CSO Update

Mar 06, 2018

10 questions to answer before running a capture the flag (CTF) contest

Running your own CTF contest can build security skills and help identify new internal and external talent. Learn what types of challenges you need to include, how to make the contest run smoothly, and other logistics to consider. Read More ▶

Your Must-Read Stories

•	SEC's new cybersecurity guidance falls short

•	Is your defensive security data-driven?

•	NY DFS, NIST and NAIC align on multi-factor authentication in financial services

•	Sometimes encryption can actually make you less secure

•	Has responsible disclosure won the debate?

•	Salted Hash Ep 21: Scammers targeting Office 365 and DocuSign

White Paper: NetApp

All-Flash Storage Competitive Comparison: NetApp AFF vs. Pure Storage FlashArray//M

Not all flash storage architectures are created equal. Read this vendor comparison report and learn about the differences between solutions from NetApp and Pure and how to find the best all-flash arrays to meet your business needs. Read More ▶

SEC's new cybersecurity guidance falls short

Post Equifax, those who hoped that the US Securities and Exchange Commission would impose tougher rules (and consequences for breaking them) around reporting breaches will be disappointed. Read More ▶

Is your defensive security data-driven?

Data-driven defense uses an organization's own data to identify and mitigate the most important threats. Sounds good, but adoption will be met with resistance. Read More ▶

NY DFS, NIST and NAIC align on multi-factor authentication in financial services

The actions taken by the New York DFS, NIST and NAIC reinforce the need for financial services – and all enterprises for that matter – to leverage modern technologies to protect sensitive information. Read More ▶

Sometimes encryption can actually make you less secure

In an age where advanced analytics to detect a sophisticated attack is often the only chance of heading off substantial harm, encrypting SMB is akin to taking one step forward and 50 steps back. Read More ▶

Has responsible disclosure won the debate?

The debate in the security community about disclosure shows no signs of abating. This article explores both sides of the argument and puts forward suggestions for organizations looking to improve their transparency and responsiveness towards externally discovered vulnerabilities. Read More ▶

Salted Hash Ep 21: Scammers targeting Office 365 and DocuSign

Welcome back! Salted Hash is gearing up to shoot our next season, as well as other segments in April during the RSA Conference, but this week we're going to chat with Asaf Cidon, vice president of email security services at Barracuda. Read More ▶

eBook: NetApp

Cloud-Integrated Backup: How to Save Money and Increase Efficiency

This easy to read eBook examines the benefits of cloud backup solutions and features examples of companies that are using cloud storage to reduce costs and increase operational efficiency. Read More ▶

CSO Insider

1.	GDPR and the "right to explanation"
2.	The two most important ways to defend against security threats
3.	11 tips for prioritizing security spending
4.	7 threat modeling mistakes you're probably making
5.	Mastering email security with DMARC, SPF and DKIM

Editor's Picks

1.	What is cryptojacking? How to prevent, detect, and recover from it
2.	How to approach a Zero Trust security model for your enterprise
3.	4 reasons forensics will remain a pillar of cybersecurity
4.	What's new in Windows 10 security features: The anti-ransomware edition
5.	Facebook's free VPN acts like spyware to iOS users in the U.S.