CSO

The day's top cybersecurity news and in-depth coverage

CSO First Look

May 31, 2021

SolarWinds attacker Nobelium targets over 150 companies in new mass email campaign

The Russian state-sponsored group has shifted to targeted email attacks that exploit third-party services. Read more ▶

Image: 6 most common types of software supply chain attacks explained

6 most common types of software supply chain attacks explained

Not all software supply chain attacks are the same. Here are the methods attackers currently use to corrupt legitimate software through third parties.

TSA’s pipeline cybersecurity directive is just a first step experts say

The new, hastily announced security directive requires US pipeline companies to appoint a cybersecurity coordinator and report possible breaches within 12 hours.

HITRUST explained: One framework to rule them all

HITRUST is a cybersecurity framework that seeks to unify the rules for many other existing regulatory and industry frameworks, including HIPAA, GDPR, PCI-DSS, and more.

Image: How to prevent, detect, and defend against credential stuffing

How to prevent, detect, and defend against credential stuffing

Credential stuffing is the automated use of collected usernames and passwords to gain fraudulent access to user accounts.

New US CISO appointments, May 2021

Keep up with news of CSO, CISO and other senior security executive appointments.

CSO
Facebook Twitter LinkedIn
© 2021 CSO
140 Kendrick Street, Building B
Needham, MA 02494