Fighting For Dollars is Nothing New
Our Take
We mostly serve smaller organizations with limited budgets, so ‘struggling to get budgets’ is nothing new for us. In fact, we preach about this topic to anyone that’ll listen. And, this little nugget from the article below is unfortunately also true: “… extreme circumstances, such as a security incident or a major industry disruption, drove the budget increase.”
Until cyber spend is on par with other business priorities, we’ll keep fighting the good fight – on the network and in the boardroom.
CISOs are struggling to get cybersecurity budgets: Report
https://www.csoonline.com/article/653504/cisos-are-struggling-to-get-cybersecurity-budgets-report.html
This is our CINS Army Brief for September 2023, curating the most interesting cyber news from the previous month. Learn more and subscribe here.
- ‘Top’ ransomware gangs favor smaller businesses
https://www.computerweekly.com/news/366552858/Top-ransomware-gangs-favour-smaller-businesses - Why root causes matter in cybersecurity
https://www.fastcompany.com/90956820/why-root-causes-matter-in-cybersecurity - Hackers Trick Outlook Into Showing Fake AV Scans
https://www.darkreading.com/endpoint/hackers-abuse-zerofont-phishing-tactic-to-trick-outlook-into-showing-fake-av-scans - AI Regulation Debate Highlights Lack of Data Privacy Protection
https://www.govtech.com/artificial-intelligence/ai-regulation-debate-highlights-lack-of-data-privacy-protection - 4 Pillars for Building a Responsible Cybersecurity Disclosure Program
https://www.darkreading.com/risk/4-pillars-for-building-a-responsible-cybersecurity-disclosure-program - CISA task force aims to improve supply chain security with new hardware standards
https://www.nextgov.com/cybersecurity/2023/09/cisa-task-force-aims-improve-supply-chain-security-new-hardware-standards/390617/ - Many firms aren’t reporting breaches to the proper authorities
https://www.techradar.com/pro/security/many-firms-arent-reporting-breaches-to-the-proper-authorities - Shadow IT: Security policies may be a problem
https://www.helpnetsecurity.com/2023/09/20/shadow-it-security-policies/ - IoT startups fill security gaps
https://www.networkworld.com/article/3707070/iot-startups-fill-security-gaps.html - NCSC: Why Cyber Extortion Attacks No Longer Require Ransomware
https://www.darkreading.com/dr-global/ncsc-why-cyber-extortion-attacks-no-longer-require-ransomware - Cybercriminals come for schools — and schools aren’t ready
https://hechingerreport.org/cybercriminals-come-for-schools-and-schools-arent-ready/ - What Cybersecurity Gets Wrong
https://www.informationweek.com/cyber-resilience/copy-of-what-cybersecurity-gets-wrong - 7 dark secrets of generative AI
https://www.cio.com/article/651570/7-dark-secrets-of-generative-ai.html - White House mulls rating system to boost cybersecurity for critical infrastructure
https://www.cybersecuritydive.com/news/white-house-rating-cybersecurity-critical-infrastructure/693261/ - The evolving role of the CIO in the era of AI
https://www.fastcompany.com/90947798/the-evolving-role-of-the-cio-in-the-era-of-ai - VPN privacy: more than 70% of providers are breaching GDPR
https://www.techradar.com/pro/vpn/more-than-70-percent-of-vpn-providers-are-breaching-gdpr - As LotL Attacks Evolve, So Must Defenses
https://www.darkreading.com/vulnerabilities-threats/as-lotl-attacks-evolve-so-must-defenses