Content by Tom Field

Privacy Predictions for 2022: Laws, Flaws and Enforcement

Tom Field  •  December 29, 2021

In the U.S., three states now have disparate data privacy laws - and more are coming. Meanwhile, China has enacted a new law that has global enterprises scrambling. How will these and other actions shape privacy discussions in 2022? Noted attorney Lisa Sotto shares insights.

Zero Trust: John Kindervag's 2022 Outlook and Predictions

Tom Field  •  December 28, 2021

On the cusp of 2022, John Kindervag - the father of the Zero Trust security model - reflects on how the Zero Trust dialogue has evolved in 2021 and makes his New Year's predictions. Will the president's executive order be an accelerator or an anchor? Which myths are ripe to be busted?

Profiles in Leadership: Marco Túlio

Tom Field  •  December 16, 2021

From the rain forest of northern Brazil to the business hub of Sao Paulo, Marco Túlio has built an impressive career in cybersecurity. He discusses the opportunity and challenge of enabling people to step up, succeed and eventually rise to be leaders in their own right.

Attackers Exploiting Apache Log4j: 'Everyone Is a Target'

Tom Field  •  December 15, 2021

What's in store for defenders as attackers increasingly try to target the ubiquitous Apache Log4j vulnerability? "Everyone is a target," says veteran cybersecurity leader Etay Maor, whose team at Cato Networks has been analyzing hundreds of attacks that already attempt to exploit the flaw.

CISO Playbook: Dawn Cappelli on Mitigating Log4j Zero-Day

Tom Field  •  December 14, 2021

Like CISOs everywhere, Dawn Cappelli of Rockwell Automation awoke last Friday to news about the Log4j vulnerability and the risk it posed to her company, customers and partners. Here is how she approached triage, response and capturing insights to be shared with other security leaders.

COVID-19: How Does Omicron Change the Discussion?

Tom Field  •  December 13, 2021

As of Dec. 13, the U.K. is facing a "tidal wave" of infections from the COVID-19 Omicron variant, and case numbers are rising in North America as well. What do health experts know so far about the spread and severity of Omicron infections? Pandemic expert Regina Phelps shares insights.

Log4j Zero-Day: 'It's About as Serious as It Gets'

Tom Field  •  December 11, 2021

How serious is the Apache Log4j zero-day vulnerability that was announced to the world on Friday? "It's big," says Sam Curry, chief security officer at Cybereason, which has developed a "vaccine" to help. "I hate hyperbole generally," Curry says. "But it is a 10 on the criticality scale."

Profiles in Leadership: Jason Fruge

Tom Field  •  December 9, 2021

Once, in another role, Rent-A-Center CISO Jason Fruge was asked by senior management to develop a "security scorecard," but he resisted. What were his objections, and how did he address them? Fruge explains in this exclusive leadership discussion.

ISMG's King Appointed to Forbes Technology Council

Tom Field  •  December 8, 2021

Steve King, director of cybersecurity advisory services for ISMG's CyberTheory, has just been appointed a member of the Forbes Technology Council. He discusses the role, his passion for Zero Trust and new initiatives to expect from CyberTheory in 2022.

Ransomware: How to Win the Battle

Tom Field  •  November 24, 2021

Ransomware attackers commonly bypass traditional email gateways, targeting people directly to gain access to a company's systems. The answer? Replace these porous controls with a people-centric security strategy, says Matt Cooke of Proofpoint.

Ransomware Attackers: 'No Days Off!'

Tom Field  •  November 19, 2021

We know they are coming, and yet we are still ill-prepared. Cybereason surveyed 1,200 global cybersecurity professionals on ransomware. And while most are concerned about attacks, nearly one-quarter have no contingencies for weekends and holidays - the favored strike time. Sam Curry explains why.

Cybersecurity Leadership: Cut Through the Zero Trust Hype

Tom Field  •  November 11, 2021

Zero Trust: Is it the operational model that's going to propel us into a more secure future? Or just another marketing message to be tossed onto the pile of past campaigns? In this latest Cybersecurity Leadership panel, the top minds in the sector weigh in on the present and future of Zero Trust.

The Geography of Cryptocurrency

Tom Field  •  October 27, 2021

Where is cryptocurrency being adopted most broadly? Where are scams emerging, and where is there growing grassroots support? These are among the questions answered by the Chainalysis 2021 Global Cryptocurrency Adoption report. Researcher Kimberly Grauer shares findings and analysis.

Fraud Transformation: Balancing Business and Customer Needs

Tom Field  •  October 11, 2021

More than two-thirds of survey respondents say they take a balanced approach - business, customers and compliance - investing in fraud prevention technology. So, why do they also report customer friction among their top challenges? BioCatch's Raj Dasgupta analyzes the results of the new Fraud Transformation Survey.

Profiles in Leadership: Peter Gregory

Tom Field  •  September 30, 2021

Of all the areas under his direction - business continuity, GRC, data governance - third-party risk is the most challenging, says Peter Gregory, senior director of cyber GRC at GCI General Communications Inc. "Their breach is my breach," he says, offering mitigation advice.