight Fraud

Tom Field • April 18, 2018

For the past year, the buzz about artificial intelligence and machine learning has been overwhelming. But Ricardo Villadiego of Cyxtera sees promise in how these technologies can help organizations fight back against fraudsters.

Application Security

Mitigating Open Source Security Vulnerabilities

Varun Haran • April 18, 2018

Organizations are increasingly incorporating open source code elements into their software development to accommodate agile development methodologies and swift go-to-market requirements, but not many are addressing the security concerns that follow, says CA Veracode CTO Chris Wysopal.

Cyberwarfare / Nation-state attacks

Assessing the Nation-State Threat

Tom Field • April 17, 2018

While U.S. agencies and enterprises increasingly understand the nation-state cyber threat, they are woefully unprepared to respond to a sustained attack, says former State Department adviser Morgan Wright. What are we overlooking?

CISO

Why Diversity Matters

Tom Field • April 17, 2018

When it comes to building an effective cybersecurity team, it isn't just about acquiring the right technology and business skills, says LinkedIn CISO Cory Scott. It's also about obtaining the right people who have defined their own personal narrative.

Fraud Management, Cybercrime

Battling Social Engineering Attacks

Mathew J. Schwartz • April 17, 2018

Social engineering attacks, including ransomware, business email compromise and phishing, are a problem that can never be solved, but rather only managed via a continued focus on security awareness training, says Stu Sjouwerman, CEO of KnowBe4.

Cybersecurity

Talking Security: How to Avoid the FUD Trap

Tom Field • April 17, 2018

It's a quandary: How does one convey the urgency of cybersecurity without falling into the trap of spreading fear, uncertainty and doubt? Diana Kelley, cybersecurity field CTO at Microsoft, shares strategies.